Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Tox1cCoder/AgenticChatbot

https://github.com/Tox1cCoder/AgenticChatbot · scanned 2026-06-16 00:41 UTC (2 months, 1 week ago)

204 raw signals (0 security + 204 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 188 actionable findings from 1 signal source. 16 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
68.4
/100
Security checks
68
0 findings
System graph
68
100.0% cov · 188 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: high × excluding tests × Reset all
Severity: Critical 0 High 37 Medium 7 Low 128 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 188 Crowd 0 Layer: Software 26 Frontend 1 Security 40 Cicd 1 Quality 70 Api 50
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 68.4/100 with 100.0% coverage. It contains 5516 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 204 findings — concentrated in quality (86), api (50), security (40). Risk profile is high: 0 critical, 37 high, 7 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 37 of 188 actionable findings. 204 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph security auth conf 1.00 FastAPI DELETE `delete_conversation_ai_sdk` without auth dependency — app/api/ai_sdk.py:776
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/ai_sdk.py:776 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_conversation` without auth dependency — app/api/conversations.py:147
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/conversations.py:147 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_custom_agent` without auth dependency — app/api/custom_agents.py:96
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/custom_agents.py:96 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_document` without auth dependency — app/api/documents.py:471
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/documents.py:471 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `delete_task_plan` without auth dependency — app/api/task_plans.py:174
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/task_plans.py:174 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI DELETE `remove_server` without auth dependency — app/api/mcp.py:91
`@router.delete` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/mcp.py:91 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `toggle_server` without auth dependency — app/api/mcp.py:103
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/mcp.py:103 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_conversation_ai_sdk` without auth dependency — app/api/ai_sdk.py:752
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/ai_sdk.py:752 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_conversation` without auth dependency — app/api/conversations.py:134
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/conversations.py:134 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_custom_agent` without auth dependency — app/api/custom_agents.py:79
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/custom_agents.py:79 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PATCH `update_task_plan` without auth dependency — app/api/task_plans.py:128
`@router.patch` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/task_plans.py:128 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `<anonymous>` without auth dependency — app/api/ai_sdk.py:855
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/ai_sdk.py:855 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `<anonymous>` without auth dependency — app/api/ai_sdk.py:874
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/ai_sdk.py:874 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `<anonymous>` without auth dependency — app/api/ai_sdk.py:941
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/ai_sdk.py:941 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_server_from_url` without auth dependency — app/api/mcp.py:78
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/mcp.py:78 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `add_server` without auth dependency — app/api/mcp.py:65
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/mcp.py:65 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `complete_task_plan` without auth dependency — app/api/task_plans.py:155
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/task_plans.py:155 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_conversation_ai_sdk` without auth dependency — app/api/ai_sdk.py:682
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/ai_sdk.py:682 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_conversation` without auth dependency — app/api/conversations.py:48
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/conversations.py:48 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_custom_agent` without auth dependency — app/api/custom_agents.py:41
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/custom_agents.py:41 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_feedback` without auth dependency — app/api/feedback.py:13
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/feedback.py:13 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_message_stream` without auth dependency — app/api/messages.py:142
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/messages.py:142 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_message` without auth dependency — app/api/messages.py:109
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/messages.py:109 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_task_plan_manual` without auth dependency — app/api/task_plans.py:53
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/task_plans.py:53 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `create_task_plan` without auth dependency — app/api/task_plans.py:24
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/task_plans.py:24 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `execute_tool` without auth dependency — app/api/mcp.py:144
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/mcp.py:144 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `generate_conversation_title` without auth dependency — app/api/conversations.py:32
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/conversations.py:32 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh_token` without auth dependency — app/api/auth.py:47
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/auth.py:47 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `refresh` without auth dependency — client_backend/api/auth.py:188
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
client_backend/api/auth.py:188 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `restore_session` without auth dependency — client_backend/api/auth.py:242
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
client_backend/api/auth.py:242 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `resume_interrupt` without auth dependency — app/api/messages.py:198
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/messages.py:198 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `stop_message_generation` without auth dependency — app/api/messages.py:164
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/messages.py:164 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_document` without auth dependency — app/api/documents.py:261
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/documents.py:261 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `upload_documents` without auth dependency — app/api/documents.py:318
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/documents.py:318 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `verify_local_token` without auth dependency — client_backend/api/auth.py:312
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
client_backend/api/auth.py:312 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_document` without auth dependency — app/api/documents.py:448
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/documents.py:448 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI PUT `update_feedback` without auth dependency — app/api/feedback.py:76
`@router.put` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
app/api/feedback.py:76 securityAuth fastapi unauth mutation
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/491d6a1b-990f-4b9e-a42d-4174e16016ec/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/491d6a1b-990f-4b9e-a42d-4174e16016ec/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.