Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

vellum-ai/vellum-assistant

https://github.com/vellum-ai/vellum-assistant · scanned 2026-06-16 00:50 UTC (2 months, 1 week ago)

2083 raw signals (0 security + 2083 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 2073 actionable findings from 1 signal source. 10 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
41.9
/100
Security checks
42
0 findings
System graph
42
100.0% cov · 2073 findings
Critical
2
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 2 High 155 Medium 321 Low 418 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 2073 Crowd 0 Layer: Software 9 Frontend 247 Network 4 Hardware 10 Security 158 Cicd 4 Quality 1497 Api 144
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 41.9/100 with 100.0% coverage. It contains 33536 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 2083 findings — concentrated in quality (1499), frontend (247), security (158). Risk profile is high: 2 critical, 155 high, 325 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 848 of 2073 actionable findings. 2083 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: gateway/src/risk/command-registry/AGENTS.md
Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.
gateway/src/risk/command-registry/AGENTS.md:57 SecretsAgents md
high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/deploy-fullstack-vercel/SKILL.md
Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.
skills/deploy-fullstack-vercel/SKILL.md:196 SecretsSkill file
high System graph security Agent instructions conf 1.00 Agent instruction/config may expose a secret: skills/oura/SKILL.md
Agent-facing files are routinely pasted into LLM/tool contexts. Move literal tokens, keys, and passwords into a secret manager or document them as placeholders only.
skills/oura/SKILL.md:103 SecretsSkill file
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /v1/assistants/${client.platformAssistantId}/email-addresses/${target.id}/ (assistant/src/runtime/routes/email-routes.ts:102)
`assistant/src/runtime/routes/email-routes.ts:102` calls `DELETE /v1/assistants/${client.platformAssistantId}/email-addresses/${target.id}/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistants/<p>/email-addres…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE http://127.0.0.1:${port}/play_audio/nonexistent (skills/meet-join/bot/__tests__/audio-playback.test.ts:416)
`skills/meet-join/bot/__tests__/audio-playback.test.ts:416` calls `DELETE http://127.0.0.1:${port}/play_audio/nonexistent` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio/nonexistent` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: DELETE http://127.0.0.1:${port}/v1/channels/conversation (assistant/src/__tests__/gateway-only-enforcement.test.ts:634)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:634` calls `DELETE http://127.0.0.1:${port}/v1/channels/conversation` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/convers…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /__gateway/80/v1 (apps/macos/src/main/gateway-forward.test.ts:29)
`apps/macos/src/main/gateway-forward.test.ts:29` calls `GET /__gateway/80/v1` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/__gateway/<p>/v1` If this points at an external API, prefix it with `https://` so…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /__gateway/8080/v1/foo (apps/macos/src/main/platform-forward.test.ts:36)
`apps/macos/src/main/platform-forward.test.ts:36` calls `GET /__gateway/8080/v1/foo` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/__gateway/<p>/v1/foo` If this points at an external API, prefix it with `h…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /__gateway/8080/v1/stream (apps/macos/src/main/gateway-forward.test.ts:75)
`apps/macos/src/main/gateway-forward.test.ts:75` calls `GET /__gateway/8080/v1/stream` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/__gateway/<p>/v1/stream` If this points at an external API, prefix it wi…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /__gateway/9999/v1 (apps/macos/src/main/gateway-forward.test.ts:38)
`apps/macos/src/main/gateway-forward.test.ts:38` calls `GET /__gateway/9999/v1` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/__gateway/<p>/v1` If this points at an external API, prefix it with `https://` …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /_allauth/browser/v1/auth/session (apps/macos/src/main/platform-forward.test.ts:54)
`apps/macos/src/main/platform-forward.test.ts:54` calls `GET /_allauth/browser/v1/auth/session` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/_allauth/browser/v1/auth/session` If this points at an external…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /accounts/login (apps/macos/src/main/platform-forward.test.ts:65)
`apps/macos/src/main/platform-forward.test.ts:65` calls `GET /accounts/login` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/accounts/login` If this points at an external API, prefix it with `https://` so t…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /accountsettings (apps/macos/src/main/platform-forward.test.ts:292)
`apps/macos/src/main/platform-forward.test.ts:292` calls `GET /accountsettings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/accountsettings` If this points at an external API, prefix it with `https://` s…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /assistant/__gateway/8080/v1/assistants (apps/macos/src/main/gateway-forward.test.ts:48)
`apps/macos/src/main/gateway-forward.test.ts:48` calls `GET /assistant/__gateway/8080/v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistant/__gateway/<p>/v1/assistants` If this points at a…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /assistant/__gateway/{port}/* (apps/macos/src/main/index.ts:237)
`apps/macos/src/main/index.ts:237` calls `GET /assistant/__gateway/{port}/*` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistant/__gateway/<p>/*` If this points at an external API, prefix it with `http…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /assistant/__local/lockfile (apps/web/src/runtime/local-mode-host.ts:152)
`apps/web/src/runtime/local-mode-host.ts:152` calls `GET /assistant/__local/lockfile` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/lockfile` If this points at an external API, prefix it with `htt…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /assistant/assets/app.js (apps/macos/src/main/gateway-forward.test.ts:24)
`apps/macos/src/main/gateway-forward.test.ts:24` calls `GET /assistant/assets/app.js` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistant/assets/app.js` If this points at an external API, prefix it wit…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /assistant/assets/app.js (apps/macos/src/main/platform-forward.test.ts:30)
`apps/macos/src/main/platform-forward.test.ts:30` calls `GET /assistant/assets/app.js` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistant/assets/app.js` If this points at an external API, prefix it wi…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1 (apps/macos/src/main/platform-forward.test.ts:73)
`apps/macos/src/main/platform-forward.test.ts:73` calls `GET /v1` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:216)
`apps/macos/src/main/platform-forward.test.ts:216` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:246)
`apps/macos/src/main/platform-forward.test.ts:246` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:254)
