Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

gptme/gptme

https://github.com/gptme/gptme.git · scanned 2026-05-16 01:47 UTC (4 weeks ago) · 10 languages

431 raw signals (58 security + 373 graph) 9th percentile · Python · large (100-500K LoC) System graph score 46 (higher by 13)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 weeks ago · v1 · 28 actionable findings from 1 signal source. 19 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
45.1
/100
Security checks
44
28 findings
System graph
46
100.0% cov · 0 findings
Critical
0
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-17-v4 calibration-aware
Component Sub-score Weight Contribution
structure_score 60.0 0.15 9.00
security_score 14.0 0.25 3.50
testing_score 100.0 0.20 20.00
documentation_score 73.0 0.15 10.95
practices_score 65.0 0.15 9.75
code_quality 56.6 0.10 5.66
Overall 1.00 58.9
Calibrated penalty buckets (security_score): web: 1.6 · agent: 1.1 · authz: 2.1 · docker: 15.6 · threat: 46.0 · journey: 19.7
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 11 Medium 8 Low 4 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 28 System graph 0 Crowd 0 Layer: Quality 7 Security 13 Cicd 8
Scan summary Quality grade C (59/100). Dimensions: security 14, maintainability 60. 58 findings. 248,359 lines analyzed.

Showing 23 of 28 actionable findings. 47 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high Security checks security Injection conf 0.85 3 occurrences [SEC004] SQL Injection Risk: String interpolation in SQL execution. Allows SQL injection.
Use parameterized queries: cursor.execute('SELECT * FROM t WHERE id = ?', [id]). For dynamic table or column names, choose identifiers from a hard-coded allowlist and keep values in parameters.
3 files, 3 locations
gptme/eval/dspy/tasks.py:513
gptme/eval/suites/practical15.py:175
gptme/hooks/form_autodetect.py:157
low Security checks security Injection conf 0.80 3 occurrences [SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.
Use subprocess with shell=False and a list of args. Never eval user input.
3 files, 3 locations
gptme/eval/main.py:53
gptme/eval/swe_extra/swe_bench_test_spec.py:137
gptme/prompts/context_cmd.py:54
high Security checks security path traversal conf 0.80 [SEC013] Path Traversal — User Input in File Path: User-controlled input used in file path without sanitization. Allows reading arbitrary files.
Use os.path.realpath() and verify the path starts with your expected base directory. Use secure_filename() for uploads.
webui/src/utils/taskApi.ts:214
high Security checks cicd CI/CD security conf 0.92 Dockerfile pipes a remote script into a shell
Piping downloaded code directly into a shell bypasses checksum verification and makes builds dependent on mutable remote content.
scripts/Dockerfile.eval:13 CI/CD securitycontainers
high Security checks cicd CI/CD security conf 0.92 Dockerfile pipes a remote script into a shell
Piping downloaded code directly into a shell bypasses checksum verification and makes builds dependent on mutable remote content.
scripts/Dockerfile:48 CI/CD securitycontainers
high Security checks security auth conf 0.83 Secret-like setting is echoed into a password input value
Settings screens sometimes render API keys, tokens, or passwords back into HTML/JSX password fields. That still exposes the secret to page source, browser extensions, screenshots, and DOM scraping.
webui/src/components/settings/ServerApiKeySettings.tsx:187
high Security checks security auth conf 0.83 Secret-like setting is echoed into a password input value
Settings screens sometimes render API keys, tokens, or passwords back into HTML/JSX password fields. That still exposes the secret to page source, browser extensions, screenshots, and DOM scraping.
webui/src/components/SetupWizard.tsx:760
medium Security checks security auth conf 0.92 [AUC001] No Repobility access matrix policy found: The repository uses web/API frameworks but does not define .repobility/access.yml or equivalent authorization documentation.
The repository uses web/API frameworks but does not define .repobility/access.yml or equivalent authorization documentation.
high Security checks security auth conf 0.74 [AUC002] Low visible authorization coverage in route inventory: Only 20.0% of discovered routes show nearby authentication, authorization, middleware, or public-route evidence.
Only 20.0% of discovered routes show nearby authentication, authorization, middleware, or public-route evidence.
low Security checks quality Error handling conf 1.00 3 occurrences [ERR001] Silent Exception Swallowing: Silently swallowing all exceptions hides bugs. Even in cleanup code, log at DEBUG level.
