Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

SmooAI/smooth

https://github.com/SmooAI/smooth · scanned 2026-06-16 00:16 UTC (2 months, 2 weeks ago)

56 raw signals (0 security + 56 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 2 weeks ago · v1 · 39 actionable findings from 1 signal source. 17 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 39 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 3 Medium 11 Low 18 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 39 Crowd 0 Layer: Frontend 3 Security 6 Cicd 5 Quality 25

Exclude dismissed / FP Exclude test files

All 775 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`DESIGN.md`	software	healthy	`DESIGN.md`
`Cargo.toml`	software	healthy	`Cargo.toml`
`README.md`	software	healthy	`README.md`
`rustfmt.toml`	software	healthy	`rustfmt.toml`
`pnpm-lock.yaml`	software	healthy	`pnpm-lock.yaml`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`install.sh`	software	healthy	`install.sh`
`package.json`	software	healthy	`package.json`
`.oxfmtrc.json`	software	healthy	`.oxfmtrc.json`
`.oxlintrc.json`	software	healthy	`.oxlintrc.json`
`dprint.json`	software	healthy	`dprint.json`
`LICENSE`	software	healthy	`LICENSE`
`Cargo.lock`	software	healthy	`Cargo.lock`
`SECURITY.md`	software	healthy	`SECURITY.md`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`the-line-sample.json`	software	healthy	`tests/fixtures/the-line-sample.json`
`the-line-regression.json`	software	healthy	`tests/fixtures/the-line-regression.json`
`white-paper-security-architecture.md`	software	healthy	`docs/white-paper-security-architecture.md`
`bench-badge.json`	software	healthy	`docs/bench-badge.json`
`extending.md`	software	healthy	`docs/extending.md`
`bench-history.md`	software	healthy	`docs/bench-history.md`
`Home.md`	software	healthy	`docs/Home.md`
`How-to-Update-These-Docs.md`	software	healthy	`docs/_meta/How-to-Update-These-Docs.md`
`Sandboxed-Mode.md`	software	healthy	`docs/Architecture/Sandboxed-Mode.md`
`Transport.md`	software	healthy	`docs/Architecture/Transport.md`
`Dispatch.md`	software	healthy	`docs/Architecture/Dispatch.md`
`Pearls.md`	software	healthy	`docs/Architecture/Pearls.md`
`Operatives.md`	software	healthy	`docs/Architecture/Operatives.md`
`Direct-Mode.md`	software	healthy	`docs/Architecture/Direct-Mode.md`
`The-Cast.md`	software	healthy	`docs/Architecture/The-Cast.md`
`Architecture-Overview.md`	software	healthy	`docs/Architecture/Architecture-Overview.md`
`Data-Storage.md`	software	healthy	`docs/Architecture/Data-Storage.md`
`ADR-Template.md`	software	healthy	`docs/_templates/ADR-Template.md`
`Cast-Role-Template.md`	software	healthy	`docs/_templates/Cast-Role-Template.md`
`Running-Locally.md`	software	healthy	`docs/Operations/Running-Locally.md`
`Troubleshooting.md`	software	healthy	`docs/Operations/Troubleshooting.md`
`Glossary.md`	software	healthy	`docs/Start-Here/Glossary.md`
`What-Is-Smooth.md`	software	healthy	`docs/Start-Here/What-Is-Smooth.md`
`2026-05-29-coach-kimi-k2.6-direct.json`	software	healthy	`docs/bench-sessions/2026-05-29-coach-kimi-k2.6-direct.json`
`2026-05-28-kimi-k2.6-direct.json`	software	healthy	`docs/bench-sessions/2026-05-28-kimi-k2.6-direct.json`
`2026-05-02-tuning-batch-followup.md`	software	healthy	`docs/bench-sessions/2026-05-02-tuning-batch-followup.md`
`2026-05-29-coach-glm-5.1.json`	software	healthy	`docs/bench-sessions/2026-05-29-coach-glm-5.1.json`
`2026-05-02-v0.12.11-take7-final.json`	software	healthy	`docs/bench-sessions/2026-05-02-v0.12.11-take7-final.json`
`2026-05-28-4-model-matrix.md`	software	healthy	`docs/bench-sessions/2026-05-28-4-model-matrix.md`
`2026-05-02-tuning-batch.json`	software	healthy	`docs/bench-sessions/2026-05-02-tuning-batch.json`
`2026-05-29-coach-claude-sonnet-4-6.json`	software	healthy	`docs/bench-sessions/2026-05-29-coach-claude-sonnet-4-6.json`
`2026-05-02-tuning-batch.md`	software	healthy	`docs/bench-sessions/2026-05-02-tuning-batch.md`
`2026-05-02-v0.12.11-progress-report.html`	software	healthy	`docs/bench-sessions/2026-05-02-v0.12.11-progress-report.html`
`2026-05-29-coach-deepseek-v4-flash.json`	software	healthy	`docs/bench-sessions/2026-05-29-coach-deepseek-v4-flash.json`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`fixtures`	software	healthy	`tests/fixtures`
`docs`	software	healthy	`docs`
`_meta`	software	healthy	`docs/_meta`
`Architecture`	software	healthy	`docs/Architecture`
`_templates`	software	healthy	`docs/_templates`