`apps/macos/src/main/platform-forward.test.ts:254` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:264)
`apps/macos/src/main/platform-forward.test.ts:264` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:278)
`apps/macos/src/main/platform-forward.test.ts:278` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the m…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:42)
`apps/macos/src/main/platform-forward.test.ts:42` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:91)
`apps/macos/src/main/platform-forward.test.ts:91` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants (apps/macos/src/main/platform-forward.test.ts:99)
`apps/macos/src/main/platform-forward.test.ts:99` calls `GET /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the ma…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/assistants?page=2&limit=10 (apps/macos/src/main/platform-forward.test.ts:80)
`apps/macos/src/main/platform-forward.test.ts:80` calls `GET /v1/assistants?page=2&limit=10` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `htt…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/some/endpoint/ (assistant/src/platform/client.test.ts:132)
`assistant/src/platform/client.test.ts:132` calls `GET /v1/some/endpoint/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/some/endpoint` If this points at an external API, prefix it with `https://` so the matcher sk…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1/test/ (assistant/src/platform/client.test.ts:145)
`assistant/src/platform/client.test.ts:145` calls `GET /v1/test/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/test` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET /v1something/else (apps/macos/src/main/platform-forward.test.ts:288)
`apps/macos/src/main/platform-forward.test.ts:288` calls `GET /v1something/else` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/v1something/else` If this points at an external API, prefix it with `https://`…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET http://${host}:${port}/healthz (assistant/src/daemon/daemon-control.ts:155)
`assistant/src/daemon/daemon-control.ts:155` calls `GET http://${host}:${port}/healthz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/<p>:/<p>/healthz` If this points at an external API, prefix it with `https…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${healthPort}/healthz (credential-executor/src/__tests__/managed-reconnect.test.ts:219)
`credential-executor/src/__tests__/managed-reconnect.test.ts:219` calls `GET http://127.0.0.1:${healthPort}/healthz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/healthz` If this points at an …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/healthz (credential-executor/src/__tests__/managed-reconnect.test.ts:54)
`credential-executor/src/__tests__/managed-reconnect.test.ts:54` calls `GET http://127.0.0.1:${port}/healthz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/healthz` If this points at an externa…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/readyz (credential-executor/src/__tests__/managed-reconnect.test.ts:66)
`credential-executor/src/__tests__/managed-reconnect.test.ts:66` calls `GET http://127.0.0.1:${port}/readyz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/readyz` If this points at an external …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/attachments/${stored.id} (assistant/src/__tests__/runtime-attachment-metadata.test.ts:181)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:181` calls `GET http://127.0.0.1:${port}/v1/attachments/${stored.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/attachments/<…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/attachments/${stored.id} (assistant/src/__tests__/runtime-attachment-metadata.test.ts:206)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:206` calls `GET http://127.0.0.1:${port}/v1/attachments/${stored.id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/attachments/<…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/attachments/nonexistent-id (assistant/src/__tests__/runtime-attachment-metadata.test.ts:218)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:218` calls `GET http://127.0.0.1:${port}/v1/attachments/nonexistent-id` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/attachments…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/media-stream (assistant/src/__tests__/gateway-only-enforcement.test.ts:525)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:525` calls `GET http://127.0.0.1:${port}/v1/calls/media-stream` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/calls/media-stream` If…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/media-stream?callSessionId=sess-123 (assistant/src/__tests__/gateway-only-enforcement.test.ts:466)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:466` calls `GET http://127.0.0.1:${port}/v1/calls/media-stream?callSessionId=sess-123` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/media-stream?callSessionId=sess-123 (assistant/src/__tests__/gateway-only-enforcement.test.ts:491)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:491` calls `GET http://127.0.0.1:${port}/v1/calls/media-stream?callSessionId=sess-123` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/media-stream?callSessionId=sess-123 (assistant/src/__tests__/gateway-only-enforcement.test.ts:508)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:508` calls `GET http://127.0.0.1:${port}/v1/calls/media-stream?callSessionId=sess-123` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/relay?callSessionId=sess-123 (assistant/src/__tests__/gateway-only-enforcement.test.ts:403)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:403` calls `GET http://127.0.0.1:${port}/v1/calls/relay?callSessionId=sess-123` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/calls/…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/relay?callSessionId=sess-123 (assistant/src/__tests__/gateway-only-enforcement.test.ts:426)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:426` calls `GET http://127.0.0.1:${port}/v1/calls/relay?callSessionId=sess-123` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/calls/…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/calls/relay?callSessionId=sess-123 (assistant/src/__tests__/gateway-only-enforcement.test.ts:443)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:443` calls `GET http://127.0.0.1:${port}/v1/calls/relay?callSessionId=sess-123` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/calls/…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/messages?conversationKey=${conversationKey} (assistant/src/__tests__/runtime-attachment-metadata.test.ts:113)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:113` calls `GET http://127.0.0.1:${port}/v1/messages?conversationKey=${conversationKey}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/messages?conversationKey=${conversationKey} (assistant/src/__tests__/runtime-attachment-metadata.test.ts:160)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:160` calls `GET http://127.0.0.1:${port}/v1/messages?conversationKey=${conversationKey}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?provider=deepgram&mimeType=audio/webm (assistant/src/__tests__/gateway-only-enforcement.test.ts:775)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:775` calls `GET