Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

RowitZou/lightclaw

https://github.com/RowitZou/lightclaw · scanned 2026-06-15 23:56 UTC (2 months, 3 weeks ago)

277 raw signals (0 security + 277 graph)

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 277 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all

All 3446 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
main software healthy scripts/copy-skill-assets.ts:main
code software healthy scripts/copy-skill-assets.ts:code
arg software healthy scripts/smoke-feishu-task-card.ts:arg
sampleView software healthy scripts/smoke-feishu-task-card.ts:sampleView
at software healthy scripts/smoke-feishu-task-card.ts:at
nestedProbeCard software healthy scripts/smoke-feishu-task-card.ts:nestedProbeCard
main software healthy scripts/smoke-feishu-task-card.ts:main
main software healthy scripts/build-bundled-skills.ts:main
parseRequiredDriver software healthy scripts/build-bundled-skills.ts:parseRequiredDriver
warnLegacyConfigField software healthy src/config.ts:warnLegacyConfigField
warnLegacyConfigBoth software healthy src/config.ts:warnLegacyConfigBoth
warnDeadConfigField software healthy src/config.ts:warnDeadConfigField
pickWithLegacy software healthy src/config.ts:pickWithLegacy
parseBoolean software healthy src/config.ts:parseBoolean
parseNumber software healthy src/config.ts:parseNumber
parsePositiveNumber software healthy src/config.ts:parsePositiveNumber
clampNumber software healthy src/config.ts:clampNumber
resolveOptionalTurnCap software healthy src/config.ts:resolveOptionalTurnCap
parseSchema software healthy src/config.ts:parseSchema
parseReasoningEffort software healthy src/config.ts:parseReasoningEffort
parseMaxOutputTokens software healthy src/config.ts:parseMaxOutputTokens
parseDeferredLoadingMode software healthy src/config.ts:parseDeferredLoadingMode
resolveEndpoints software healthy src/config.ts:resolveEndpoints
resolveModels software healthy src/config.ts:resolveModels
parseRuntimeBackend software healthy src/config.ts:parseRuntimeBackend
parseRuntimeDriver software healthy src/config.ts:parseRuntimeDriver
parsePrivateMachine software healthy src/config.ts:parsePrivateMachine
parseImagePullPolicy software healthy src/config.ts:parseImagePullPolicy
validateRlaunchGpfsMounts software healthy src/config.ts:validateRlaunchGpfsMounts
validateDistributedRdmaResources software healthy src/config.ts:validateDistributedRdmaResources
validateDockerMounts software healthy src/config.ts:validateDockerMounts
resolveDockerSecurity software healthy src/config.ts:resolveDockerSecurity
validateStringArray software healthy src/config.ts:validateStringArray
validateUlimits software healthy src/config.ts:validateUlimits
pidsLimit software healthy src/config.ts:pidsLimit
tmpfsOptions software healthy src/config.ts:tmpfsOptions
storageOptSize software healthy src/config.ts:storageOptSize
workspaceQuotaMb software healthy src/config.ts:workspaceQuotaMb
warnDeprecatedDiscoveryConfig software healthy src/config.ts:warnDeprecatedDiscoveryConfig
warnDeadRoutingConfig software healthy src/config.ts:warnDeadRoutingConfig
routing software healthy src/config.ts:routing
expandOptionalPath software healthy src/config.ts:expandOptionalPath
parsePermissionMode software healthy src/config.ts:parsePermissionMode
resolveSessionsDir software healthy src/config.ts:resolveSessionsDir
resolveAuditDir software healthy src/config.ts:resolveAuditDir
resolveLogsDir software healthy src/config.ts:resolveLogsDir
assertModelName software healthy src/config.ts:assertModelName
assertPositiveInteger software healthy src/config.ts:assertPositiveInteger
getValidRoleConfigKeys software healthy src/config.ts:getValidRoleConfigKeys
resolveRoleConfigs software healthy src/config.ts:resolveRoleConfigs

