Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Alexander-Sorrell-IT/grantscribe

https://github.com/Alexander-Sorrell-IT/grantscribe · scanned 2026-06-17 01:14 UTC (1 month, 2 weeks ago)

41 raw signals (0 security + 41 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ -15.8 (diff) · 41 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
60.9
/100
Security checks
61
0 findings
System graph
61
44.4% cov · 41 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 0 Medium 7 Low 32 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 41 Crowd 0 Layer: Software 29 Security 5 Quality 7
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 60.9/100 with 44.4% coverage. It contains 224 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 41 findings — concentrated in software (29), quality (7), security (5). Risk profile is low: 0 critical, 0 high, 7 medium. Recommended next step: open the software layer findings first — that's where the highest-impact wins live.

Showing 39 of 41 actionable findings. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

medium System graph quality Placeholder conf 1.00 Critical user flow still appears backed by mock or placeholder data
A payment/auth/admin/order/billing-style flow contains mock, fake, TODO, dummy, or placeholder markers in runtime source. In the Fable corpus this is a high-leverage completeness smell: the app can look finished while the money, identity, or tenant flow is still scaffolded.
Mock dataCritical flowGenerated repo pattern
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in demo/build_bookends.py:25
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
demo/build_bookends.py:25 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in demo/build_player.py:116
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
demo/build_player.py:116 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in demo/intro.html:15
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
demo/intro.html:15 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in demo/outro.html:15
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
demo/outro.html:15 Direct innerhtml assignment
medium System graph security security conf 1.00 Insecure pattern 'direct_innerhtml_assignment' in demo/player.html:89
Found a known-risky pattern (direct_innerhtml_assignment). Review and replace if possible.
demo/player.html:89 Direct innerhtml assignment
medium System graph quality Placeholder conf 1.00 Placeholder or mock-heavy implementation detected
Found 13 placeholder/mock markers across 4 source files. This often means the repo looks complete while core flows still use generated scaffolding or fake data.
Mock dataIncompleteGenerated repo pattern
low System graph quality Production readiness conf 1.00 Composite production-readiness gap
Multiple low-cost hardening controls are missing together: license, ci. Opus verification showed these co-occurring gaps are a better readiness signal than reading each flag in isolation.
Repo hardeningGenerated repo pattern
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 103 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph quality License conf 1.00 No license file detected
No LICENSE/COPYING/NOTICE file was found. Generated repositories often omit licensing, which blocks reuse and automated intake.
Repo hardeningGenerated repo pattern
low System graph software Dead code conf 1.00 Possibly dead Python function: check_ask_grounded_or_refuses
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:382
low System graph software Dead code conf 1.00 Possibly dead Python function: check_find_training_rejects_empty_keyword
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:401
low System graph software Dead code conf 1.00 Possibly dead Python function: check_find_training_returns_real_programs
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:411
low System graph software Dead code conf 1.00 Possibly dead Python function: check_loi_passes_when_all_present
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:229
low System graph software Dead code conf 1.00 Possibly dead Python function: check_loi_receipt_verifies_without_close_date
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:565
low System graph software Dead code conf 1.00 Possibly dead Python function: check_loi_refuses_without_close_date
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:206
low System graph software Dead code conf 1.00 Possibly dead Python function: check_loi_refuses_without_opp
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:154
low System graph software Dead code conf 1.00 Possibly dead Python function: check_loi_refuses_without_url
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:186
low System graph software Dead code conf 1.00 Possibly dead Python function: check_mcp_find_grants_verbatim
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:262
low System graph software Dead code conf 1.00 Possibly dead Python function: check_mcp_lists_load_bearing_tools
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:252
low System graph software Dead code conf 1.00 Possibly dead Python function: check_pathway_composes_occupation_and_training
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:443
low System graph software Dead code conf 1.00 Possibly dead Python function: check_pathway_plan_refuses_when_program_unnamed
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:528
low System graph software Dead code conf 1.00 Possibly dead Python function: check_pathway_receipt_anchored_in_live_careeronestop
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:504
low System graph software Dead code conf 1.00 Possibly dead Python function: check_pathway_receipt_detects_tampering
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:481
low System graph software Dead code conf 1.00 Possibly dead Python function: check_pathway_receipt_offline_roundtrip
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:461
low System graph software Dead code conf 1.00 Possibly dead Python function: check_pathway_rejects_empty_goal
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:433
low System graph software Dead code conf 1.00 Possibly dead Python function: check_receipt_anchored_in_live_grants_gov
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:352
low System graph software Dead code conf 1.00 Possibly dead Python function: check_receipt_detects_tampering
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:325
low System graph software Dead code conf 1.00 Possibly dead Python function: check_receipt_structure_and_offline_verify
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:302
low System graph software Dead code conf 1.00 Possibly dead Python function: check_receipt_types_not_confused
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:551
low System graph software Dead code conf 1.00 Possibly dead Python function: check_rerank_reason_present
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:285
low System graph software Dead code conf 1.00 Possibly dead Python function: check_setreport_store
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:130
low System graph software Dead code conf 1.00 Possibly dead Python function: check_verify_pathway_cli_exists_and_runs
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
verify.py:581
low System graph software Dead code conf 1.00 Possibly dead Python function: cmd_ask
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
demo/mcp_client.py:80
low System graph software Dead code conf 1.00 Possibly dead Python function: cmd_find_grants
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
demo/mcp_client.py:70
low System graph software Dead code conf 1.00 Possibly dead Python function: cmd_learn
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
demo/mcp_client.py:89
low System graph software Dead code conf 1.00 Possibly dead Python function: mcp_build_pathway
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
mcp_bridge.py:92
low System graph software Dead code conf 1.00 Possibly dead Python function: mcp_draft_pathway_plan
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
mcp_bridge.py:102
low System graph software Dead code conf 1.00 Possibly dead Python function: mcp_find_training
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
mcp_bridge.py:82
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/8c2c2c3a-6067-4f8c-a37c-e1eefed00b39/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/8c2c2c3a-6067-4f8c-a37c-e1eefed00b39/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.