http://127.0.0.1:${port}/v1/stt/stream?provider=deepgram&mimeType=audio/webm` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?provider=deepgram&mimeType=audio/webm (assistant/src/__tests__/gateway-only-enforcement.test.ts:796)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:796` calls `GET http://127.0.0.1:${port}/v1/stt/stream?provider=deepgram&mimeType=audio/webm` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT} (assistant/src/__tests__/gateway-only-enforcement.test.ts:876)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:876` calls `GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/stt/strea…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}&mimeType=audio/webm (assistant/src/__tests__/gateway-only-enforcement.test.ts:845)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:845` calls `GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}&mimeType=audio/webm` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}&provider=deepgram (assistant/src/__tests__/gateway-only-enforcement.test.ts:861)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:861` calls `GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}&provider=deepgram` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}&provider=deepgram&mimeType=audio/webm (assistant/src/__tests__/gateway-only-enforcement.test.ts:827)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:827` calls `GET http://127.0.0.1:${port}/v1/stt/stream?token=${GATEWAY_JWT}&provider=deepgram&mimeType=audio/webm` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matchin…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/v1/stt/stream?token=${TEST_JWT}&provider=deepgram&mimeType=audio/webm (assistant/src/__tests__/gateway-only-enforcement.test.ts:811)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:811` calls `GET http://127.0.0.1:${port}/v1/stt/stream?token=${TEST_JWT}&provider=deepgram&mimeType=audio/webm` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://127.0.0.1:${port}/webhooks/telegram (assistant/src/__tests__/gateway-only-enforcement.test.ts:193)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:193` calls `GET http://127.0.0.1:${port}/webhooks/telegram` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/telegram` If this po…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://169.254.169.254/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip (cli/src/lib/local.ts:713)
`cli/src/lib/local.ts:713` calls `GET http://169.254.169.254/computeMetadata/v1/instance/network-interfaces/0/access-configs/0/external-ip` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/169.254.169.254/comput…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://169.254.169.254/latest/meta-data/public-ipv4 (cli/src/lib/local.ts:736)
`cli/src/lib/local.ts:736` calls `GET http://169.254.169.254/latest/meta-data/public-ipv4` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/169.254.169.254/latest/meta-data/public-ipv4` If this points at an exte…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost:${gatewayPort}/healthz (gateway/src/__tests__/credential-watcher-managed-bootstrap.test.ts:140)
`gateway/src/__tests__/credential-watcher-managed-bootstrap.test.ts:140` calls `GET http://localhost:${gatewayPort}/healthz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/healthz` If this point…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost:${healthPort}/healthz (credential-executor/src/__tests__/managed-integration.test.ts:503)
`credential-executor/src/__tests__/managed-integration.test.ts:503` calls `GET http://localhost:${healthPort}/healthz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/healthz` If this points at a…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost:${healthPort}/readyz (credential-executor/src/__tests__/managed-integration.test.ts:508)
`credential-executor/src/__tests__/managed-integration.test.ts:508` calls `GET http://localhost:${healthPort}/readyz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/readyz` If this points at an …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost:${port}/healthz (gateway/src/__tests__/credential-watcher.test.ts:245)
`gateway/src/__tests__/credential-watcher.test.ts:245` calls `GET http://localhost:${port}/healthz` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>/healthz` If this points at an external API, pre…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET http://localhost:${server.port} (assistant/src/__tests__/provider-streaming.benchmark.test.ts:266)
`assistant/src/__tests__/provider-streaming.benchmark.test.ts:266` calls `GET http://localhost:${server.port}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/localhost:/<p>` If this points at an external API, …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.resend.com/domains (gateway/src/http/routes/resend-identity.ts:24)
`gateway/src/http/routes/resend-identity.ts:24` calls `GET https://api.resend.com/domains` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/domains` If this points at an external API, prefix it w…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.resend.com/emails/receiving/${emailId} (gateway/src/http/routes/resend-webhook.ts:130)
`gateway/src/http/routes/resend-webhook.ts:130` calls `GET https://api.resend.com/emails/receiving/${emailId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails/receiving/<p>` If this point…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.sanity.io/v2021-06-07/projects (assistant/src/runtime/routes/sanity-routes.ts:55)
`assistant/src/runtime/routes/sanity-routes.ts:55` calls `GET https://api.sanity.io/v2021-06-07/projects` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.sanity.io/v2021-06-07/projects` If this points at a…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.sanity.io/v2021-06-07/projects/${projectId}/datasets (assistant/src/runtime/routes/sanity-routes.ts:79)
`assistant/src/runtime/routes/sanity-routes.ts:79` calls `GET https://api.sanity.io/v2021-06-07/projects/${projectId}/datasets` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.sanity.io/v2021-06-07/project…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.telegram.org/bot${botToken}/deleteWebhook (assistant/src/daemon/handlers/config-telegram.ts:276)
`assistant/src/daemon/handlers/config-telegram.ts:276` calls `GET https://api.telegram.org/bot${botToken}/deleteWebhook` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.telegram.org/bot/<p>/deletewebhook` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.telegram.org/bot${token}/getMe (assistant/src/runtime/channel-invite-transports/telegram.ts:55)
`assistant/src/runtime/channel-invite-transports/telegram.ts:55` calls `GET https://api.telegram.org/bot${token}/getMe` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.telegram.org/bot/<p>/getme` If this p…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://api.twilio.com/2010-04-01/Accounts/${accountSid}.json (assistant/src/runtime/routes/integrations/twilio.ts:138)
`assistant/src/runtime/routes/integrations/twilio.ts:138` calls `GET https://api.twilio.com/2010-04-01/Accounts/${accountSid}.json` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.twilio.com/2010-04-01/acc…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: GET https://example.com (assistant/src/workflows/sandbox-escape.test.ts:49)
