Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

Spshulem/openAGI

https://github.com/Spshulem/openAGI · scanned 2026-06-16 00:19 UTC (2 months, 2 weeks ago)

99 raw signals (0 security + 99 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 94 actionable findings from 1 signal source. 5 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 94 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 32 Low 11 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 94 Crowd 0 Layer: Api 1 Frontend 4 Network 1 Hardware 2 Security 9 Cicd 4 Quality 73

Exclude dismissed / FP Exclude test files

All 866 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`withEnv`	software	healthy	`test/buildbetter-env-urls.test.js:withEnv`
`tmpLedger`	software	healthy	`test/credit-ledger.test.js:tmpLedger`
`entry`	software	healthy	`test/credit-ledger.test.js:entry`
`ctx`	software	healthy	`test/autopilot-gate.test.js:ctx`
`make`	software	healthy	`test/mcp-oauth-scope.test.js:make`
`cleanEnv`	software	healthy	`test/cli-client.test.js:cleanEnv`
`fetchImpl`	software	healthy	`test/cli-client.test.js:fetchImpl`
`stubClient`	software	healthy	`test/cli-client.test.js:stubClient`
`score`	software	healthy	`test/specialist-bounds.test.js:score`
`makeOpenClaw`	software	healthy	`test/migrate.test.js:makeOpenClaw`
`fakeGit`	software	healthy	`test/self-update.test.js:fakeGit`
`run`	software	healthy	`test/self-update.test.js:run`
`fakeProvider`	software	healthy	`test/web-search-tools.test.js:fakeProvider`
`withFetchUrlEnv`	software	healthy	`test/web-search-tools.test.js:withFetchUrlEnv`
`withEnv`	software	healthy	`test/imessage-search-tool.test.js:withEnv`
`fetchImpl`	software	healthy	`test/imessage-search-tool.test.js:fetchImpl`
`makeChatDb`	software	healthy	`test/imessage-search-tool.test.js:makeChatDb`
`spawnFn`	software	healthy	`test/mcp-oauth-open-browser.test.js:spawnFn`
`freePort`	software	healthy	`test/mcp-oauth-open-browser.test.js:freePort`
`makeRuntime`	software	healthy	`test/proactive-suggestion-flow.test.js:makeRuntime`
`makeObserver`	software	healthy	`test/proactive-suggestion-flow.test.js:makeObserver`
`start`	software	healthy	`test/computer-server.test.js:start`
`post`	software	healthy	`test/computer-server.test.js:post`
`makeMcpRegistryTmpDir`	software	healthy	`test/abi-runtime.test.js:makeMcpRegistryTmpDir`
`todayAt`	software	healthy	`test/abi-runtime.test.js:todayAt`
`yesterdayAt`	software	healthy	`test/abi-runtime.test.js:yesterdayAt`
`sample`	software	healthy	`test/abi-runtime.test.js:sample`
`mk`	software	healthy	`test/abi-runtime.test.js:mk`
`withMockFetch`	software	healthy	`test/web-search-providers.test.js:withMockFetch`
`jsonResponse`	software	healthy	`test/web-search-providers.test.js:jsonResponse`
`seedStaleFact`	software	healthy	`test/memory-corrections.test.js:seedStaleFact`
`dataDir`	software	healthy	`test/task-sweep.test.js:dataDir`
`llmProvider`	software	healthy	`test/task-sweep.test.js:llmProvider`
`makeBridge`	software	healthy	`test/imessage-bridge.test.js:makeBridge`
`norm`	software	healthy	`test/imessage-bridge.test.js:norm`
`policyBridge`	software	healthy	`test/imessage-bridge.test.js:policyBridge`
`makeChatDb`	software	healthy	`test/imessage-bridge.test.js:makeChatDb`
`blocks`	software	healthy	`test/url-guard.test.js:blocks`
`allows`	software	healthy	`test/url-guard.test.js:allows`
`fakeLookup`	software	healthy	`test/url-guard.test.js:fakeLookup`
`failingLookup`	software	healthy	`test/url-guard.test.js:failingLookup`
`explodingLookup`	software	healthy	`test/url-guard.test.js:explodingLookup`
`writeTokenCache`	software	healthy	`test/mcp-boot-reconnect.test.js:writeTokenCache`
`makeRegistry`	software	healthy	`test/verdict-consequences.test.js:makeRegistry`
`makeHost`	software	healthy	`test/verdict-consequences.test.js:makeHost`
`fakeObservations`	software	healthy	`test/buildbetter-transcripts.test.js:fakeObservations`
`make`	software	healthy	`test/buildbetter-transcripts.test.js:make`
`tmp`	software	healthy	`test/budget-guard-ledger.test.js:tmp`
`makeRuntime`	software	healthy	`test/imessage-extractor.test.js:makeRuntime`
`dataDir`	software	healthy	`test/imessage-extractor.test.js:dataDir`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`docker-compose.example.yml`	software	healthy	`docker-compose.example.yml`
`README.md`	software	healthy	`README.md`
`package.json`	software	healthy	`package.json`
`Dockerfile`	software	healthy	`Dockerfile`
