Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

wejsa/ai-crew-kit

https://github.com/wejsa/ai-crew-kit · scanned 2026-06-16 00:56 UTC (2 months, 1 week ago)

48 raw signals (0 security + 48 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 47 actionable findings from 1 signal source. 1 repeated signal grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 47 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 2 Medium 38 Low 4 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 47 Crowd 0 Layer: Frontend 1 Security 5 Cicd 1 Quality 40

Exclude dismissed / FP Exclude test files

All 682 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`README.ko.md`	software	healthy	`README.ko.md`
`LICENSE`	software	healthy	`LICENSE`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`test_sanitization.py`	software	healthy	`tests/skill_init/test_sanitization.py`
`__init__.py`	software	healthy	`tests/skill_init/__init__.py`
`conftest.py`	software	healthy	`tests/skill_init/conftest.py`
`test_hard_limits.py`	software	healthy	`tests/skill_init/test_hard_limits.py`
`test_schema_compliance.py`	software	healthy	`tests/skill_init/test_schema_compliance.py`
`__init__.py`	software	healthy	`tests/lessons/__init__.py`
`conftest.py`	software	healthy	`tests/lessons/conftest.py`
`test_threshold.py`	software	healthy	`tests/lessons/test_threshold.py`
`test_schema.py`	software	healthy	`tests/lessons/test_schema.py`
`test_secrets_filter.py`	software	healthy	`tests/lessons/test_secrets_filter.py`
`test_skill_retro_spec.py`	software	healthy	`tests/lessons/test_skill_retro_spec.py`
`sample-invalid-id.json`	software	healthy	`tests/lessons/fixtures/sample-invalid-id.json`
`sample-extra-property.json`	software	healthy	`tests/lessons/fixtures/sample-extra-property.json`
`sample-valid.json`	software	healthy	`tests/lessons/fixtures/sample-valid.json`
`__init__.py`	software	healthy	`tests/secrets/__init__.py`
`conftest.py`	software	healthy	`tests/secrets/conftest.py`
`test_common_hardcoded.py`	software	healthy	`tests/secrets/test_common_hardcoded.py`
`test_ssot_alignment.py`	software	healthy	`tests/secrets/test_ssot_alignment.py`
`test_common_runtime.py`	software	healthy	`tests/secrets/test_common_runtime.py`
`__init__.py`	software	healthy	`tests/upgrade/__init__.py`
`conftest.py`	software	healthy	`tests/upgrade/conftest.py`
`test_hooks_propagation.py`	software	healthy	`tests/upgrade/test_hooks_propagation.py`
`test_rollback.py`	software	healthy	`tests/upgrade/test_rollback.py`
`test_gitignore_migration.py`	software	healthy	`tests/upgrade/test_gitignore_migration.py`
`test_backlog_compat.py`	software	healthy	`tests/upgrade/test_backlog_compat.py`
`v1-general-project.json`	software	healthy	`tests/upgrade/fixtures/v1-general-project.json`
`v1-general-backlog.json`	software	healthy	`tests/upgrade/fixtures/v1-general-backlog.json`
`merge-gate-explained.ko.md`	software	healthy	`docs/merge-gate-explained.ko.md`
`eject-guide.md`	software	healthy	`docs/eject-guide.md`
`skill-reference.en.md`	software	healthy	`docs/skill-reference.en.md`
`cowork-plugin.md`	software	healthy	`docs/cowork-plugin.md`
`customization.md`	software	healthy	`docs/customization.md`
`token-optimization.md`	software	healthy	`docs/token-optimization.md`
`workflow-guide.md`	software	healthy	`docs/workflow-guide.md`
`concepts.md`	software	healthy	`docs/concepts.md`
`getting-started.md`	software	healthy	`docs/getting-started.md`
`getting-started.en.md`	software	healthy	`docs/getting-started.en.md`
`merge-gate-explained.md`	software	healthy	`docs/merge-gate-explained.md`
`upgrade-guide.md`	software	healthy	`docs/upgrade-guide.md`
`skill-reference.md`	software	healthy	`docs/skill-reference.md`
`concepts.en.md`	software	healthy	`docs/concepts.en.md`
`phase-4-plan.md`	software	healthy	`docs/v2/phase-4-plan.md`
`phase-1-tft-analysis.md`	software	healthy	`docs/v2/phase-1-tft-analysis.md`
`phase-7-plan.md`	software	healthy	`docs/v2/phase-7-plan.md`
`README.md`	software	healthy	`docs/v2/README.md`
`phase-2-profiles.md`	software	healthy	`docs/v2/phase-2-profiles.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`test_valid_names_pass_through`	software	healthy	`tests/skill_init/test_sanitization.py:30`
`test_shell_meta_rejected`	software	healthy	`tests/skill_init/test_sanitization.py:49`