`assistant/src/workflows/sandbox-escape.test.ts:49` calls `GET https://example.com` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/example.com` If this points at an external API, prefix it with `https://` so …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PATCH /v1/assistants/${encodeURIComponent(assistantId)}/ (assistant/src/platform/sync-identity.ts:81)
`assistant/src/platform/sync-identity.ts:81` calls `PATCH /v1/assistants/${encodeURIComponent(assistantId)}/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistants/<p>` If this points at an external API, prefix …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /_allauth/browser/v1/auth/session (apps/macos/src/main/platform-forward.test.ts:106)
`apps/macos/src/main/platform-forward.test.ts:106` calls `POST /_allauth/browser/v1/auth/session` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/_allauth/browser/v1/auth/session` If this points at an extern…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /_allauth/browser/v1/auth/session (apps/macos/src/main/platform-forward.test.ts:119)
`apps/macos/src/main/platform-forward.test.ts:119` calls `POST /_allauth/browser/v1/auth/session` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/_allauth/browser/v1/auth/session` If this points at an extern…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /_allauth/browser/v1/auth/session (apps/macos/src/main/platform-forward.test.ts:136)
`apps/macos/src/main/platform-forward.test.ts:136` calls `POST /_allauth/browser/v1/auth/session` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/_allauth/browser/v1/auth/session` If this points at an extern…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /_allauth/browser/v1/auth/session (apps/macos/src/main/platform-forward.test.ts:226)
`apps/macos/src/main/platform-forward.test.ts:226` calls `POST /_allauth/browser/v1/auth/session` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/_allauth/browser/v1/auth/session` If this points at an extern…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__gateway/8080/auth/token (apps/macos/src/main/gateway-forward.test.ts:62)
`apps/macos/src/main/gateway-forward.test.ts:62` calls `POST /assistant/__gateway/8080/auth/token` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistant/__gateway/<p>/auth/token` If this points at an ext…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__local/hatch (apps/web/src/runtime/local-mode-host.ts:133)
`apps/web/src/runtime/local-mode-host.ts:133` calls `POST /assistant/__local/hatch` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/hatch` If this points at an external API, prefix it with `https://…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__local/lockfile (apps/web/src/runtime/local-mode-host.ts:173)
`apps/web/src/runtime/local-mode-host.ts:173` calls `POST /assistant/__local/lockfile` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/lockfile` If this points at an external API, prefix it with `ht…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__local/lockfile (apps/web/src/runtime/local-mode-host.ts:199)
`apps/web/src/runtime/local-mode-host.ts:199` calls `POST /assistant/__local/lockfile` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/lockfile` If this points at an external API, prefix it with `ht…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__local/retire (apps/web/src/runtime/local-mode-host.ts:218)
`apps/web/src/runtime/local-mode-host.ts:218` calls `POST /assistant/__local/retire` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/retire` If this points at an external API, prefix it with `https:…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__local/sleep (apps/web/src/runtime/local-mode-host.ts:242)
`apps/web/src/runtime/local-mode-host.ts:242` calls `POST /assistant/__local/sleep` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/sleep` If this points at an external API, prefix it with `https://…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /assistant/__local/wake (apps/web/src/runtime/local-mode-host.ts:280)
`apps/web/src/runtime/local-mode-host.ts:280` calls `POST /assistant/__local/wake` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistant/__local/wake` If this points at an external API, prefix it with `https://` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/assistants (apps/macos/src/main/platform-forward.test.ts:149)
`apps/macos/src/main/platform-forward.test.ts:149` calls `POST /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/assistants (apps/macos/src/main/platform-forward.test.ts:164)
`apps/macos/src/main/platform-forward.test.ts:164` calls `POST /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/assistants (apps/macos/src/main/platform-forward.test.ts:177)
`apps/macos/src/main/platform-forward.test.ts:177` calls `POST /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/assistants (apps/macos/src/main/platform-forward.test.ts:190)
`apps/macos/src/main/platform-forward.test.ts:190` calls `POST /v1/assistants` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/assistants` If this points at an external API, prefix it with `https://` so the …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/assistants/${client.platformAssistantId}/domains/ (assistant/src/runtime/routes/domain-routes.ts:107)
`assistant/src/runtime/routes/domain-routes.ts:107` calls `POST /v1/assistants/${client.platformAssistantId}/domains/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistants/<p>/domains` If this points at an exte…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/assistants/${client.platformAssistantId}/email-addresses/ (assistant/src/runtime/routes/email-routes.ts:44)
`assistant/src/runtime/routes/email-routes.ts:44` calls `POST /v1/assistants/${client.platformAssistantId}/email-addresses/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/assistants/<p>/email-addresses` If this poi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/runtime-proxy/email/send/ (assistant/src/runtime/routes/email-routes.ts:298)
`assistant/src/runtime/routes/email-routes.ts:298` calls `POST /v1/runtime-proxy/email/send/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/runtime-proxy/email/send` If this points at an external API, prefix it wit…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/runtime-proxy/email/send/ (assistant/src/runtime/verification-outbound-actions.ts:567)
`assistant/src/runtime/verification-outbound-actions.ts:567` calls `POST /v1/runtime-proxy/email/send/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/runtime-proxy/email/send` If this points at an external API, pre…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/telemetry/ingest/ (apps/web/src/domains/onboarding/funnel-events.ts:171)
`apps/web/src/domains/onboarding/funnel-events.ts:171` calls `POST /v1/telemetry/ingest/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/telemetry/ingest` If this points at an external API, prefix it with `https://`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/test/ (assistant/src/platform/client.test.ts:159)
`assistant/src/platform/client.test.ts:159` calls `POST /v1/test/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/test` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST /v1/test/ (assistant/src/platform/client.test.ts:175)
`assistant/src/platform/client.test.ts:175` calls `POST /v1/test/` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/test` If this points at an external API, prefix it with `https://` so the matcher skips it.
