hexo-ai/sia

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

70 of your 94 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 2.53s · analysis 2.14s · 12.2 MB · GitHub API rate-limit (preflight)

https://github.com/hexo-ai/sia · scanned 2026-06-05 22:20 UTC (1 week ago) · 10 languages

177 raw signals (87 security + 90 graph) 91st percentile · Python · small (2-20K LoC) System graph score 73 (higher by 12)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 week ago · v2 · 70 actionable findings from 2 signal sources. 62 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 27 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	75.0	0.15	11.25
`security_score`	83.1	0.25	20.77
`testing_score`	100.0	0.20	20.00
`documentation_score`	100.0	0.15	15.00
`practices_score`	75.0	0.15	11.25
`code_quality`	68.4	0.10	6.84
Overall		1.00	85.1

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 5 Medium 12 Low 25 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 43 System graph 27 Crowd 0 Layer: Quality 35 Security 12 Software 11 Cicd 3 Frontend 1 Api 8

Exclude dismissed / FP Exclude test files

All 416 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_looks_like_path`	software	healthy	`sia/config_files.py:17`
`user_dir`	software	healthy	`sia/config_files.py:22`
`read_config_text`	software	healthy	`sia/config_files.py:27`
`available_names`	software	healthy	`sia/config_files.py:52`
`build_meta_prompt`	software	healthy	`sia/prompts.py:18`
`build_target_client_setup`	software	healthy	`sia/prompts.py:102`
`build_feedback_prompt`	software	healthy	`sia/prompts.py:132`
`__init__`	software	healthy	`sia/context_manager.py:26`
`initialize`	software	healthy	`sia/context_manager.py:48`
`_generate_llm_summary`	software	healthy	`sia/context_manager.py:66`
`get_summary`	software	healthy	`sia/context_manager.py:148`
`_format_metrics_comparison`	software	healthy	`sia/context_manager.py:183`
`add_generation`	software	healthy	`sia/context_manager.py:210`
`finalize`	software	healthy	`sia/context_manager.py:267`
`_get_agent_stats`	software	healthy	`sia/context_manager.py:327`
`_extract_metrics`	software	healthy	`sia/context_manager.py:338`
`_parse_stdout_metrics`	software	healthy	`sia/context_manager.py:379`
`_extract_insights`	software	healthy	`sia/context_manager.py:419`
`_format_generation_entry`	software	healthy	`sia/context_manager.py:448`
`resolve_api_key`	software	healthy	`sia/api_keys.py:8`
`from_env`	software	healthy	`sia/config.py:68`
`_resolve_level`	software	healthy	`sia/logging_setup.py:19`
`configure_logging`	software	healthy	`sia/logging_setup.py:37`
`get_logger`	software	healthy	`sia/logging_setup.py:55`
`load_task_files`	software	healthy	`sia/run_setup.py:46`
`_create_venv`	software	healthy	`sia/run_setup.py:72`
`setup_run_directory`	software	healthy	`sia/run_setup.py:85`
`as_tuple`	software	healthy	`sia/results.py:33`
`load_agent_execution`	software	healthy	`sia/orchestrator.py:89`
`run_evaluation`	software	healthy	`sia/orchestrator.py:183`
`_print_welcome`	software	healthy	`sia/orchestrator.py:271`
`_stream_to_log`	software	healthy	`sia/orchestrator.py:289`
`_run_target_agent_sandboxed`	software	healthy	`sia/orchestrator.py:309`
`_run_target_agent`	software	healthy	`sia/orchestrator.py:348`
`_build_feedback_context`	software	healthy	`sia/orchestrator.py:408`
`_run_feedback_agent`	software	healthy	`sia/orchestrator.py:537`
`run_generation`	software	healthy	`sia/orchestrator.py:592`
`_run_web`	software	healthy	`sia/orchestrator.py:690`
`main`	software	healthy	`sia/orchestrator.py:698`
`file_size_ok`	software	healthy	`sia/io_utils.py:24`
`safe_read_file`	software	dead	`sia/io_utils.py:34`
`safe_load_json`	software	dead	`sia/io_utils.py:47`
`write_text`	software	healthy	`sia/io_utils.py:61`
`_add_run_args`	software	healthy	`sia/cli.py:32`
`_add_web_args`	software	healthy	`sia/cli.py:113`
`build_parser`	software	healthy	`sia/cli.py:140`
`parse_args`	software	healthy	`sia/cli.py:154`
`venv_python_path`	software	healthy	`sia/layout.py:48`
`venv_pip_path`	software	healthy	`sia/layout.py:53`
`find_evaluate_script`	software	healthy	`sia/layout.py:58`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`EVALUATION_GUIDE.md`	software	healthy	`EVALUATION_GUIDE.md`
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`environment.yml`	software	healthy	`environment.yml`
`pyproject.toml`	software	healthy	`pyproject.toml`
`SECURITY.md`	software	healthy	`SECURITY.md`
`util.py`	software	warning	`sia/util.py`
`config_files.py`	software	healthy	`sia/config_files.py`
`__init__.py`	software	healthy	`sia/__init__.py`
`prompts.py`	software	healthy	`sia/prompts.py`
`context_manager.py`	software	healthy	`sia/context_manager.py`
`api_keys.py`	software	healthy	`sia/api_keys.py`
`config.py`	software	healthy	`sia/config.py`