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
README.zh-CN.md software healthy README.zh-CN.md
README.md software healthy README.md
pnpm-lock.yaml software healthy pnpm-lock.yaml
CLAUDE.md software healthy CLAUDE.md
package.json software healthy package.json
Dockerfile software healthy Dockerfile
tsconfig.json software healthy tsconfig.json
copy-skill-assets.ts software healthy scripts/copy-skill-assets.ts
smoke-feishu-task-card.ts software healthy scripts/smoke-feishu-task-card.ts
build-bundled-skills.ts software healthy scripts/build-bundled-skills.ts
sandbox-image.yml software healthy .github/workflows/sandbox-image.yml
config.ts software healthy src/config.ts
api.ts software healthy src/api.ts
init-wizard.ts software healthy src/init-wizard.ts
token-estimate.ts software healthy src/token-estimate.ts
transient-error.ts software healthy src/transient-error.ts
process-lock.ts software healthy src/process-lock.ts
query-session-memory.test.ts software healthy src/query-session-memory.test.ts
config-wizard.ts software healthy src/config-wizard.ts
init.ts software healthy src/init.ts
channel-types.ts software healthy src/channel-types.ts
paths.test.ts software healthy src/paths.test.ts
max-output-tokens.test.ts software healthy src/max-output-tokens.test.ts
messages.ts software healthy src/messages.ts
query-onassistantturn-meta.test.ts software healthy src/query-onassistantturn-meta.test.ts
query-empty-stop-backstop.test.ts software healthy src/query-empty-stop-backstop.test.ts
paths.ts software healthy src/paths.ts
atomic-write.ts software healthy src/atomic-write.ts
token-estimate.test.ts software healthy src/token-estimate.test.ts
config-file.ts software healthy src/config-file.ts
query.ts software healthy src/query.ts
tools.test.ts software healthy src/tools.test.ts
version.ts software healthy src/version.ts
messages.test.ts software healthy src/messages.test.ts
query-tool-dispatch.ts software healthy src/query-tool-dispatch.ts
query-idle-abort.test.ts software healthy src/query-idle-abort.test.ts
prompt.ts software healthy src/prompt.ts
config-bootstrap.ts software healthy src/config-bootstrap.ts
model-resolution.test.ts software healthy src/model-resolution.test.ts
config-io.ts software healthy src/config-io.ts
cli.ts software healthy src/cli.ts
state.ts software healthy src/state.ts
query-transcript-persist.test.ts software healthy src/query-transcript-persist.test.ts
tools.ts software healthy src/tools.ts
config-wizard.test.ts software healthy src/config-wizard.test.ts
logger.test.ts software healthy src/logger.test.ts
config.test.ts software healthy src/config.test.ts
turn-internal-compaction.test.ts software healthy src/turn-internal-compaction.test.ts
model-resolution.ts software healthy src/model-resolution.ts
transient-error.test.ts software healthy src/transient-error.test.ts