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${ingressPort}/v1/channels/inbound (assistant/src/__tests__/runtime-attachment-metadata.test.ts:321)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:321` calls `POST http://127.0.0.1:${ingressPort}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbo…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${ingressPort}/v1/channels/inbound (assistant/src/__tests__/runtime-attachment-metadata.test.ts:342)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:342` calls `POST http://127.0.0.1:${ingressPort}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbo…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${ingressPort}/v1/channels/inbound (assistant/src/__tests__/runtime-attachment-metadata.test.ts:368)
`assistant/src/__tests__/runtime-attachment-metadata.test.ts:368` calls `POST http://127.0.0.1:${ingressPort}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbo…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio (skills/meet-join/bot/__tests__/audio-playback.test.ts:394)
`skills/meet-join/bot/__tests__/audio-playback.test.ts:394` calls `POST http://127.0.0.1:${port}/play_audio` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` If this points at an exter…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio?stream_id=a (skills/meet-join/bot/__tests__/audio-playback.test.ts:460)
`skills/meet-join/bot/__tests__/audio-playback.test.ts:460` calls `POST http://127.0.0.1:${port}/play_audio?stream_id=a` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` If this points…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio?stream_id=b (skills/meet-join/bot/__tests__/audio-playback.test.ts:479)
`skills/meet-join/bot/__tests__/audio-playback.test.ts:479` calls `POST http://127.0.0.1:${port}/play_audio?stream_id=b` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` If this points…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio?stream_id=cancel-me (skills/meet-join/bot/__tests__/audio-playback.test.ts:337)
`skills/meet-join/bot/__tests__/audio-playback.test.ts:337` calls `POST http://127.0.0.1:${port}/play_audio?stream_id=cancel-me` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` If thi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio?stream_id=loopback-1 (skills/meet-join/bot/__tests__/voice-loopback.test.ts:194)
`skills/meet-join/bot/__tests__/voice-loopback.test.ts:194` calls `POST http://127.0.0.1:${port}/play_audio?stream_id=loopback-1` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio?stream_id=loopback-cancel (skills/meet-join/bot/__tests__/voice-loopback.test.ts:265)
`skills/meet-join/bot/__tests__/voice-loopback.test.ts:265` calls `POST http://127.0.0.1:${port}/play_audio?stream_id=loopback-cancel` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` …
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/play_audio?stream_id=s-1 (skills/meet-join/bot/__tests__/audio-playback.test.ts:275)
`skills/meet-join/bot/__tests__/audio-playback.test.ts:275` calls `POST http://127.0.0.1:${port}/play_audio?stream_id=s-1` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/play_audio` If this poin…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/calls/twilio/status (assistant/src/__tests__/gateway-only-enforcement.test.ts:304)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:304` calls `POST http://127.0.0.1:${port}/v1/calls/twilio/status` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/calls/twilio/status`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/calls/twilio/voice-webhook (assistant/src/__tests__/gateway-only-enforcement.test.ts:288)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:288` calls `POST http://127.0.0.1:${port}/v1/calls/twilio/voice-webhook` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/calls/twilio/…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/delivery-ack (assistant/src/__tests__/gateway-only-enforcement.test.ts:649)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:649` calls `POST http://127.0.0.1:${port}/v1/channels/delivery-ack` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/delivery-…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/inbound (assistant/src/__tests__/gateway-only-enforcement.test.ts:620)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:620` calls `POST http://127.0.0.1:${port}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbound` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/inbound (assistant/src/__tests__/gateway-only-enforcement.test.ts:672)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:672` calls `POST http://127.0.0.1:${port}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbound` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/inbound (assistant/src/__tests__/gateway-only-enforcement.test.ts:693)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:693` calls `POST http://127.0.0.1:${port}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbound` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/inbound (assistant/src/__tests__/gateway-only-enforcement.test.ts:713)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:713` calls `POST http://127.0.0.1:${port}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbound` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/inbound (assistant/src/__tests__/gateway-only-enforcement.test.ts:731)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:731` calls `POST http://127.0.0.1:${port}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbound` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/channels/inbound (assistant/src/__tests__/gateway-only-enforcement.test.ts:753)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:753` calls `POST http://127.0.0.1:${port}/v1/channels/inbound` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/channels/inbound` If th…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/internal/oauth/callback (assistant/src/__tests__/gateway-only-enforcement.test.ts:378)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:378` calls `POST http://127.0.0.1:${port}/v1/internal/oauth/callback` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/internal/oauth/c…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/internal/twilio/connect-action (assistant/src/__tests__/gateway-only-enforcement.test.ts:361)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:361` calls `POST http://127.0.0.1:${port}/v1/internal/twilio/connect-action` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/internal/…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/internal/twilio/status (assistant/src/__tests__/gateway-only-enforcement.test.ts:344)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:344` calls `POST http://127.0.0.1:${port}/v1/internal/twilio/status` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/internal/twilio/s…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/v1/internal/twilio/voice-webhook (assistant/src/__tests__/gateway-only-enforcement.test.ts:324)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:324` calls `POST http://127.0.0.1:${port}/v1/internal/twilio/voice-webhook` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/v1/internal/t…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/telegram (assistant/src/__tests__/gateway-only-enforcement.test.ts:181)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:181` calls `POST http://127.0.0.1:${port}/webhooks/telegram` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/telegram` If this p…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/telegram (assistant/src/__tests__/gateway-only-enforcement.test.ts:210)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:210` calls `POST