xuzhougeng/wispterm

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

78 of your 142 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.86s · analysis 25.24s · 12.3 MB · GitHub preflight 532ms

https://github.com/xuzhougeng/wispterm · scanned 2026-06-05 14:20 UTC (5 days, 5 hours ago) · 10 languages

258 raw signals (130 security + 128 graph) 32nd percentile · Typescript · medium (20-100K LoC) System graph score 80 (lower by 15)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 5 hours ago · v2 · 94 actionable findings from 2 signal sources. 88 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 36 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	32.9	0.25	8.22
`testing_score`	90.0	0.20	18.00
`documentation_score`	80.0	0.15	12.00
`practices_score`	71.0	0.15	10.65
`code_quality`	61.3	0.10	6.13
Overall		1.00	64.8

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 20 Medium 10 Low 38 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 58 System graph 36 Crowd 0 Layer: Software 43 Cicd 8 Quality 33 Security 5 Api 1 Frontend 2 Hardware 2

Exclude dismissed / FP Exclude test files

All 948 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`declarationsForSelector`	software	healthy	`remote/test/client/responsive_css.test.ts:declarationsForSe…`
`installLocalStorage`	software	healthy	`remote/test/client/storage.test.ts:installLocalStorage`
`setupDocument`	software	healthy	`remote/test/client/vkbd.test.ts:setupDocument`
`escapeRegExp`	software	healthy	`remote/test/client/vkbd.test.ts:escapeRegExp`
`preventableEvent`	software	healthy	`remote/test/client/mobile_text_input.test.ts:preventableEve…`
`setup`	software	healthy	`remote/test/client/mobile_text_input.test.ts:setup`
`layoutWith`	software	healthy	`remote/test/client/mobile_surface_mode.test.ts:layoutWith`
`setMobileShell`	software	healthy	`remote/test/client/focus_policy.test.ts:setMobileShell`
`withServer`	software	healthy	`remote/test/server/weixin_client.test.ts:withServer`
`fakeReq`	software	healthy	`remote/test/server/weixin_routes.test.ts:fakeReq`
`fakeRes`	software	healthy	`remote/test/server/weixin_routes.test.ts:fakeRes`
`jsonBody`	software	healthy	`remote/test/server/weixin_routes.test.ts:jsonBody`
`routeContext`	software	healthy	`remote/test/server/weixin_routes.test.ts:routeContext`
`tempStore`	software	healthy	`remote/test/server/weixin_routes.test.ts:tempStore`
`sessionWithLayout`	software	healthy	`remote/test/server/weixin_agent.test.ts:sessionWithLayout`
`sessionWithoutAiChat`	software	healthy	`remote/test/server/weixin_agent.test.ts:sessionWithoutAiChat`
`offlineSessionWithLayout`	software	healthy	`remote/test/server/weixin_agent.test.ts:offlineSessionWithL…`
`wisptermSocket`	software	healthy	`remote/test/server/weixin_agent.test.ts:wisptermSocket`
`waitForSentType`	software	healthy	`remote/test/server/weixin_agent.test.ts:waitForSentType`
`fakeStore`	software	healthy	`remote/test/server/weixin_poller.test.ts:fakeStore`
`fakeScheduler`	software	healthy	`remote/test/server/weixin_poller.test.ts:fakeScheduler`
`fakeManualScheduler`	software	healthy	`remote/test/server/weixin_poller.test.ts:fakeManualScheduler`
`pongMessage`	software	healthy	`remote/src/worker.ts:pongMessage`
`login`	software	healthy	`remote/src/worker.ts:login`
`body`	software	healthy	`remote/src/worker.ts:body`
`username`	software	healthy	`remote/src/worker.ts:username`
`logout`	software	healthy	`remote/src/worker.ts:logout`
`routeWebSocket`	software	healthy	`remote/src/worker.ts:routeWebSocket`
`verifyPassword`	software	healthy	`remote/src/worker.ts:verifyPassword`
`readSession`	software	healthy	`remote/src/worker.ts:readSession`
`signSession`	software	healthy	`remote/src/worker.ts:signSession`
`sha256Hex`	software	healthy	`remote/src/worker.ts:sha256Hex`
`hmacHex`	software	healthy	`remote/src/worker.ts:hmacHex`
`timingSafeEqual`	software	healthy	`remote/src/worker.ts:timingSafeEqual`
`hex`	software	healthy	`remote/src/worker.ts:hex`
`encodeBase64Url`	software	healthy	`remote/src/worker.ts:encodeBase64Url`
`decodeBase64Url`	software	healthy	`remote/src/worker.ts:decodeBase64Url`
`safeJson`	software	healthy	`remote/src/worker.ts:safeJson`
`json`	software	healthy	`remote/src/worker.ts:json`
`remoteTabSelectionSidebarAction`	software	healthy	`remote/src/client/sidebar_behavior.ts:remoteTabSelectionSid…`
`readSavedSessionKey`	software	healthy	`remote/src/client/storage.ts:readSavedSessionKey`
`saveSessionKey`	software	healthy	`remote/src/client/storage.ts:saveSessionKey`
`clearSessionKey`	software	healthy	`remote/src/client/storage.ts:clearSessionKey`
`maskSessionKey`	software	healthy	`remote/src/client/storage.ts:maskSessionKey`
`readSavedKbdVisible`	software	healthy	`remote/src/client/storage.ts:readSavedKbdVisible`
`saveKbdVisible`	software	healthy	`remote/src/client/storage.ts:saveKbdVisible`
`readSavedSidebarCollapsed`	software	healthy	`remote/src/client/storage.ts:readSavedSidebarCollapsed`
`saveSidebarCollapsed`	software	healthy	`remote/src/client/storage.ts:saveSidebarCollapsed`
`readSavedDesktopPanelMode`	software	healthy	`remote/src/client/storage.ts:readSavedDesktopPanelMode`
`saveDesktopPanelMode`	software	healthy	`remote/src/client/storage.ts:saveDesktopPanelMode`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`README.zh-CN.md`	software	healthy	`README.zh-CN.md`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Makefile`	software	healthy	`Makefile`
`AGENTS.md`	software	healthy	`AGENTS.md`
`TODO.md`	software	healthy	`TODO.md`
`skill-load-cases.json`	software	healthy	`tests/eval/skill-load-cases.json`
`README.md`	software	healthy	`tests/eval/README.md`
`SKILL.md`	software	healthy	`tests/eval/skills/pdf/SKILL.md`