`test_path_traversal_attempts`	software	healthy	`tests/skill_init/test_sanitization.py:63`
`test_length_exceeds_truncated`	software	healthy	`tests/skill_init/test_sanitization.py:80`
`test_empty_inputs_rejected`	software	healthy	`tests/skill_init/test_sanitization.py:88`
`test_zero_width_chars_stripped`	software	healthy	`tests/skill_init/test_sanitization.py:102`
`test_disallowed_chars_stripped`	software	healthy	`tests/skill_init/test_sanitization.py:117`
`test_prompt_injection_phrases_handled_as_data`	software	healthy	`tests/skill_init/test_sanitization.py:122`
`_load`	software	healthy	`tests/skill_init/conftest.py:23`
`project_schema`	software	healthy	`tests/skill_init/conftest.py:28`
`backlog_schema`	software	healthy	`tests/skill_init/conftest.py:33`
`task_schema`	software	healthy	`tests/skill_init/conftest.py:38`
`phase_schema`	software	healthy	`tests/skill_init/conftest.py:43`
`now`	software	healthy	`tests/skill_init/conftest.py:49`
`base_task`	software	healthy	`tests/skill_init/conftest.py:54`
`schema_errors`	software	healthy	`tests/skill_init/conftest.py:78`
`mutate`	software	healthy	`tests/skill_init/conftest.py:96`
`derive_prefix`	software	healthy	`tests/skill_init/conftest.py:108`
`sanitize_project_name`	software	healthy	`tests/skill_init/conftest.py:143`
`enforce_hard_limits`	software	healthy	`tests/skill_init/conftest.py:186`
`_make_task`	software	healthy	`tests/skill_init/test_hard_limits.py:25`
`test_phase_out_of_range_is_dropped`	software	healthy	`tests/skill_init/test_hard_limits.py:41`
`test_all_allowed_phases_pass`	software	healthy	`tests/skill_init/test_hard_limits.py:49`
`test_phase_cap_truncates_to_ten`	software	healthy	`tests/skill_init/test_hard_limits.py:57`
`test_phase_cap_preserves_critical_first`	software	healthy	`tests/skill_init/test_hard_limits.py:65`
`test_phase_cap_critical_only_still_enforced`	software	healthy	`tests/skill_init/test_hard_limits.py:83`
`test_total_cap_enforced_across_phases`	software	healthy	`tests/skill_init/test_hard_limits.py:99`
`test_description_truncated_at_200_chars`	software	healthy	`tests/skill_init/test_hard_limits.py:112`
`test_description_under_limit_unchanged`	software	healthy	`tests/skill_init/test_hard_limits.py:121`
`test_dropped_report_includes_task_metadata`	software	healthy	`tests/skill_init/test_hard_limits.py:128`
`test_task_template_omits_six_dynamic_fields`	software	healthy	`tests/skill_init/test_schema_compliance.py:26`
`test_empty_backlog_passes_schema`	software	healthy	`tests/skill_init/test_schema_compliance.py:50`
`test_full_backlog_passes_schema`	software	healthy	`tests/skill_init/test_schema_compliance.py:67`
`test_current_step_zero_is_rejected`	software	healthy	`tests/skill_init/test_schema_compliance.py:91`
`test_spec_file_null_is_rejected`	software	healthy	`tests/skill_init/test_schema_compliance.py:100`
`test_project_json_with_v2_ga_fields`	software	healthy	`tests/skill_init/test_schema_compliance.py:107`
`test_task_prefix_algorithm`	software	healthy	`tests/skill_init/test_schema_compliance.py:161`
`test_phase_object_valid`	software	healthy	`tests/skill_init/test_schema_compliance.py:170`
`test_task_enum_pattern_regressions`	software	healthy	`tests/skill_init/test_schema_compliance.py:186`
`test_phase_status_blocked_rejected`	software	healthy	`tests/skill_init/test_schema_compliance.py:196`
`test_phase_orphan_passes_schema_init_must_enforce`	software	healthy	`tests/skill_init/test_schema_compliance.py:203`
`test_backlog_positive_fixtures_pass`	software	healthy	`tests/skill_init/test_schema_compliance.py:233`
`test_backlog_negative_fixtures_fail`	software	healthy	`tests/skill_init/test_schema_compliance.py:245`
`test_workflowstate_gate_fields_pass_and_typed`	software	healthy	`tests/skill_init/test_schema_compliance.py:261`
`test_workflowstate_string_prnumber_rejected`	software	healthy	`tests/skill_init/test_schema_compliance.py:279`
`_extract_workflowstate_block`	software	healthy	`tests/skill_init/test_schema_compliance.py:304`
`test_workflowstate_template_emits_gate_fields`	software	healthy	`tests/skill_init/test_schema_compliance.py:322`
`_load`	software	healthy	`tests/lessons/conftest.py:27`
`schema`	software	healthy	`tests/lessons/conftest.py:32`
`base_patterns`	software	healthy	`tests/lessons/conftest.py:37`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`skill_init`	software	healthy	`tests/skill_init`