http://127.0.0.1:${port}/webhooks/telegram` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/telegram` If this p…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/telegram/test (assistant/src/__tests__/gateway-only-enforcement.test.ts:198)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:198` calls `POST http://127.0.0.1:${port}/webhooks/telegram/test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/telegram/test`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/telegram/test (assistant/src/__tests__/gateway-only-enforcement.test.ts:221)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:221` calls `POST http://127.0.0.1:${port}/webhooks/telegram/test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/telegram/test`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/twilio/connect-action (assistant/src/__tests__/gateway-only-enforcement.test.ts:272)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:272` calls `POST http://127.0.0.1:${port}/webhooks/twilio/connect-action` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/twilio…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/twilio/status (assistant/src/__tests__/gateway-only-enforcement.test.ts:256)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:256` calls `POST http://127.0.0.1:${port}/webhooks/twilio/status` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/twilio/status`…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST http://127.0.0.1:${port}/webhooks/twilio/voice (assistant/src/__tests__/gateway-only-enforcement.test.ts:239)
`assistant/src/__tests__/gateway-only-enforcement.test.ts:239` calls `POST http://127.0.0.1:${port}/webhooks/twilio/voice` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/127.0.0.1:/<p>/webhooks/twilio/voice` I…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.anthropic.com/v1/messages (evals/src/lib/simulator/user-simulator.ts:446)
`evals/src/lib/simulator/user-simulator.ts:446` calls `POST https://api.anthropic.com/v1/messages` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.anthropic.com/v1/messages` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.deepgram.com/v1/speak?model=aura-2-thalia-en (apps/web/src/lib/tts-synthesize.ts:115)
`apps/web/src/lib/tts-synthesize.ts:115` calls `POST https://api.deepgram.com/v1/speak?model=aura-2-thalia-en` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.deepgram.com/v1/speak` If this points at an ex…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.elevenlabs.io/v1/text-to-speech/${encodeURIComponent( trimmedVoiceId, )}?output_format=mp3_44100_128 (apps/web/src/lib/tts-synthesize.ts:82)
`apps/web/src/lib/tts-synthesize.ts:82` calls `POST https://api.elevenlabs.io/v1/text-to-speech/${encodeURIComponent( trimmedVoiceId, )}?output_format=mp3_44100_128` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matc…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.fish.audio/v1/tts (assistant/src/calls/fish-audio-client.ts:67)
`assistant/src/calls/fish-audio-client.ts:67` calls `POST https://api.fish.audio/v1/tts` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.fish.audio/v1/tts` If this points at an external API, prefix it with…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.mailgun.net/v3/${mailgunDomainForVerify}/messages (gateway/src/http/routes/mailgun-webhook.ts:402)
`gateway/src/http/routes/mailgun-webhook.ts:402` calls `POST https://api.mailgun.net/v3/${mailgunDomainForVerify}/messages` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.mailgun.net/v3/<p>/messages` If t…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.mailgun.net/v3/${mailgunDomain}/messages (gateway/src/http/routes/mailgun-webhook.ts:476)
`gateway/src/http/routes/mailgun-webhook.ts:476` calls `POST https://api.mailgun.net/v3/${mailgunDomain}/messages` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.mailgun.net/v3/<p>/messages` If this point…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.perplexity.ai/chat/completions (assistant/src/__tests__/web-search.test.ts:866)
`assistant/src/__tests__/web-search.test.ts:866` calls `POST https://api.perplexity.ai/chat/completions` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.perplexity.ai/chat/completions` If this points at an…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (gateway/src/http/routes/resend-webhook.ts:460)
`gateway/src/http/routes/resend-webhook.ts:460` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it wi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.resend.com/emails (gateway/src/http/routes/resend-webhook.ts:545)
`gateway/src/http/routes/resend-webhook.ts:545` calls `POST https://api.resend.com/emails` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.resend.com/emails` If this points at an external API, prefix it wi…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.tavily.com/search (assistant/src/__tests__/web-search.test.ts:988)
`assistant/src/__tests__/web-search.test.ts:988` calls `POST https://api.tavily.com/search` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.tavily.com/search` If this points at an external API, prefix it w…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.telegram.org/bot${storedToken}/setMyCommands (assistant/src/daemon/handlers/config-telegram.ts:351)
`assistant/src/daemon/handlers/config-telegram.ts:351` calls `POST https://api.telegram.org/bot${storedToken}/setMyCommands` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.telegram.org/bot/<p>/setmycomman…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://api.vercel.com/v13/deployments (assistant/src/services/vercel-deploy.ts:31)
`assistant/src/services/vercel-deploy.ts:31` calls `POST https://api.vercel.com/v13/deployments` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/api.vercel.com/v13/deployments` If this points at an external AP…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://slack.com/api/auth.test (assistant/src/daemon/handlers/config-slack-channel.ts:191)
`assistant/src/daemon/handlers/config-slack-channel.ts:191` calls `POST https://slack.com/api/auth.test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/slack.com/api/auth.test` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://slack.com/api/auth.test (assistant/src/daemon/handlers/config-slack-channel.ts:264)
`assistant/src/daemon/handlers/config-slack-channel.ts:264` calls `POST https://slack.com/api/auth.test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/slack.com/api/auth.test` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://slack.com/api/auth.test (assistant/src/daemon/handlers/config-slack-channel.ts:350)
`assistant/src/daemon/handlers/config-slack-channel.ts:350` calls `POST https://slack.com/api/auth.test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/slack.com/api/auth.test` If this points at an external A…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: POST https://slack.com/api/auth.test (assistant/src/runtime/channel-readiness-service.ts:299)
`assistant/src/runtime/channel-readiness-service.ts:299` calls `POST https://slack.com/api/auth.test` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/https:/slack.com/api/auth.test` If this points at an external API,…
Dangling fetchFetch
high System graph api Wiring conf 1.00 Dangling fetch: PUT http://169.254.169.254/latest/api/token (cli/src/lib/local.ts:729)
`cli/src/lib/local.ts:729` calls `PUT http://169.254.169.254/latest/api/token` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: fetch Normalized path used for matching: `/http:/169.254.169.254/latest/api/token` If this points at an external API, prefix it with…
Dangling fetchFetch
high System graph hardware Supply chain conf 1.00 Dockerfile pipes a remote installer into a shell
Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature.