`.env.example`	software	healthy	`.env.example`
`LICENSE`	software	healthy	`LICENSE`
`WHITEPAPER.md`	software	healthy	`WHITEPAPER.md`
`mcp-http-interactive.test.js`	software	healthy	`test/mcp-http-interactive.test.js`
`observation-transcript.test.js`	software	healthy	`test/observation-transcript.test.js`
`agent-host-screen-context.test.js`	software	healthy	`test/agent-host-screen-context.test.js`
`ephemeral-turn.test.js`	software	healthy	`test/ephemeral-turn.test.js`
`buildbetter-env-urls.test.js`	software	healthy	`test/buildbetter-env-urls.test.js`
`credit-ledger.test.js`	software	healthy	`test/credit-ledger.test.js`
`silent-failures.test.js`	software	healthy	`test/silent-failures.test.js`
`autopilot-gate.test.js`	software	healthy	`test/autopilot-gate.test.js`
`mcp-oauth-scope.test.js`	software	healthy	`test/mcp-oauth-scope.test.js`
`cli-client.test.js`	software	healthy	`test/cli-client.test.js`
`mcp-tool-name-sanitize.test.js`	software	healthy	`test/mcp-tool-name-sanitize.test.js`
`persona.test.js`	software	healthy	`test/persona.test.js`
`specialist-bounds.test.js`	software	healthy	`test/specialist-bounds.test.js`
`migrate.test.js`	software	healthy	`test/migrate.test.js`
`self-update.test.js`	software	healthy	`test/self-update.test.js`
`env-persistence.test.js`	software	healthy	`test/env-persistence.test.js`
`web-search-tools.test.js`	software	healthy	`test/web-search-tools.test.js`
`model-router.test.js`	software	healthy	`test/model-router.test.js`
`imessage-search-tool.test.js`	software	healthy	`test/imessage-search-tool.test.js`
`mcp-oauth-open-browser.test.js`	software	healthy	`test/mcp-oauth-open-browser.test.js`
`proactive-suggestion-flow.test.js`	software	healthy	`test/proactive-suggestion-flow.test.js`
`computer-server.test.js`	software	healthy	`test/computer-server.test.js`
`abi-runtime.test.js`	software	healthy	`test/abi-runtime.test.js`
`web-search-providers.test.js`	software	healthy	`test/web-search-providers.test.js`
`memory-corrections.test.js`	software	healthy	`test/memory-corrections.test.js`
`data-dir.test.js`	software	healthy	`test/data-dir.test.js`
`buildbetter-auth.test.js`	software	healthy	`test/buildbetter-auth.test.js`
`task-sweep.test.js`	software	healthy	`test/task-sweep.test.js`
`onboarding.test.js`	software	healthy	`test/onboarding.test.js`
`imessage-bridge.test.js`	software	healthy	`test/imessage-bridge.test.js`
`url-guard.test.js`	software	healthy	`test/url-guard.test.js`
`mcp-boot-reconnect.test.js`	software	healthy	`test/mcp-boot-reconnect.test.js`
`verdict-consequences.test.js`	software	healthy	`test/verdict-consequences.test.js`
`recall-spend.test.js`	software	healthy	`test/recall-spend.test.js`
`buildbetter-transcripts.test.js`	software	healthy	`test/buildbetter-transcripts.test.js`
`budget-guard-ledger.test.js`	software	healthy	`test/budget-guard-ledger.test.js`
`imessage-extractor.test.js`	software	healthy	`test/imessage-extractor.test.js`
`tool-registry-cap.test.js`	software	healthy	`test/tool-registry-cap.test.js`
`memory-import.test.js`	software	healthy	`test/memory-import.test.js`
`RELEASE.md`	software	healthy	`docs/RELEASE.md`
`abi-architecture.md`	software	healthy	`docs/abi-architecture.md`
`core-abi-concept.md`	software	healthy	`docs/core-abi-concept.md`
`MAIN-AND-NODES.md`	software	healthy	`docs/MAIN-AND-NODES.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`FileBackedPropagationController`	software	healthy	`src/file-backed-propagation-controller.js:FileBackedPropaga…`
`DirectionalAdaptiveScrutiny`	software	healthy	`src/directional-adaptive-scrutiny.js:DirectionalAdaptiveScr…`
`McpHttpClient`	software	healthy	`src/mcp-http-client.js:McpHttpClient`
`AbiRuntime`	software	healthy	`src/abi-runtime.js:AbiRuntime`
`SuggestionFeedback`	software	healthy	`src/suggestion-feedback.js:SuggestionFeedback`
`AgentHost`	software	healthy	`src/agent-host.js:AgentHost`
`to`	software	healthy	`src/agent-host.js:to`
`names`	software	healthy	`src/agent-host.js:names`
`McpStdioClient`	software	healthy	`src/mcp-client.js:McpStdioClient`
`ScrutinyPanel`	software	healthy	`src/scrutiny-panel.js:ScrutinyPanel`
`VectorStore`	software	healthy	`src/vector-store.js:VectorStore`
`MemoryCondenser`	software	healthy	`src/memory-condenser.js:MemoryCondenser`
`WorkflowRegistry`	software	healthy	`src/workflow-registry.js:WorkflowRegistry`
`ScrutinyJudge`	software	healthy	`src/scrutiny-judge.js:ScrutinyJudge`