`SKILL.md`	software	healthy	`tests/eval/skills/browser/SKILL.md`
`architecture.md`	software	healthy	`docs/architecture.md`
`tabs-panels.md`	software	healthy	`docs/tabs-panels.md`
`media.md`	software	healthy	`docs/media.md`
`file-explorer.md`	software	healthy	`docs/file-explorer.md`
`themes.html`	software	healthy	`docs/themes.html`
`ai.zh.html`	software	healthy	`docs/ai.zh.html`
`README.md`	software	healthy	`docs/README.md`
`macos-ui-lessons.md`	software	healthy	`docs/macos-ui-lessons.md`
`index.html`	software	healthy	`docs/index.html`
`themes-data.js`	software	warning	`docs/themes-data.js`
`use-cases.html`	software	healthy	`docs/use-cases.html`
`configuration.md`	software	healthy	`docs/configuration.md`
`zh.html`	software	healthy	`docs/zh.html`
`decoupling-guide.md`	software	healthy	`docs/decoupling-guide.md`
`development.md`	software	healthy	`docs/development.md`
`use-cases.zh.html`	software	healthy	`docs/use-cases.zh.html`
`ai-agent.md`	software	healthy	`docs/ai-agent.md`
`faq.md`	software	healthy	`docs/faq.md`
`ai.html`	software	healthy	`docs/ai.html`
`style.css`	software	healthy	`docs/style.css`
`weixin-direct-windows-handoff.md`	software	healthy	`docs/superpowers/weixin-direct-windows-handoff.md`
`2026-06-04-whats-new-panel.md`	software	healthy	`docs/superpowers/plans/2026-06-04-whats-new-panel.md`
`2026-05-26-gpu-backend-spine-a1-a2.md`	software	healthy	`docs/superpowers/plans/2026-05-26-gpu-backend-spine-a1-a2.md`
`2026-05-26-ai-profile-command-center-management.md`	software	healthy	`docs/superpowers/plans/2026-05-26-ai-profile-command-center…`
`2026-06-01-i18n-infrastructure.md`	software	healthy	`docs/superpowers/plans/2026-06-01-i18n-infrastructure.md`
`2026-06-04-ai-skill-distill.md`	software	healthy	`docs/superpowers/plans/2026-06-04-ai-skill-distill.md`
`2026-06-02-async-ai-history-scan.md`	software	healthy	`docs/superpowers/plans/2026-06-02-async-ai-history-scan.md`
`2026-05-09-remote-mobile-console.md`	software	healthy	`docs/superpowers/plans/2026-05-09-remote-mobile-console.md`
`2026-05-15-command-center-agent-entrypoints.md`	software	healthy	`docs/superpowers/plans/2026-05-15-command-center-agent-entr…`
`2026-05-30-ai-copilot-sidebar.md`	software	healthy	`docs/superpowers/plans/2026-05-30-ai-copilot-sidebar.md`
`2026-06-04-ai-loop-watch-scheduled-prompts.md`	software	healthy	`docs/superpowers/plans/2026-06-04-ai-loop-watch-scheduled-p…`
`2026-06-05-file-preview-enhance.md`	software	healthy	`docs/superpowers/plans/2026-06-05-file-preview-enhance.md`
`2026-05-26-gpu-a4-a6.md`	software	healthy	`docs/superpowers/plans/2026-05-26-gpu-a4-a6.md`
`2026-06-04-wiki-user-guide.md`	software	healthy	`docs/superpowers/plans/2026-06-04-wiki-user-guide.md`
`2026-05-30-wispterm-notify-setup-skill.md`	software	healthy	`docs/superpowers/plans/2026-05-30-wispterm-notify-setup-ski…`
`2026-06-05-weixin-remote-approval.md`	software	healthy	`docs/superpowers/plans/2026-06-05-weixin-remote-approval.md`
`2026-05-15-agent-skill-tool.md`	software	healthy	`docs/superpowers/plans/2026-05-15-agent-skill-tool.md`
`2026-05-25-command-palette-ssh-quick-jump.md`	software	healthy	`docs/superpowers/plans/2026-05-25-command-palette-ssh-quick…`
`2026-05-26-d-prep-gpu-neutralize.md`	software	healthy	`docs/superpowers/plans/2026-05-26-d-prep-gpu-neutralize.md`
`2026-05-25-chat-transcript-scrollbar.md`	software	healthy	`docs/superpowers/plans/2026-05-25-chat-transcript-scrollbar…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`eval`	software	healthy	`tests/eval`
`skills`	software	healthy	`tests/eval/skills`
`pdf`	software	healthy	`tests/eval/skills/pdf`
`browser`	software	healthy	`tests/eval/skills/browser`
`docs`	software	healthy	`docs`
`superpowers`	software	healthy	`docs/superpowers`
`plans`	software	healthy	`docs/superpowers/plans`
`specs`	software	healthy	`docs/superpowers/specs`
`remote`	software	healthy	`remote`
`test`	software	healthy	`remote/test`
`client`	software	healthy	`remote/test/client`
`server`	software	healthy	`remote/test/server`
`docs`	software	healthy	`remote/docs`
`src`	software	healthy	`remote/src`
`client`	software	healthy	`remote/src/client`
`styles`	software	healthy	`remote/src/client/styles`
`views`	software	healthy	`remote/src/client/views`
`server`	software	healthy	`remote/src/server`
`bridge`	software	healthy	`remote/src/server/bridge`
`weixin`	software	healthy	`remote/src/server/bridge/weixin`
`wiki`	software	healthy	`wiki`
`packaging`	software	healthy	`packaging`
`macos`	software	healthy	`packaging/macos`
`tools`	software	healthy	`tools`
`plans`	software	healthy	`plans`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`workflows`	software	healthy	`.github/workflows`
`debug`	software	healthy	`debug`
`pkg`	software	healthy	`pkg`
`freetype`	software	healthy	`pkg/freetype`
`libpng`	software	healthy	`pkg/libpng`
`src`	software	healthy	`src`
`platform`	software	healthy	`src/platform`
`release-notes`	software	healthy	`release-notes`
`plugins`	software	healthy	`plugins`
`skills`	software	healthy	`plugins/skills`
`wispterm-diagnostics`	software	healthy	`plugins/skills/wispterm-diagnostics`
`agents`	software	healthy	`plugins/skills/wispterm-diagnostics/agents`
`inspect-computer-config`	software	healthy	`plugins/skills/inspect-computer-config`
`scripts`	software	healthy	`plugins/skills/inspect-computer-config/scripts`
`agents`	software	healthy	`plugins/skills/inspect-computer-config/agents`
`tbtools`	software	healthy	`plugins/skills/tbtools`
`wispterm-notify-setup`	software	healthy	`plugins/skills/wispterm-notify-setup`
`scripts`	software	healthy	`plugins/skills/wispterm-notify-setup/scripts`
`agents`	software	healthy	`plugins/skills/wispterm-notify-setup/agents`