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
IdleStreamError software healthy src/transient-error.ts:IdleStreamError
LightClawAlreadyRunningError software healthy src/process-lock.ts:LightClawAlreadyRunningError
LocalRuntimeAdminOnlyError software healthy src/init.ts:LocalRuntimeAdminOnlyError
includes software healthy src/query.ts:includes
SessionContextNotInitializedError software healthy src/session-context.ts:SessionContextNotInitializedError
BatchTooBigError software healthy src/provider/describe-adaptive.test.ts:BatchTooBigError
FakeStderr software healthy src/auth/codex-startup.test.ts:FakeStderr
AuthError software healthy src/auth/types.ts:AuthError
ReplCommandRegistry software healthy src/commands/registry.ts:ReplCommandRegistry
BackgroundExecWatcher software healthy src/background-exec/watcher.ts:BackgroundExecWatcher
BackgroundJobRegistry software healthy src/background-exec/registry.ts:BackgroundJobRegistry
FakeRuntime software healthy src/background-exec/test-helpers.ts:FakeRuntime
ChainGuardError software healthy src/signal-bus/chain-guard.ts:ChainGuardError
SignalRouter software healthy src/signal-bus/router.ts:SignalRouter
TaskRunWatchdog software healthy src/taskrun/watchdog.ts:TaskRunWatchdog
UserDefinedRoleError software healthy src/agents/user-defined.ts:UserDefinedRoleError
as software healthy src/memory/destructive-guard.ts:as
MemoryToolPathError software healthy src/memory/tool-path.ts:MemoryToolPathError
MemoryToolNotFoundError software healthy src/memory/tool-path.ts:MemoryToolNotFoundError
MemoryToolConflictError software healthy src/memory/tool-path.ts:MemoryToolConflictError
RlaunchRuntime software healthy src/runtime/rlaunch.ts:RlaunchRuntime
state software healthy src/runtime/rlaunch.ts:state
LocalRuntime software healthy src/runtime/local.ts:LocalRuntime
RuntimePool software healthy src/runtime/pool.ts:RuntimePool
ImageReadinessTracker software healthy src/runtime/image-readiness.ts:ImageReadinessTracker
WorkerHealthChecker software healthy src/runtime/worker-health-checker.ts:WorkerHealthChecker
NetworkBridge software healthy src/runtime/network-bridge.ts:NetworkBridge
of software healthy src/runtime/network-bridge.ts:of
DockerRuntime software healthy src/runtime/docker.ts:DockerRuntime
WorkerReadinessTracker software healthy src/runtime/worker-readiness.ts:WorkerReadinessTracker
BindMountData software healthy src/runtime/data-plane/bind-mount.ts:BindMountData
DataPlaneNotApplicableError software healthy src/runtime/data-plane/layered.ts:DataPlaneNotApplicableErr…
LayeredDataPlane software healthy src/runtime/data-plane/layered.ts:LayeredDataPlane
SharedClusterFsData software healthy src/runtime/data-plane/shared-cluster-fs.ts:SharedClusterFs…
MountTablePathPolicy software healthy src/runtime/path-policy/mount-table.ts:MountTablePathPolicy
HookManager software healthy src/hooks/manager.ts:HookManager
that software healthy src/tools/web-search-ddg.test.ts:that
with software healthy src/tools/web-retry.ts:with
WebRetryableHttpError software healthy src/tools/web-retry.ts:WebRetryableHttpError
DispatchAttachmentError software healthy src/tools/dispatch-attachments.ts:DispatchAttachmentError
SsrfRedirectError software healthy src/tools/web-fetch-http.ts:SsrfRedirectError
CrossHostRedirectError software healthy src/tools/web-fetch-http.ts:CrossHostRedirectError
RedirectLimitError software healthy src/tools/web-fetch-http.ts:RedirectLimitError
above software healthy src/tools/web-fetch-http.ts:above
of software healthy src/tools/cluster-job.ts:of
EnvCapturingRuntime software healthy src/tools/bash.test.ts:EnvCapturingRuntime
becomes software healthy src/tools/web-fetch-filename.ts:becomes
stays software healthy src/tools/skill-delete.test.ts:stays
of software healthy src/tools/cluster-job.test.ts:of
BackgroundTaskScheduler software healthy src/background-task/scheduler.ts:BackgroundTaskScheduler

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
scripts software healthy scripts
.github software healthy .github
workflows software healthy .github/workflows
src software healthy src
__tests__ software healthy src/__tests__
prompt software healthy src/prompt
provider software healthy src/provider
usage software healthy src/usage
i18n software healthy src/i18n
auth software healthy src/auth
codex software healthy src/auth/codex
api-logs software healthy src/api-logs
mcp software healthy src/mcp
commands software healthy src/commands
background-exec software healthy src/background-exec
signal-bus software healthy src/signal-bus
utils software healthy src/utils
audit software healthy src/audit
taskrun software healthy src/taskrun
identity software healthy src/identity
todos software healthy src/todos
agents software healthy src/agents
bundled software healthy src/agents/bundled
hooks software healthy src/agents/hooks
memory software healthy src/memory
dream software healthy src/memory/dream
runtime software healthy src/runtime
data-plane software healthy src/runtime/data-plane
path-policy software healthy src/runtime/path-policy
hooks software healthy src/hooks
secrets software healthy src/secrets
tools software healthy src/tools
background-task software healthy src/background-task
channels software healthy src/channels
feishu software healthy src/channels/feishu
resources software healthy src/channels/feishu/resources
workspace software healthy src/channels/feishu/workspace
skill software healthy src/skill
bundled software healthy src/skill/bundled
skillify software healthy src/skill/bundled/skillify
remember software healthy src/skill/bundled/remember
brainpp-batch-job software healthy src/skill/bundled/brainpp-batch-job
coding-workflow software healthy src/skill/bundled/coding-workflow
archive-workflow software healthy src/skill/bundled/archive-workflow
pre-delivery-review-workflow software healthy src/skill/bundled/pre-delivery-review-workflow
feishu-doc-workflow software healthy src/skill/bundled/feishu-doc-workflow
delivery-orchestration software healthy src/skill/bundled/delivery-orchestration
build-environment software healthy src/skill/bundled/build-environment
references software healthy src/skill/bundled/build-environment/references
web-research-workflow software healthy src/skill/bundled/web-research-workflow