`logging_setup.py`	software	healthy	`sia/logging_setup.py`
`run_setup.py`	software	healthy	`sia/run_setup.py`
`results.py`	software	healthy	`sia/results.py`
`orchestrator.py`	software	healthy	`sia/orchestrator.py`
`io_utils.py`	software	healthy	`sia/io_utils.py`
`cli.py`	software	healthy	`sia/cli.py`
`layout.py`	software	healthy	`sia/layout.py`
`prepare_mlebench_dataset.py`	software	healthy	`sia/prepare_mlebench_dataset.py`
`__main__.py`	software	warning	`sia/__main__.py`
`profiles.py`	software	healthy	`sia/profiles.py`
`providers.py`	software	healthy	`sia/providers.py`
`openai.json`	software	healthy	`sia/defaults/providers/openai.json`
`nebius.json`	software	healthy	`sia/defaults/providers/nebius.json`
`gemini.json`	software	healthy	`sia/defaults/providers/gemini.json`
`anthropic.json`	software	healthy	`sia/defaults/providers/anthropic.json`
`together.json`	software	healthy	`sia/defaults/providers/together.json`
`kimi-nebius-meta.json`	software	healthy	`sia/defaults/profiles/kimi-nebius-meta.json`
`kimi-nebius.json`	software	healthy	`sia/defaults/profiles/kimi-nebius.json`
`default-meta.json`	software	healthy	`sia/defaults/profiles/default-meta.json`
`default-target.json`	software	healthy	`sia/defaults/profiles/default-target.json`
`__init__.py`	software	healthy	`sia/tasks/__init__.py`
`SAMPLE_TASK_DESCRIPTIONS.md`	software	healthy	`sia/tasks/gpqa/reference/SAMPLE_TASK_DESCRIPTIONS.md`
`reference_target_agent.py`	software	healthy	`sia/tasks/gpqa/reference/reference_target_agent.py`
`SAMPLE_TASK_DESCRIPTIONS.md`	software	healthy	`sia/tasks/longcot-chess/reference/SAMPLE_TASK_DESCRIPTIONS.…`
`reference_target_agent.py`	software	healthy	`sia/tasks/longcot-chess/reference/reference_target_agent.py`
`SAMPLE_TASK_DESCRIPTIONS.md`	software	healthy	`sia/tasks/lawbench/reference/SAMPLE_TASK_DESCRIPTIONS.md`
`reference_target_agent.py`	software	healthy	`sia/tasks/lawbench/reference/reference_target_agent.py`
`SAMPLE_TASK_DESCRIPTIONS.md`	software	healthy	`sia/tasks/spaceship-titanic/reference/SAMPLE_TASK_DESCRIPTI…`
`reference_target_agent.py`	software	healthy	`sia/tasks/spaceship-titanic/reference/reference_target_agen…`
`sample_agent_execution.json`	software	healthy	`sia/tasks/_shared/sample_agent_execution.json`
`reference_target_agent.py`	software	healthy	`sia/tasks/_shared/reference_target_agent.py`
`runs.py`	software	healthy	`sia/web/runs.py`
`__init__.py`	software	healthy	`sia/web/__init__.py`
`server.py`	software	healthy	`sia/web/server.py`
`index.html`	software	healthy	`sia/web/static/index.html`
`__init__.py`	software	healthy	`sia/backends/__init__.py`
`openhands.py`	software	healthy	`sia/backends/openhands.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`sia`	software	healthy	`sia`
`defaults`	software	healthy	`sia/defaults`
`providers`	software	healthy	`sia/defaults/providers`
`profiles`	software	healthy	`sia/defaults/profiles`
`tasks`	software	healthy	`sia/tasks`
`gpqa`	software	healthy	`sia/tasks/gpqa`
`reference`	software	healthy	`sia/tasks/gpqa/reference`
`longcot-chess`	software	healthy	`sia/tasks/longcot-chess`
`reference`	software	healthy	`sia/tasks/longcot-chess/reference`
`lawbench`	software	healthy	`sia/tasks/lawbench`
`reference`	software	healthy	`sia/tasks/lawbench/reference`
`spaceship-titanic`	software	healthy	`sia/tasks/spaceship-titanic`
`reference`	software	healthy	`sia/tasks/spaceship-titanic/reference`
`_shared`	software	healthy	`sia/tasks/_shared`
`web`	software	healthy	`sia/web`
`static`	software	healthy	`sia/web/static`
`backends`	software	healthy	`sia/backends`
`tests`	software	healthy	`tests`
`golden`	software	healthy	`tests/golden`
`docs`	software	healthy	`docs`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`ContextManager`	software	healthy	`sia/context_manager.py:23`
`Config`	software	healthy	`sia/config.py:12`
`TaskFiles`	software	healthy	`sia/run_setup.py:27`
`RunSetup`	software	healthy	`sia/run_setup.py:37`
`TargetAgentResult`	software	healthy	`sia/results.py:14`
`FeedbackContext`	software	healthy	`sia/results.py:27`
`Names`	software	healthy	`sia/layout.py:20`
`RunLayout`	software	healthy	`sia/layout.py:97`
`TaskLayout`	software	healthy	`sia/layout.py:142`
`AgentProfile`	software	healthy	`sia/profiles.py:33`
`Provider`	software	healthy	`sia/providers.py:27`
`Answer`	software	healthy	`sia/tasks/gpqa/reference/reference_target_agent.py:53`
`MultiTrajectoryLogger`	software	healthy	`sia/tasks/_shared/reference_target_agent.py:103`
`EvalSummary`	software	healthy	`sia/web/runs.py:55`
`GenerationSummary`	software	healthy	`sia/web/runs.py:66`
`RunSummary`	software	healthy	`sia/web/runs.py:75`
`DomainStat`	software	healthy	`sia/web/runs.py:89`
`GenerationDetail`	software	healthy	`sia/web/runs.py:96`
`RunDetail`	software	healthy	`sia/web/runs.py:106`