`Operations`	software	healthy	`docs/Operations`
`Start-Here`	software	healthy	`docs/Start-Here`
`bench-sessions`	software	healthy	`docs/bench-sessions`
`Engineering`	software	healthy	`docs/Engineering`
`Decisions`	software	healthy	`docs/Decisions`
`scripts`	software	healthy	`scripts`
`the-line`	software	healthy	`scripts/the-line`
`c`	software	healthy	`c`
`smooth-dolt-launcher`	software	healthy	`c/smooth-dolt-launcher`
`crates`	software	healthy	`crates`
`smooth-policy`	software	healthy	`crates/smooth-policy`
`src`	software	healthy	`crates/smooth-policy/src`
`smooth-api-client`	software	healthy	`crates/smooth-api-client`
`src`	software	healthy	`crates/smooth-api-client/src`
`smooth-cli`	software	healthy	`crates/smooth-cli`
`tests`	software	healthy	`crates/smooth-cli/tests`
`fixtures`	software	healthy	`crates/smooth-cli/tests/fixtures`
`prompts`	software	healthy	`crates/smooth-cli/prompts`
`src`	software	healthy	`crates/smooth-cli/src`
`config_templates`	software	healthy	`crates/smooth-cli/src/config_templates`
`auth`	software	healthy	`crates/smooth-cli/src/auth`
`smooai`	software	healthy	`crates/smooth-cli/src/smooai`
`admin`	software	healthy	`crates/smooth-cli/src/admin`
`smooth-plugin`	software	healthy	`crates/smooth-plugin`
`src`	software	healthy	`crates/smooth-plugin/src`
`smooth-pearls`	software	healthy	`crates/smooth-pearls`
`examples`	software	healthy	`crates/smooth-pearls/examples`
`src`	software	healthy	`crates/smooth-pearls/src`
`smooth-goalie`	software	healthy	`crates/smooth-goalie`
`src`	software	healthy	`crates/smooth-goalie/src`
`smooth-wonk`	software	healthy	`crates/smooth-wonk`
`tests`	software	healthy	`crates/smooth-wonk/tests`
`src`	software	healthy	`crates/smooth-wonk/src`
`smooth-cast`	software	healthy	`crates/smooth-cast`
`builtin-skills`	software	healthy	`crates/smooth-cast/builtin-skills`
`create-skill`	software	healthy	`crates/smooth-cast/builtin-skills/create-skill`
`src`	software	healthy	`crates/smooth-cast/src`
`smooth-operative`	software	healthy	`crates/smooth-operative`
`tests`	software	healthy	`crates/smooth-operative/tests`
`prompts`	software	healthy	`crates/smooth-operative/prompts`
`providers`	software	healthy	`crates/smooth-operative/prompts/providers`
`src`	software	healthy	`crates/smooth-operative/src`
`tool_hints`	software	healthy	`crates/smooth-operative/src/tool_hints`
`smooth-narc`	software	healthy	`crates/smooth-narc`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`run`	software	healthy	`scripts/ci-publish.mjs:run`
`sparsePath`	software	healthy	`scripts/ci-publish.mjs:sparsePath`
`getSparseIndex`	software	healthy	`scripts/ci-publish.mjs:getSparseIndex`
`isAlreadyPublished`	software	healthy	`scripts/ci-publish.mjs:isAlreadyPublished`
`isCrateNew`	software	healthy	`scripts/ci-publish.mjs:isCrateNew`
`sleep`	software	healthy	`scripts/ci-publish.mjs:sleep`
`run`	software	healthy	`scripts/ci-version.mjs:run`
`api`	software	healthy	`crates/smooth-web/web/src/api.ts:api`
`apiPost`	software	healthy	`crates/smooth-web/web/src/api.ts:apiPost`
`useProject`	software	healthy	`crates/smooth-web/web/src/context.tsx:useProject`
`ProjectProvider`	software	healthy	`crates/smooth-web/web/src/context.tsx:ProjectProvider`
`Header`	software	healthy	`crates/smooth-web/web/src/layout.tsx:Header`
`Layout`	software	healthy	`crates/smooth-web/web/src/layout.tsx:Layout`
`BigSmoothFace`	software	healthy	`crates/smooth-web/web/src/components/BigSmoothFace.tsx:BigS…`
`tick`	software	healthy	`crates/smooth-web/web/src/components/BigSmoothFace.tsx:tick`
`t`	software	healthy	`crates/smooth-web/web/src/components/BigSmoothFace.tsx:t`
`useSidebar`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:useSide…`
`SidebarProvider`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:Sidebar…`
`handler`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:handler`
`Sidebar`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:Sidebar`
`SidebarHeader`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:Sidebar…`
`SidebarContent`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:Sidebar…`
`SidebarTrigger`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:Sidebar…`
`SidebarInset`	software	healthy	`crates/smooth-web/web/src/components/ui/sidebar.tsx:Sidebar…`
`Badge`	software	healthy	`crates/smooth-web/web/src/components/ui/badge.tsx:Badge`
`Card`	software	healthy	`crates/smooth-web/web/src/components/ui/card.tsx:Card`