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
10.0.0.0 network healthy src/config.ts
100.96.0.0 network healthy src/config.ts
127.0.0.0 network healthy src/config.ts
100.100.0.0 network healthy src/config.ts
172.17.0.0 network healthy src/config.ts
127.0.0.1 network healthy src/provider/openai-auth.test.ts
10.5.6.7 network healthy src/runtime/network-bridge.test.ts
100.100.245.246 network healthy src/runtime/network-bridge.test.ts
8.8.8.8 network healthy src/runtime/network-bridge.test.ts
10.1.2.3 network healthy src/runtime/network-bridge.test.ts
10.0.0.1 network healthy src/runtime/network-bridge.test.ts
172.17.0.5 network healthy src/runtime/network-bridge.test.ts
192.168.1.1 network healthy src/runtime/network-bridge.test.ts
100.96.225.185 network healthy src/runtime/rlaunch.test.ts
1.2.3.4 network healthy src/runtime/image-readiness.test.ts
5.6.7.8 network healthy src/runtime/image-readiness.test.ts
169.254.169.254 network healthy src/tools/web-fetch-http.ts
100.100.100.200 network healthy src/tools/web-fetch-http.ts
131.0.0.0 network healthy src/tools/web-fetch-http.ts
100.64.0.0 network healthy src/tools/web-fetch-http.ts
169.254.0.0 network healthy src/tools/web-fetch-http.ts
172.16.0.0 network healthy src/tools/web-fetch-http.ts
172.31.255.255 network healthy src/tools/web-fetch-http.ts
192.168.0.0 network healthy src/tools/web-fetch-http.ts
192.0.0.0 network healthy src/tools/web-fetch-http.ts
192.0.0.8 network healthy src/tools/web-fetch-http.ts
198.18.0.0 network healthy src/tools/web-fetch-http.ts
93.184.216.34 network healthy src/tools/web-fetch-http.test.ts
1.1.1.1 network healthy src/tools/web-fetch-http.test.ts
10.255.255.255 network healthy src/tools/web-fetch-http.test.ts
172.16.0.1 network healthy src/tools/web-fetch-http.test.ts
172.15.0.1 network healthy src/tools/web-fetch-http.test.ts
172.32.0.1 network healthy src/tools/web-fetch-http.test.ts
127.255.255.255 network healthy src/tools/web-fetch-http.test.ts
100.64.0.1 network healthy src/tools/web-fetch-http.test.ts
100.127.255.255 network healthy src/tools/web-fetch-http.test.ts
198.18.0.1 network healthy src/tools/web-fetch-http.test.ts

LabelLayerStatusPath
auth::src/init.ts security healthy src/init.ts
auth::README.md security healthy README.md
auth::src/auth/codex/constants.ts security healthy src/auth/codex/constants.ts
auth::src/auth/codex/provider.ts security healthy src/auth/codex/provider.ts
auth::src/commands/builtin.ts security healthy src/commands/builtin.ts
auth::src/provider/index.ts security healthy src/provider/index.ts
auth::src/tools/web-fetch-http.test.ts security healthy src/tools/web-fetch-http.test.ts
auth::src/auth/codex.test.ts security healthy src/auth/codex.test.ts
auth::src/provider/openai-auth.test.ts security healthy src/provider/openai-auth.test.ts
auth::src/auth/codex/index.ts security healthy src/auth/codex/index.ts
auth::src/auth/codex-startup.test.ts security healthy src/auth/codex-startup.test.ts
auth::src/auth/auto-register.test.ts security healthy src/auth/auto-register.test.ts
auth::src/auth/codex/degrade-state.ts security healthy src/auth/codex/degrade-state.ts
auth::src/config-bootstrap.test.ts security healthy src/config-bootstrap.test.ts
auth::src/auth/codex/startup.ts security healthy src/auth/codex/startup.ts
auth::src/auth/codex/auto-register.ts security healthy src/auth/codex/auto-register.ts
auth::src/transient-error.ts security healthy src/transient-error.ts
auth::src/config.ts security healthy src/config.ts
auth::src/config-wizard.ts security healthy src/config-wizard.ts
auth::src/provider/types.ts security healthy src/provider/types.ts
auth::src/config.test.ts security healthy src/config.test.ts
auth::src/config-io.test.ts security healthy src/config-io.test.ts
auth::src/provider/registry.test.ts security healthy src/provider/registry.test.ts
auth::src/auth/types.ts security healthy src/auth/types.ts
auth::src/i18n/locales.ts security healthy src/i18n/locales.ts
auth::src/config-file.ts security healthy src/config-file.ts
auth::src/provider/openai-auth.ts security healthy src/provider/openai-auth.ts
auth::src/auth/storage.ts security healthy src/auth/storage.ts
auth::src/auth/codex/jwt.ts security healthy src/auth/codex/jwt.ts