credential-executor/Dockerfile:13 containersRemote installer
high System graph hardware Supply chain conf 1.00 Dockerfile pipes a remote installer into a shell
Executing downloaded code during image build gives the remote endpoint build-time code execution. Prefer pinned packages or verify downloaded installers by checksum/signature.
assistant/Dockerfile:16 containersRemote installer
high System graph security security conf 1.00 Insecure pattern 'eval_used' in assistant/src/bundler/bundle-scanner.ts:376
Found a known-risky pattern (eval_used). Review and replace if possible.
assistant/src/bundler/bundle-scanner.ts:376 Eval used
high System graph security security conf 1.00 Insecure pattern 'eval_used' in skills/watch-together/scripts/process-chunk.sh:13
Found a known-risky pattern (eval_used). Review and replace if possible.
skills/watch-together/scripts/process-chunk.sh:13 Eval used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in assistant/src/memory/app-git-service.ts:326
Found a known-risky pattern (exec_used). Review and replace if possible.
assistant/src/memory/app-git-service.ts:326 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/commands/recover.ts:102
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/commands/recover.ts:102 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/commands/retire.ts:63
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/commands/retire.ts:63 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/commands/upgrade.ts:393
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/commands/upgrade.ts:393 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/lib/aws.ts:97
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/lib/aws.ts:97 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/lib/docker.ts:127
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/lib/docker.ts:127 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/lib/gcp.ts:127
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/lib/gcp.ts:127 Exec used
high System graph security security conf 1.00 Insecure pattern 'exec_used' in cli/src/lib/upgrade-lifecycle.ts:703
Found a known-risky pattern (exec_used). Review and replace if possible.
cli/src/lib/upgrade-lifecycle.ts:703 Exec used
high System graph security security conf 1.00 Insecure pattern 'new_function_used' in clients/macos/vellum-assistant/Resources/editor/toastui-editor-all.min.js:9
Found a known-risky pattern (new_function_used). Review and replace if possible.
clients/macos/vellum-assistant/Resources/editor/toastui-editor-all.min.js:9 New function used
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — apps/web/src/components/avatar-renderer.tsx:40
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — apps/web/src/domains/account/pages/oauth-complete-page.tsx:257
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — apps/web/src/domains/account/pages/oauth-popup-complete-page.tsx:261
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — apps/web/src/domains/chat/components/chat-attachments/text-preview.tsx:195
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — apps/web/src/domains/onboarding/cast/cast-avatar.tsx:43
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — apps/web/src/domains/onboarding/cast/cast-starter.tsx:306
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph frontend Frontend quality conf 1.00 `dangerouslySetInnerHTML` used in a React component — evals/src/lib/report-html.tsx:2027
Open XSS surface unless the input is provably trusted. Replace with explicit JSX or sanitize via a vetted library. Why: OWASP basics. Already partially flagged by the security analyzer. Rule id: fq.dangerous-html
Fq dangerous html
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/macos/src/main/bundle-flow.ts:68
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/macos/src/main/index.ts:257
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/macos/src/main/native-auth.test.ts:153
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/macos/src/main/vellumapp-protocol.ts:95
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/macos/src/main/workos-pkce.test.ts:162
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/macos/src/main/workos-pkce.ts:88
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/assistant/queries.ts:7
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/components/profile-quick-add-provider.tsx:23
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/chat/hooks/use-conversation-history.ts:118
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/chat/hooks/use-event-stream-resume-reconcile.test.tsx:125
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/chat/hooks/use-message-reconciliation.test.tsx:361
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/chat/hooks/use-message-reconciliation.ts:466
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/chat/transcript/use-history-pagination.ts:76
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/settings/ai/email-managed-content.tsx:71
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/domains/settings/components/panels/use-doctor-sse.ts:121
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/lib/auth/request-headers.ts:4
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/lib/backwards-compat/utils.ts:88
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/lib/sentry/sentry-init.ts:35
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/lib/streaming/cold-anchor.ts:5
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/lib/tts-synthesize.ts:82
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/runtime/local-mode-host.ts:133
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/utils/is-transient-network-error.test.ts:15
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/utils/is-transient-network-error.ts:13
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — apps/web/src/utils/sandbox-bridge.ts:11
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/scripts/capture-x-graphql.ts:228
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/approval-routes-http.test.ts:373
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/call-routes-http.test.ts:184
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/conversation-error.test.ts:87
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/conversation-fork-route.test.ts:126
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/conversation-inference-profile-list.test.ts:79
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/conversation-list-source.test.ts:80
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/conversation-unread-route.test.ts:86
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/gateway-only-enforcement.test.ts:181
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/http-conversation-lineage.test.ts:76
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/migration-import-from-url.test.ts:559
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/mock-signup-server.test.ts:51
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/oauth2-gateway-transport.test.ts:246
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/provider-error-scenarios.test.ts:500
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/provider-streaming.benchmark.test.ts:232
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/runtime-attachment-metadata.test.ts:113
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/runtime-events-sse.test.ts:79
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/script-proxy-http-forwarder.test.ts:87
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/send-endpoint-busy.test.ts:386
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/__tests__/web-fetch.test.ts:41
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/background-wake/platform-client.ts:30
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/bundler/bundle-scanner.ts:346
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/bundler/compiler-tools.ts:65
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/calls/fish-audio-client.ts:67
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/calls/twilio-provider.ts:19
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/calls/twilio-rest.ts:6
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/cli/lib/plugin-marketplace.ts:190
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/config/assistant-feature-flags.ts:279
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/config/feature-flag-cache.ts:54
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/credential-health/credential-health-service.ts:389
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/live-voice/__tests__/live-voice-tts.test.ts:291
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/live-voice/__tests__/runtime-websocket-shell.test.ts:279
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/media/gemini-image-service.ts:80
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/memory/embedding-gemini.ts:84
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/memory/embedding-ollama.ts:42
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/memory/qdrant-manager.ts:201
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/messaging/providers/slack/api.ts:128