`VocabularyCurator`	software	healthy	`src/vocabulary-curator.js:VocabularyCurator`
`ScrutinyFitter`	software	healthy	`src/scrutiny-fitter.js:ScrutinyFitter`
`McpRegistry`	software	healthy	`src/mcp-registry.js:McpRegistry`
`ToolRegistry`	software	healthy	`src/tool-registry.js:ToolRegistry`
`TaskSweep`	software	healthy	`src/task-sweep.js:TaskSweep`
`TunnelWatcher`	software	healthy	`src/tunnel-watcher.js:TunnelWatcher`
`ComputerUseLog`	software	healthy	`src/computer-use-log.js:ComputerUseLog`
`McpOAuthClient`	software	healthy	`src/mcp-oauth.js:McpOAuthClient`
`CronScheduler`	software	healthy	`src/cron-scheduler.js:CronScheduler`
`DeterministicModelProvider`	software	healthy	`src/model-provider.js:DeterministicModelProvider`
`OpenAIResponsesProvider`	software	healthy	`src/model-provider.js:OpenAIResponsesProvider`
`AnthropicProvider`	software	healthy	`src/model-provider.js:AnthropicProvider`
`CreditLedger`	software	healthy	`src/credit-ledger.js:CreditLedger`
`ProactiveObserver`	software	healthy	`src/proactive-observer.js:ProactiveObserver`
`SkillReplay`	software	healthy	`src/skill-replay.js:SkillReplay`
`PendingActionStore`	software	healthy	`src/pending-actions.js:PendingActionStore`
`TaskStore`	software	healthy	`src/task-store.js:TaskStore`
`PatternMiner`	software	healthy	`src/pattern-miner.js:PatternMiner`
`Introspector`	software	healthy	`src/introspector.js:Introspector`
`OutcomeStore`	software	healthy	`src/outcome-store.js:OutcomeStore`
`FileBackedCronScheduler`	software	healthy	`src/file-backed-cron-scheduler.js:FileBackedCronScheduler`
`SkillRegistry`	software	healthy	`src/skills.js:SkillRegistry`
`IMessageExtractor`	software	healthy	`src/imessage-extractor.js:IMessageExtractor`
`ModelRouter`	software	healthy	`src/model-router.js:ModelRouter`
`HashBagEmbedder`	software	healthy	`src/embeddings.js:HashBagEmbedder`
`OpenAIEmbedder`	software	healthy	`src/embeddings.js:OpenAIEmbedder`
`MemorySystem`	software	healthy	`src/memory-system.js:MemorySystem`
`BudgetGuard`	software	healthy	`src/budget-guard.js:BudgetGuard`
`PropagationController`	software	healthy	`src/propagation-controller.js:PropagationController`
`SessionMiner`	software	healthy	`src/session-miner.js:SessionMiner`
`ObservationStore`	software	healthy	`src/observation-store.js:ObservationStore`
`DraftStore`	software	healthy	`src/draft-store.js:DraftStore`
`ClarificationStore`	software	healthy	`src/clarification-store.js:ClarificationStore`
`ChannelManager`	software	healthy	`src/channels.js:ChannelManager`
`TelegramChannel`	software	healthy	`src/channels.js:TelegramChannel`
`SmsChannel`	software	healthy	`src/channels.js:SmsChannel`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`test`	software	healthy	`test`
`docs`	software	healthy	`docs`
`superpowers`	software	healthy	`docs/superpowers`
`plans`	software	healthy	`docs/superpowers/plans`
`specs`	software	healthy	`docs/superpowers/specs`
`verification`	software	healthy	`docs/verification`
`scope`	software	healthy	`docs/scope`
`source-research`	software	healthy	`docs/source-research`
`setup`	software	healthy	`docs/setup`
`scripts`	software	healthy	`scripts`
`examples`	software	healthy	`examples`
`skills`	software	healthy	`examples/skills`
`setup-imessage-node`	software	healthy	`examples/skills/setup-imessage-node`
`deploy-update-node`	software	healthy	`examples/skills/deploy-update-node`
`recap`	software	healthy	`examples/skills/recap`
`drive-computer-use`	software	healthy	`examples/skills/drive-computer-use`
`diagnose-agent-tool-errors`	software	healthy	`examples/skills/diagnose-agent-tool-errors`
`connect-mcp`	software	healthy	`examples/skills/connect-mcp`
`diagnose-no-imessage-replies`	software	healthy	`examples/skills/diagnose-no-imessage-replies`
`setup-computer-use-node`	software	healthy	`examples/skills/setup-computer-use-node`
`remind`	software	healthy	`examples/skills/remind`
`morning-brief`	software	healthy	`examples/skills/morning-brief`
`schedule-recurring-check`	software	healthy	`examples/skills/schedule-recurring-check`
`.codex`	software	healthy	`.codex`
`mac`	software	healthy	`mac`
`Sources`	software	healthy	`mac/Sources`
`OpenAGI`	software	healthy	`mac/Sources/OpenAGI`
`Replay`	software	healthy	`mac/Sources/OpenAGI/Replay`
`Capture`	software	healthy	`mac/Sources/OpenAGI/Capture`
`Overlay`	software	healthy	`mac/Sources/OpenAGI/Overlay`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`src`	software	healthy	`src`
`integrations`	software	healthy	`src/integrations`