`lessons`	software	healthy	`tests/lessons`
`fixtures`	software	healthy	`tests/lessons/fixtures`
`secrets`	software	healthy	`tests/secrets`
`upgrade`	software	healthy	`tests/upgrade`
`fixtures`	software	healthy	`tests/upgrade/fixtures`
`docs`	software	healthy	`docs`
`v2`	software	healthy	`docs/v2`
`archive`	software	healthy	`docs/archive`
`agents`	software	healthy	`docs/archive/agents`
`requirements`	software	healthy	`docs/requirements`
`scripts`	software	healthy	`scripts`
`agents`	software	healthy	`agents`
`.claude`	software	healthy	`.claude`
`docs`	software	healthy	`.claude/docs`
`templates`	software	healthy	`.claude/templates`
`protocols`	software	healthy	`.claude/templates/protocols`
`agents`	software	healthy	`.claude/agents`
`hooks`	software	healthy	`.claude/hooks`
`tests`	software	healthy	`.claude/hooks/tests`
`lib`	software	healthy	`.claude/hooks/lib`
`workflows`	software	healthy	`.claude/workflows`
`skills`	software	healthy	`.claude/skills`
`aick-merge-pr`	software	healthy	`.claude/skills/aick-merge-pr`
`aick-plan`	software	healthy	`.claude/skills/aick-plan`
`aick-impl`	software	healthy	`.claude/skills/aick-impl`
`aick-onboard`	software	healthy	`.claude/skills/aick-onboard`
`aick-release`	software	healthy	`.claude/skills/aick-release`
`aick-backlog`	software	healthy	`.claude/skills/aick-backlog`
`aick-review-pr`	software	healthy	`.claude/skills/aick-review-pr`
`aick-status`	software	healthy	`.claude/skills/aick-status`
`aick-fix`	software	healthy	`.claude/skills/aick-fix`
`aick-create`	software	healthy	`.claude/skills/aick-create`
`aick-validate`	software	healthy	`.claude/skills/aick-validate`
`aick-hotfix`	software	healthy	`.claude/skills/aick-hotfix`
`aick-estimate`	software	healthy	`.claude/skills/aick-estimate`
`aick-report`	software	healthy	`.claude/skills/aick-report`
`aick-upgrade`	software	healthy	`.claude/skills/aick-upgrade`
`aick-feature`	software	healthy	`.claude/skills/aick-feature`
`aick-docs`	software	healthy	`.claude/skills/aick-docs`
`docs`	software	healthy	`.claude/skills/aick-docs/docs`
`templates`	software	healthy	`.claude/skills/aick-docs/templates`
`aick-rollback`	software	healthy	`.claude/skills/aick-rollback`
`aick-init`	software	healthy	`.claude/skills/aick-init`
`aick-review`	software	healthy	`.claude/skills/aick-review`
`aick-retro`	software	healthy	`.claude/skills/aick-retro`
`aick-health-check`	software	healthy	`.claude/skills/aick-health-check`
`schemas`	software	healthy	`.claude/schemas`
`fixtures`	software	healthy	`.claude/schemas/fixtures`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::.claude/schemas/fixtures/backlog/positive/task-with-w…`	security	healthy	`.claude/schemas/fixtures/backlog/positive/task-with-workflo…`
`auth::tests/secrets/test_common_hardcoded.py`	security	healthy	`tests/secrets/test_common_hardcoded.py`
`auth::.claude/skills/aick-health-check/SKILL.md`	security	healthy	`.claude/skills/aick-health-check/SKILL.md`
`auth::tests/secrets/test_common_runtime.py`	security	healthy	`tests/secrets/test_common_runtime.py`
`auth::.claude/skills/aick-review-pr/SKILL.md`	security	healthy	`.claude/skills/aick-review-pr/SKILL.md`
`auth::.claude/domains/_base/health/secrets-patterns.json`	security	healthy	`.claude/domains/_base/health/secrets-patterns.json`
`auth::.claude/skills/aick-init/SKILL.md`	security	healthy	`.claude/skills/aick-init/SKILL.md`
`auth::.claude/schemas/fixtures/backlog/positive/backlog-wit…`	security	healthy	`.claude/schemas/fixtures/backlog/positive/backlog-with-crit…`
`auth::.claude/domains/general/domain.json`	security	healthy	`.claude/domains/general/domain.json`
`auth::.claude/skills/aick-docs/templates/api-spec.yaml`	security	healthy	`.claude/skills/aick-docs/templates/api-spec.yaml`
`auth::.claude/schemas/fixtures/backlog/positive/full-backlo…`	security	healthy	`.claude/schemas/fixtures/backlog/positive/full-backlog-with…`
`auth::.claude/domains/_base/templates/api-spec.yaml`	security	healthy	`.claude/domains/_base/templates/api-spec.yaml`
`auth::examples/general-app/.claude/state/backlog.json`	security	healthy	`examples/general-app/.claude/state/backlog.json`
`auth::tests/skill_init/conftest.py`	security	healthy	`tests/skill_init/conftest.py`
`auth::examples/README.md`	security	healthy	`examples/README.md`