Log the error: `except Exception: logger.debug('cleanup failed', exc_info=True)`. Or handle specific exception types.
3 files, 3 locations
gptme/tools/_browser_playwright.py:228
gptme/tools/restart.py:146
scripts/demo_capture.py:380
medium Security checks quality Error handling conf 1.00 [ERR002] Empty Catch Block: Empty catch blocks hide errors.
Log the error or rethrow it. Use console.error() at minimum.
webui/src/components/ConversationContent.tsx:51
high Security checks security auth conf 0.82 Browser storage is used for session token material
localStorage and sessionStorage are readable by injected JavaScript. For sensitive sessions, this turns XSS into account compromise.
webui/src/stores/servers.ts:71
medium Security checks quality Quality conf 0.73 Codex session log reader may expose prompts or tool-call content
Codex session JSONL files can contain prompts, tool events, paths, and operational metadata, not only token counts. Token dashboards and exporters should avoid retaining or sharing raw session text.
gptme/hooks/workspace_agents.py:3
high Security checks cicd CI/CD security conf 0.82 Docker final stage has no non-root USER
Docker images run as root unless the image or Dockerfile switches to a non-root user.
scripts/Dockerfile.dev:1 CI/CD securitycontainers
medium Security checks cicd CI/CD security conf 0.76 Dockerfile copies broad context with incomplete .dockerignore
COPY . or ADD . is safer when .dockerignore excludes secrets, git history, keys, and generated artifacts.
scripts/Dockerfile.dev:24 CI/CD securitycontainers
medium Security checks cicd CI/CD security conf 0.76 Dockerfile copies broad context with incomplete .dockerignore
COPY . or ADD . is safer when .dockerignore excludes secrets, git history, keys, and generated artifacts.
scripts/Dockerfile.computer:80 CI/CD securitycontainers
medium Security checks cicd CI/CD security conf 0.90 Dockerfile installs dependencies after copying the full source tree
When dependency installation comes after COPY ., any source change invalidates the dependency layer and makes Docker rebuild much more slowly.
scripts/Dockerfile.computer:82 CI/CD securitycontainers
medium Security checks cicd CI/CD security conf 0.86 Dockerfile separates apt update from install
Splitting apt update and install across layers can reuse stale package indexes and make builds less reliable.
scripts/Dockerfile.computer:7 CI/CD securitycontainers
low Security checks quality Quality conf 0.60 7 occurrences Duplicated implementation block across source files
Duplicate implementation blocks are maintenance debt. Keep them visible, but they are not a high-severity defect unless the duplicated logic is security-sensitive or drifting.
7 files, 7 locations
gptme/cli/cmd_agents.py:60
gptme/eval/suites/behavioral/rate_limiting.py:56
gptme/server/session_step.py:535
gptme/tools/autocompact/scoring.py:139
gptme/tools/computer_transport.py:137
gptme/util/_telemetry.py:199
gptme/util/install.py:10
duplicationquality
high Security checks quality Quality conf 0.74 4 occurrences Frontend API reference is not matched by discovered backend routes
A frontend string references a same-origin API path that Repobility could not match to backend route inventory. This often causes live 404s in user journeys.
lines 5, 165, 219, 296
gptme/server/static/main.js:5, 165, 219, 296 (4 hits)
medium Security checks quality Quality conf 0.78 Public web service has no security.txt
security.txt gives researchers and customers a safe disclosure channel. Public web apps and APIs should publish it under /.well-known/security.txt.
.well-known/security.txt
low Security checks cicd CI/CD security conf 0.72 .dockerignore misses sensitive defaults
.dockerignore exists but does not cover common secret or VCS patterns.
.dockerignore CI/CD securitycontainers
high Security checks quality Quality conf 0.62 3 occurrences Source file name looks like an AI patch artifact
Files named as final, fixed, copy, new, or backup are often temporary patch artifacts. They may be legitimate, but they deserve review before becoming production surface area.
3 files, 3 locations
gptme/eval/suites/behavioral/extract_function_refactor.py:1
gptme/eval/suites/behavioral/noisy_worktree_fix.py:1
gptme/server/api_v2.py:1
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/852baae1-fabf-447b-9d40-b658b164911d/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/852baae1-fabf-447b-9d40-b658b164911d/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.