Label	Layer	Status	Path
`auth::src/hosted-interface.js`	security	healthy	`src/hosted-interface.js`
`auth::src/mcp-catalog.js`	security	healthy	`src/mcp-catalog.js`
`auth::src/index.js`	security	healthy	`src/index.js`
`auth::src/abi-runtime.js`	security	healthy	`src/abi-runtime.js`
`auth::src/integrations/calendar.js`	security	healthy	`src/integrations/calendar.js`
`auth::src/mcp-oauth.js`	security	healthy	`src/mcp-oauth.js`
`auth::test/mcp-oauth-scope.test.js`	security	healthy	`test/mcp-oauth-scope.test.js`
`auth::src/mcp-registry.js`	security	healthy	`src/mcp-registry.js`
`auth::src/integrations/buildbetter-tasks.js`	security	healthy	`src/integrations/buildbetter-tasks.js`
`auth::README.md`	security	healthy	`README.md`
`auth::test/mcp-http-interactive.test.js`	security	healthy	`test/mcp-http-interactive.test.js`
`auth::test/abi-runtime.test.js`	security	healthy	`test/abi-runtime.test.js`
`auth::test/mcp-oauth-open-browser.test.js`	security	healthy	`test/mcp-oauth-open-browser.test.js`
`auth::src/setup-wizard.js`	security	healthy	`src/setup-wizard.js`
`auth::src/tool-registry.js`	security	healthy	`src/tool-registry.js`
`auth::test/mcp-boot-reconnect.test.js`	security	healthy	`test/mcp-boot-reconnect.test.js`
`auth::test/mcp-tool-name-sanitize.test.js`	security	healthy	`test/mcp-tool-name-sanitize.test.js`
`auth::examples/skills/connect-mcp/SKILL.md`	security	healthy	`examples/skills/connect-mcp/SKILL.md`
`auth::test/buildbetter-auth.test.js`	security	healthy	`test/buildbetter-auth.test.js`
`auth::src/mcp-http-client.js`	security	healthy	`src/mcp-http-client.js`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`docker-compose.example.yml`
`10.0.0.5`	network	healthy	`test/cli-client.test.js`
`169.254.169.254`	network	healthy	`test/web-search-tools.test.js`
`192.168.1.1`	network	healthy	`test/web-search-tools.test.js`
`93.184.216.34`	network	healthy	`test/web-search-tools.test.js`
`172.16.0.1`	network	healthy	`test/url-guard.test.js`
`10.0.0.1`	network	healthy	`test/url-guard.test.js`
`10.1.2.3`	network	healthy	`test/url-guard.test.js`