Label	Layer	Status	Path
`FakeButton`	software	healthy	`remote/test/client/vkbd.test.ts:FakeButton`
`FakeKeyboard`	software	healthy	`remote/test/client/vkbd.test.ts:FakeKeyboard`
`FakeTextArea`	software	healthy	`remote/test/client/vkbd.test.ts:FakeTextArea`
`FakeTextArea`	software	healthy	`remote/test/client/mobile_text_input.test.ts:FakeTextArea`
`FakeInput`	software	healthy	`remote/test/client/terminal_input_guard.test.ts:FakeInput`
`FakeRoot`	software	healthy	`remote/test/client/terminal_input_guard.test.ts:FakeRoot`
`FakeSocket`	software	healthy	`remote/test/server/session.test.ts:FakeSocket`
`ThrowingSocket`	software	healthy	`remote/test/server/session.test.ts:ThrowingSocket`
`FakeSocket`	software	healthy	`remote/test/server/weixin_agent.test.ts:FakeSocket`
`ThrowingSocket`	software	healthy	`remote/test/server/weixin_agent.test.ts:ThrowingSocket`
`RemoteSession`	software	healthy	`remote/src/worker.ts:RemoteSession`
`RemoteSession`	software	healthy	`remote/src/server/session.ts:RemoteSession`
`WeixinBindingStore`	software	healthy	`remote/src/server/bridge/weixin/binding.ts:WeixinBindingSto…`
`WeixinPoller`	software	healthy	`remote/src/server/bridge/weixin/poller.ts:WeixinPoller`
`WeixinClient`	software	healthy	`remote/src/server/bridge/weixin/client.ts:WeixinClient`
`KittyGraphicsEmitTests`	software	healthy	`tools/test_kitty_graphics.py:11`