Label	Layer	Status	Path
`GET /api/runs`	api	healthy	`sia/web/server.py`
`GET /api/runs/{run_name}`	api	healthy	`sia/web/server.py`
`GET /api/runs/{run_name}/gens/{gen_name}/eval`	api	healthy	`sia/web/server.py`
`GET /api/runs/{run_name}/gens/{gen_name}/artifact/{label}`	api	healthy	`sia/web/server.py`
`GET /api/runs/{run_name}/gens/{gen_name}/trajectory/{qid}`	api	healthy	`sia/web/server.py`
`GET /api/runs/{run_name}/gens/{gen_name}/openhands`	api	healthy	`sia/web/server.py`
`GET /api/runs/{run_name}/gens/{gen_name}/openhands/{session}`	api	healthy	`sia/web/server.py`
`GET /`	api	healthy	`sia/web/server.py`

Label	Layer	Status	Path
`build`	cicd	healthy	`.github/workflows/ci.yml`
`test`	cicd	healthy	`.github/workflows/ci.yml`
`lint`	cicd	healthy	`.github/workflows/ci.yml`
`test`	cicd	healthy	`.github/workflows/publish.yml`
`publish`	cicd	healthy	`.github/workflows/publish.yml`

Label	Layer	Status	Path
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::publish`	cicd	healthy	`.github/workflows/publish.yml`

Label	Layer	Status	Path
`repobility-clone-hu2u9i9a`	software	healthy	`/tmp/repobility-clone-hu2u9i9a`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`sia/cli.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/99e8c792-75c5-4581-9d42-d279f50144da/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/99e8c792-75c5-4581-9d42-d279f50144da/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

hexo-ai/sia

Complete repo analysis

function 50+

file 50+

directory 22

class 19

endpoint 8

job 5

pipeline 2

repo 1

service 1