Label	Layer	Status	Path
`lint-and-test`	cicd	healthy	`.github/workflows/hook-tests.yml`
`consistency`	cicd	healthy	`.github/workflows/validate-plugin.yml`
`validate-schema-and-regex`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`fixture-tests`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`validate-category-weights`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`validate-lessons-learned`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`lessons-fixture-tests`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`validate-v2-migration`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`upgrade-fixture-tests`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`validate`	cicd	healthy	`.github/workflows/schema-validation.yml`
`test`	cicd	healthy	`.github/workflows/aick-init-tests.yml`

Label	Layer	Status	Path
`mysql`	data	healthy	`README.md`
`postgresql`	data	healthy	`README.md`
`mongodb`	data	healthy	`README.md`
`sqlite`	data	healthy	`README.md`
`redis`	data	healthy	`README.md`
`postgres`	data	healthy	`.claude/skills/aick-onboard/SKILL.md`

Label	Layer	Status	Path
`gha::hook-tests`	cicd	healthy	`.github/workflows/hook-tests.yml`
`gha::validate-plugin`	cicd	healthy	`.github/workflows/validate-plugin.yml`
`gha::secrets-tests`	cicd	healthy	`.github/workflows/secrets-tests.yml`
`gha::schema-validation`	cicd	healthy	`.github/workflows/schema-validation.yml`
`gha::aick-init-tests`	cicd	healthy	`.github/workflows/aick-init-tests.yml`

Label	Layer	Status	Path
`rabbitmq`	data	healthy	`README.md`
`kafka`	data	healthy	`.claude/skills/aick-onboard/SKILL.md`
`sqs`	data	healthy	`.claude/skills/aick-init/SKILL.md`

Label	Layer	Status	Path
`github_token::tests/lessons/test_secrets_filter.py`	security	healthy	`tests/lessons/test_secrets_filter.py`
`github_token::tests/secrets/test_common_hardcoded.py`	security	healthy	`tests/secrets/test_common_hardcoded.py`
`password_literal::tests/secrets/test_common_runtime.py`	security	healthy	`tests/secrets/test_common_runtime.py`

Label	Layer	Status	Path
`test_gitignore_migration.py`	data	healthy	`tests/upgrade/test_gitignore_migration.py`
`validate-v2-migration.py`	data	healthy	`scripts/validate-v2-migration.py`

Label	Layer	Status	Path
`repobility-clone-c8jq21g6`	software	healthy	`/tmp/repobility-clone-c8jq21g6`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`README.md`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/a0d17291-deef-46af-b9db-698a257b251c/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/a0d17291-deef-46af-b9db-698a257b251c/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

wejsa/ai-crew-kit

Complete repo analysis

file 50+

function 50+

directory 50+

auth 15

job 11

database 6

pipeline 5

queue 3

secret 3

migration 2

repo 1

vps 1