Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Scottcjn/Rustchain

https://github.com/Scottcjn/Rustchain · scanned 2026-06-16 04:38 UTC (1 month, 3 weeks ago)

84 raw signals (0 security + 84 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 3 weeks ago · v1 · 68 actionable findings from 1 signal source. 16 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
94.0
/100
Security checks
94
0 findings
System graph
94
77.8% cov · 68 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: severity: high × excluding tests × Reset all
Severity: Critical 0 High 22 Medium 10 Low 34 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 68 Crowd 0 Layer: Software 20 Hardware 1 Security 26 Quality 21
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 94.0/100 with 77.8% coverage. It contains 1091 nodes across 30 cross-layer flows, written primarily in mixed languages. Engine surfaced 84 findings — concentrated in quality (37), security (26), software (20). Risk profile is high: 0 critical, 22 high, 10 medium. Recommended next step: open the quality layer findings first — that's where the highest-impact wins live.

Showing 19 of 68 actionable findings. 84 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph security auth conf 1.00 Flask mutation route `admin_intervene` without `@login_required` — agent_relationships.py:1183
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
agent_relationships.py:1183 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `agent_accept_delivery` without `@login_required` — rip302_agent_economy.py:586
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
rip302_agent_economy.py:586 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `agent_cancel_job` without `@login_required` — rip302_agent_economy.py:765
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
rip302_agent_economy.py:765 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `agent_claim_job` without `@login_required` — rip302_agent_economy.py:437
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
rip302_agent_economy.py:437 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `agent_deliver_job` without `@login_required` — rip302_agent_economy.py:511
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
rip302_agent_economy.py:511 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `agent_dispute_job` without `@login_required` — rip302_agent_economy.py:703
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
rip302_agent_economy.py:703 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `agent_post_job` without `@login_required` — rip302_agent_economy.py:327
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
rip302_agent_economy.py:327 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `api_ledger_create` without `@login_required` — payout_ledger.py:284
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
payout_ledger.py:284 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `api_ledger_update` without `@login_required` — payout_ledger.py:311
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
payout_ledger.py:311 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `approve_contributor` without `@login_required` — contributor_registry.py:313
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
contributor_registry.py:313 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `collaborate` without `@login_required` — agent_relationships.py:1133
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
agent_relationships.py:1133 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `create_badge` without `@login_required` — profile_badge_generator.py:170
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
profile_badge_generator.py:170 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `disagree` without `@login_required` — agent_relationships.py:1108
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
agent_relationships.py:1108 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `drip` without `@login_required` — faucet.py:383
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
faucet.py:383 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `faucet_drip` without `@login_required` — keeper_explorer.py:120
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
keeper_explorer.py:120 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `inspect_fingerprint` without `@login_required` — sophia_api.py:80
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
sophia_api.py:80 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `reconcile` without `@login_required` — agent_relationships.py:1160
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
agent_relationships.py:1160 securityAuth flask unauth route
high System graph security auth conf 1.00 Flask mutation route `register` without `@login_required` — contributor_registry.py:266
Flask route declares POST/PUT/DELETE/PATCH methods without an auth decorator. Add `@login_required` (Flask-Login) or equivalent.
contributor_registry.py:266 securityAuth flask unauth route
high System graph security security conf 1.00 Insecure pattern 'tls_verify_false' in install-miner.sh:215
Found a known-risky pattern (tls_verify_false). Review and replace if possible.
install-miner.sh:215 Tls verify false
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/652b2a8f-05d7-41ad-bb34-77c2266755ef/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/652b2a8f-05d7-41ad-bb34-77c2266755ef/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.