`CardHeader`	software	healthy	`crates/smooth-web/web/src/components/ui/card.tsx:CardHeader`
`CardTitle`	software	healthy	`crates/smooth-web/web/src/components/ui/card.tsx:CardTitle`
`CardContent`	software	healthy	`crates/smooth-web/web/src/components/ui/card.tsx:CardContent`
`Tabs`	software	healthy	`crates/smooth-web/web/src/components/ui/tabs.tsx:Tabs`
`TabsList`	software	healthy	`crates/smooth-web/web/src/components/ui/tabs.tsx:TabsList`
`TabsTrigger`	software	healthy	`crates/smooth-web/web/src/components/ui/tabs.tsx:TabsTrigger`
`Select`	software	healthy	`crates/smooth-web/web/src/components/ui/select.tsx:Select`
`cn`	software	healthy	`crates/smooth-web/web/src/lib/utils.ts:cn`
`extractJiraKey`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:extractJiraKey`
`prioritySortKey`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:prioritySortKey`
`sortByPriority`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:sortByPriority`
`priorityLabel`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:priorityLabel`
`PriorityBadge`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:PriorityBadge`
`StatusDot`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:StatusDot`
`JiraLink`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:JiraLink`
`PearlCard`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:PearlCard`
`KanbanView`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:KanbanView`
`groupByDate`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:groupByDate`
`TimelineRow`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:TimelineRow`
`TimelineView`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:TimelineView`
`StatCard`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:StatCard`
`BarSegment`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:BarSegment`
`StatsView`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:StatsView`
`ProjectPicker`	software	healthy	`crates/smooth-web/web/src/pages/pearls.tsx:ProjectPicker`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::crates/smooth-cli/src/admin/client.rs`	security	healthy	`crates/smooth-cli/src/admin/client.rs`
`auth::crates/smooth-host-stub/src/backends/gcloud.rs`	security	healthy	`crates/smooth-host-stub/src/backends/gcloud.rs`
`auth::crates/smooth-cli/src/auth/active_org.rs`	security	healthy	`crates/smooth-cli/src/auth/active_org.rs`
`auth::crates/smooth-cli/src/admin/config.rs`	security	healthy	`crates/smooth-cli/src/admin/config.rs`
`auth::README.md`	security	healthy	`README.md`
`auth::crates/smooth-cli/src/auth/refresh.rs`	security	healthy	`crates/smooth-cli/src/auth/refresh.rs`
`auth::crates/smooth-cli/src/auth/login.rs`	security	healthy	`crates/smooth-cli/src/auth/login.rs`
`auth::crates/smooth-pearls/README.md`	security	healthy	`crates/smooth-pearls/README.md`
`auth::crates/smooth-cli/Cargo.toml`	security	healthy	`crates/smooth-cli/Cargo.toml`
`auth::crates/smooth-diver/tests/diver_e2e.rs`	security	healthy	`crates/smooth-diver/tests/diver_e2e.rs`
`auth::.claude/hooks/th-curl-hint.sh`	security	healthy	`.claude/hooks/th-curl-hint.sh`
`auth::crates/smooth-api-client/src/credentials.rs`	security	healthy	`crates/smooth-api-client/src/credentials.rs`
`auth::crates/smooth-cli/src/auth/browser_login.rs`	security	healthy	`crates/smooth-cli/src/auth/browser_login.rs`
`auth::crates/smooth-cli/src/auth/mod.rs`	security	healthy	`crates/smooth-cli/src/auth/mod.rs`
`auth::crates/smooth-bigsmooth/src/creds.rs`	security	healthy	`crates/smooth-bigsmooth/src/creds.rs`
`auth::crates/smooth-cast/src/coding_workflow.rs`	security	healthy	`crates/smooth-cast/src/coding_workflow.rs`
`auth::crates/smooth-cli/src/main.rs`	security	healthy	`crates/smooth-cli/src/main.rs`
`auth::crates/smooth-cli/src/smooai/mod.rs`	security	healthy	`crates/smooth-cli/src/smooai/mod.rs`
`auth::crates/smooth-cli/src/config.rs`	security	healthy	`crates/smooth-cli/src/config.rs`
`auth::go/smooth-dolt/go.mod`	security	healthy	`go/smooth-dolt/go.mod`
`auth::CLAUDE.md`	security	healthy	`CLAUDE.md`
`auth::crates/smooth-api-client/src/auth.rs`	security	healthy	`crates/smooth-api-client/src/auth.rs`
`auth::crates/smooth-cli/src/auth/whoami.rs`	security	healthy	`crates/smooth-cli/src/auth/whoami.rs`
`auth::crates/smooth-api-client/openapi.json`	security	healthy	`crates/smooth-api-client/openapi.json`
`auth::crates/smooth-cli/src/smooai/user_client.rs`	security	healthy	`crates/smooth-cli/src/smooai/user_client.rs`