Label	Layer	Status	Path
`ASSET_PATH`	cicd	healthy	`—`
`ASSET_NAME`	cicd	healthy	`—`
`APPLE_ID`	cicd	healthy	`—`
`APPLE_APP_PASSWORD`	cicd	healthy	`—`
`MAC_CERT_P12_BASE64`	cicd	healthy	`—`
`MAC_CERT_PASSWORD`	cicd	healthy	`—`
`APPLE_TEAM_ID`	cicd	healthy	`—`

Label	Layer	Status	Path
`build-windows`	cicd	healthy	`.github/workflows/windows-release.yml`
`deploy`	cicd	healthy	`.github/workflows/pages.yml`
`build-debug`	cicd	healthy	`.github/workflows/macos-debug.yml`
`build-macos-x86_64`	cicd	healthy	`.github/workflows/macos-release-x86_64.yml`
`build-macos`	cicd	healthy	`.github/workflows/macos-release.yml`
`publish`	cicd	healthy	`.github/workflows/macos-release.yml`

Label	Layer	Status	Path
`gha::windows-release`	cicd	healthy	`.github/workflows/windows-release.yml`
`gha::pages`	cicd	healthy	`.github/workflows/pages.yml`
`gha::macos-debug`	cicd	healthy	`.github/workflows/macos-debug.yml`
`gha::macos-release-x86_64`	cicd	healthy	`.github/workflows/macos-release-x86_64.yml`
`gha::macos-release`	cicd	healthy	`.github/workflows/macos-release.yml`

Label	Layer	Status	Path
`password_literal::remote/.env.example`	security	healthy	`remote/.env.example`
`password_literal::.github/workflows/macos-release-x86_64.yml`	security	healthy	`.github/workflows/macos-release-x86_64.yml`
`password_literal::.github/workflows/macos-release.yml`	security	healthy	`.github/workflows/macos-release.yml`

Label	Layer	Status	Path
`port:8787`	network	healthy	`remote/Dockerfile`
`port:9000`	network	healthy	`remote/test/server/dev_mock.test.ts`

Label	Layer	Status	Path
`image::remote/Dockerfile`	hardware	healthy	`remote/Dockerfile`
`wispterm-remote`	hardware	healthy	`remote/docker-compose.yml`

Label	Layer	Status	Path
`repobility-clone-tkj_o0mw`	software	healthy	`/tmp/repobility-clone-tkj_o0mw`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`remote/package.json`

Label	Layer	Status	Path
`nginx`	network	healthy	`remote/.env.example`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`plugins/skills/inspect-computer-config/scripts/inspect_comp…`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/7084ae59-6326-4431-a8bd-10e406e46ecb/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/7084ae59-6326-4431-a8bd-10e406e46ecb/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

xuzhougeng/wispterm

Complete repo analysis

function 50+

file 50+

directory 47

class 16

env_var 7

job 6

pipeline 5

secret 3

port 2

container 2

repo 1

service 1

load_balancer 1

gpu 1