Label	Layer	Status	Path
`APPLE_ID`	cicd	healthy	`—`
`SPARKLE_ED_PRIVATE_KEY`	cicd	healthy	`—`
`APPLE_TEAM_ID`	cicd	healthy	`—`
`APPLE_DEVELOPER_ID_CERT_P12_BASE64`	cicd	healthy	`—`
`APPLE_DEVELOPER_ID_CERT_PASSWORD`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`APPLE_APP_PASSWORD`	cicd	healthy	`—`

Label	Layer	Status	Path
`sqlite`	data	healthy	`README.md`
`postgres`	data	healthy	`src/task-store.js`

Label	Layer	Status	Path
`port:43210`	network	healthy	`docker-compose.example.yml`
`port:04`	network	healthy	`scripts/install-update-timer.sh`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`src/url-guard.js`
`vps::gcp`	hardware	healthy	`src/url-guard.js`

Label	Layer	Status	Path
`gha::release-mac`	cicd	healthy	`.github/workflows/release-mac.yml`
`gha::docker`	cicd	healthy	`.github/workflows/docker.yml`

Label	Layer	Status	Path
`build-and-publish`	cicd	healthy	`.github/workflows/release-mac.yml`
`build-and-publish`	cicd	healthy	`.github/workflows/docker.yml`

Label	Layer	Status	Path
`repobility-clone-a8mrddhb`	software	healthy	`/tmp/repobility-clone-a8mrddhb`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`

Label	Layer	Status	Path
`generic_api_key::test/abi-runtime.test.js`	security	healthy	`test/abi-runtime.test.js`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/539c32a2-108a-45dc-8226-6ce999390adb/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/539c32a2-108a-45dc-8226-6ce999390adb/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

Spshulem/openAGI

Complete repo analysis

function 50+

file 50+

class 50+

directory 34

auth 20

service 8

env_var 7

database 2

port 2

vps 2

pipeline 2

job 2

repo 1

container 1

secret 1