Label	Layer	Status	Path
`rust`	cicd	healthy	`.github/workflows/pr-checks.yml`
`web`	cicd	healthy	`.github/workflows/pr-checks.yml`
`version`	cicd	healthy	`.github/workflows/release.yml`
`build`	cicd	healthy	`.github/workflows/release.yml`
`release`	cicd	healthy	`.github/workflows/release.yml`
`update-homebrew-tap`	cicd	healthy	`.github/workflows/release.yml`
`the-line`	cicd	healthy	`.github/workflows/the-line.yml`

Label	Layer	Status	Path
`TestHealth`	software	healthy	`crates/smooth-bigsmooth/tests/fixtures/backend_python_spec/…`
`TestCreateTask`	software	healthy	`crates/smooth-bigsmooth/tests/fixtures/backend_python_spec/…`
`TestListTasks`	software	healthy	`crates/smooth-bigsmooth/tests/fixtures/backend_python_spec/…`
`TestGetTask`	software	healthy	`crates/smooth-bigsmooth/tests/fixtures/backend_python_spec/…`
`TestUpdateTask`	software	healthy	`crates/smooth-bigsmooth/tests/fixtures/backend_python_spec/…`
`TestDeleteTask`	software	healthy	`crates/smooth-bigsmooth/tests/fixtures/backend_python_spec/…`