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/messaging/providers/slack/client.ts:101
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/messaging/providers/whatsapp/api.ts:204
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/oauth/connection-resolver.ts:216
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/oauth/identity-verifier.ts:97
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/oauth/platform-connection.ts:99
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/permissions/checker.test.ts:337
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/platform/client.test.ts:122
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/platform/client.ts:104
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/providers/openai/responses-provider.ts:174
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/migrations/gcs-signed-url.ts:5
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/routes/email-routes.ts:79
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/routes/migration-routes.ts:1205
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/routes/oauth-commands-routes.ts:100
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/routes/sanity-routes.ts:55
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/routes/skills-routes.ts:435
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/runtime/verification-outbound-actions.ts:545
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/schedule/integration-status.ts:58
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/services/vercel-deploy.ts:31
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/telemetry/usage-telemetry-reporter.ts:593
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/browser/cdp-client/cdp-inspect/__tests__/discovery.test.ts:40
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/browser/cdp-client/cdp-inspect/__tests__/ws-transport.test.ts:103
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/browser/cdp-client/cdp-inspect/discovery.ts:230
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/browser/network-recorder.ts:147
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/network/__tests__/web-fetch-metadata.test.ts:27
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/network/managed-search-proxy.ts:88
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — assistant/src/tools/network/web-fetch.ts:252
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — cli/src/__tests__/devices.test.ts:37
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — cli/src/__tests__/login-loopback.test.ts:27
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — cli/src/components/DefaultMainScreen.tsx:298
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — cli/src/lib/guardian-token.ts:456
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — cli/src/lib/loopback-fetch.ts:26
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — clients/chrome-extension/background/cloud-api.ts:68
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — clients/chrome-extension/background/sse-connection.ts:7
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — clients/chrome-extension/background/worker.ts:449
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — clients/chrome-extension/background/workos-pkce.ts:141
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — credential-executor/src/__tests__/managed-integration.test.ts:388
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — credential-executor/src/__tests__/managed-reconnect.test.ts:66
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — evals/src/lib/llm-judge.ts:63
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — evals/src/lib/simulator/user-simulator.ts:446
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/__tests__/credential-cache.test.ts:332
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/__tests__/credential-watcher-managed-bootstrap.test.ts:164
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/__tests__/credential-watcher.test.ts:298
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/__tests__/remote-feature-flag-sync.test.ts:837
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/__tests__/route-schema-guard.test.ts:34
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/credential-cache.ts:49
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/fetch.ts:12
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/http/routes/mailgun-webhook.ts:402
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/index.ts:1617
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/risk/web-risk-classifier.test.ts:44
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — gateway/src/risk/web-risk-classifier.ts:78
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — scripts/generate-emoji-catalog.ts:320
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/doordash/scripts/lib/client.ts:108
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/doordash/scripts/lib/shared/network-recorder.ts:127
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/bot/__tests__/audio-playback.test.ts:275
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/bot/__tests__/avatar-http-server.test.ts:113
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/bot/__tests__/http-server.test.ts:80
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/bot/__tests__/play-audio-teardown.test.ts:224
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/bot/__tests__/send-chat-endpoint.test.ts:66
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/bot/__tests__/voice-loopback.test.ts:194
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/daemon/__tests__/avatar-e2e.test.ts:248
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/daemon/__tests__/chat-send-e2e.test.ts:15
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/daemon/__tests__/proactive-chat-e2e.test.ts:24
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/meet-join/daemon/tts-bridge.ts:497
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — skills/outlook/scripts/outlook-manage.ts:744
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: .claude/README.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
.claude/README.md VerificationClaude instruction
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: assistant/src/config/bundled-skills/acp/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
assistant/src/config/bundled-skills/acp/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: assistant/src/config/bundled-skills/computer-use/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
assistant/src/config/bundled-skills/computer-use/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: assistant/src/config/bundled-skills/playbooks/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
assistant/src/config/bundled-skills/playbooks/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: assistant/src/notifications/AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
assistant/src/notifications/AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: assistant/src/tools/AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
assistant/src/tools/AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: assistant/src/workspace/migrations/AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
assistant/src/workspace/migrations/AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: cli/AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
cli/AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: meta/feature-flags/AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
meta/feature-flags/AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/AGENTS.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/AGENTS.md VerificationAgents md
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/assistant-migration/references/claude.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/assistant-migration/references/claude.md VerificationClaude instruction
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/chatgpt-import/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/chatgpt-import/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/cli-discover/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/cli-discover/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/conversation-launcher/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/conversation-launcher/SKILL.md VerificationSkill file
medium System graph quality Agent instructions conf 1.00 Agent authority lacks a verifier contract: skills/geo-writing/SKILL.md
This agent instruction grants code or shell authority but does not state the verification gate that decides promotion. The recurring safe pattern is: LLM proposes; deterministic tests/build/security checks verify; only verified code promotes.
skills/geo-writing/SKILL.md VerificationSkill file

Showing first 300 of 848. Refine filters or use the findings page for deep search.

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/5a4d8fce-ffea-4466-9bfa-9a1931c0d819/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/5a4d8fce-ffea-4466-9bfa-9a1931c0d819/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.