LabelLayerStatusPath
/etc/hosts frontend healthy src/provider/openai-auth.test.ts
/workspace/reports/demo.md frontend healthy src/taskrun/store.test.ts
/etc/passwd frontend healthy src/memory/dream/dream.test.ts
/workspace/bin/run.sh frontend healthy src/runtime/data-plane/layered.test.ts
/other/abs frontend healthy src/tools/glob.test.ts
/workspace/.lightclaw/skill-run/asset-skill/scripts/hello.sh frontend healthy src/tools/use-skill.test.ts
/workspace/report.pdf frontend healthy src/tools/feishu-create-file.test.ts
/foo frontend healthy src/channels/attachment-encoding.test.ts
/foo.pdf frontend healthy src/channels/attachment-encoding.test.ts
/foo.png frontend healthy src/channels/attachment-encoding.test.ts
/foo.xyz frontend healthy src/channels/attachment-encoding.test.ts
/workspace/.lightclaw/inbox/oc_chat/test.jpg frontend healthy src/channels/runner.test.ts
/workspace/.lightclaw/inbox/oc_dm/om_parent-image-aa.jpg frontend healthy src/channels/runner.test.ts
/workspace/.lightclaw/inbox/oc_dm/om-image-aa.jpg frontend healthy src/channels/runner.test.ts
/workspace/.lightclaw/inbox/oc_dm/om-image-bb.pdf frontend healthy src/channels/runner.test.ts
/feishu/events frontend healthy src/channels/feishu/routing.test.ts
/workspace/.lightclaw/inbox/oc___chat/foo.jpg frontend healthy src/channels/feishu/media.test.ts
/ frontend healthy src/channels/feishu/workspace/ops.ts

LabelLayerStatusPath
vps::aws hardware healthy CLAUDE.md
vps::gcp hardware healthy src/tools/web-fetch-http.ts
vps::azure hardware healthy src/tools/web-fetch-http.ts

LabelLayerStatusPath
port:18080 network healthy src/runtime/network-bridge.test.ts
port:18 network healthy src/channels/feishu/routing.test.ts

LabelLayerStatusPath
BRAINPP_PIP_CONF cicd healthy
GITHUB_TOKEN cicd healthy

LabelLayerStatusPath
repobility-clone-qy2kxp6_ software healthy /tmp/repobility-clone-qy2kxp6_

LabelLayerStatusPath
GET api healthy src/commands/builtin.ts

LabelLayerStatusPath
postgres data healthy src/permission/high-risk.test.ts

LabelLayerStatusPath
nginx network healthy src/permission/high-risk.test.ts

LabelLayerStatusPath
image::Dockerfile hardware healthy Dockerfile

LabelLayerStatusPath
gpu (detected) hardware healthy src/config.ts

LabelLayerStatusPath
gha::sandbox-image cicd healthy .github/workflows/sandbox-image.yml

LabelLayerStatusPath
build cicd healthy .github/workflows/sandbox-image.yml
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/90ebbc3e-58fa-4c9e-9769-0f4b8d99fb0c/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/90ebbc3e-58fa-4c9e-9769-0f4b8d99fb0c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.