Label	Layer	Status	Path
`/pearls`	frontend	healthy	`crates/smooth-web/web/src/pages/pearls.tsx`
`/system`	frontend	healthy	`crates/smooth-web/web/src/pages/system.tsx`
`/dashboard`	frontend	healthy	`crates/smooth-web/web/src/pages/dashboard.tsx`
`/chat`	frontend	healthy	`crates/smooth-web/web/src/pages/chat.tsx`
`/operators`	frontend	healthy	`crates/smooth-web/web/src/pages/operators.tsx`
`/`	frontend	healthy	`crates/smooth-web/web/src/main.tsx`

Label	Layer	Status	Path
`GH_PAT`	cicd	healthy	`—`
`SMOOAI_GATEWAY_API_KEY`	cicd	healthy	`—`
`HOMEBREW_TAP_DEPLOY_KEY`	cicd	healthy	`—`
`TAG`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`SMOOAI_CARGO_REGISTRY_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`grpc::HostStub`	api	healthy	`proto/host_stub.proto`
`grpc::Scribe`	api	healthy	`proto/scribe.proto`
`grpc::Narc`	api	healthy	`proto/narc.proto`
`grpc::BigSmooth`	api	healthy	`proto/bigsmooth.proto`
`grpc::Wonk`	api	healthy	`proto/wonk.proto`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`README.md`
`192.168.1.50`	network	healthy	`crates/smooth-bigsmooth/tests/safehouse_e2e.rs`
`8.8.8.8`	network	healthy	`crates/smooth-bigsmooth/tests/safehouse_e2e.rs`
`1.1.1.1`	network	healthy	`crates/smooth-bigsmooth/src/server.rs`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`Cargo.lock`
`vps::azure`	hardware	healthy	`go/smooth-dolt/go.mod`
`vps::gcp`	hardware	healthy	`go/smooth-dolt/go.mod`
`vps::ec2`	hardware	healthy	`go/smooth-dolt/go.mod`

Label	Layer	Status	Path
`postgres`	data	healthy	`Cargo.toml`
`sqlite`	data	healthy	`README.md`
`mysql`	data	healthy	`Cargo.lock`

Label	Layer	Status	Path
`github_token::crates/smooth-narc/src/detectors.rs`	security	healthy	`crates/smooth-narc/src/detectors.rs`
`generic_api_key::crates/smooth-narc/src/detectors.rs`	security	healthy	`crates/smooth-narc/src/detectors.rs`
`github_token::crates/smooth-bigsmooth/tests/cast_integratio…`	security	healthy	`crates/smooth-bigsmooth/tests/cast_integration.rs`

Label	Layer	Status	Path
`gha::pr-checks`	cicd	healthy	`.github/workflows/pr-checks.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::the-line`	cicd	healthy	`.github/workflows/the-line.yml`

Label	Layer	Status	Path
`nginx`	network	healthy	`crates/smooth-code/src/session.rs`
`envoy`	network	healthy	`go/smooth-dolt/go.mod`

Label	Layer	Status	Path
`repobility-clone-y8e834r7`	software	healthy	`/tmp/repobility-clone-y8e834r7`

Label	Layer	Status	Path
`port:3100`	network	healthy	`crates/smooth-web/web/vite.config.ts`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/8049d193-d4ff-4d83-934e-cc034cab2196/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/8049d193-d4ff-4d83-934e-cc034cab2196/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

SmooAI/smooth

Complete repo analysis

file 50+

directory 50+

function 50+

auth 25

job 7

class 6

route 6

env_var 6

grpc 5

service 4

vps 4

database 3

secret 3

pipeline 3

load_balancer 2

repo 1

port 1