Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

Scan timing: clone 28.3s · analysis 28.44s · 54.0 MB · GitHub API rate-limit (preflight)

trpc-group/trpc-agent-go

https://github.com/trpc-group/trpc-agent-go · scanned 2026-05-31 01:26 UTC (5 days, 7 hours ago) · 10 languages

462 findings (187 legacy + 275 scanner) 11/13 scanners ran 83rd percentile · Go · huge (>500K LoC) Scanner says 66 (higher by 23)

File as issue Image v2 schema
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 7 hours ago · v2 · last Δ -0.4 (diff) · 329 findings from 2 sources. Findings combine the legacy security pipeline AND the multi-layer engine (atlas, wiring, flows, ranked) AND verified AI agent contributions.

JSON
Combined
79.0
/100
Repobility
92
187 legacy
9-layer
67
100.0% cov · 142 gaps
Critical
2
click to filter
Agents
6
0 votes
Crowd
0
reported
Score breakdown â 2026-05-18-v5
Component Sub-score Weight Contribution
structure_score 85.0 0.15 12.75
security_score 100.0 0.25 25.00
testing_score 85.0 0.20 17.00
documentation_score 95.0 0.15 14.25
practices_score 95.0 0.15 14.25
code_quality 64.0 0.10 6.40
Overall 1.00 89.7
security_score may be inflated — optional security scanners were skipped on this fast scan
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 2 High 124 Medium 21 Low 147 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Legacy 187 9-layer 142 Crowd 0 Layer: Software 74 Quality 210 Security 11 Cicd 27 Frontend 5 Hardware 1 Api 1

All 4698 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
.golangci.yml software healthy .golangci.yml
README.md software healthy README.md
tdsql_known_issues.md software healthy tdsql_known_issues.md
CONTRIBUTING.md software healthy CONTRIBUTING.md
CODE-OF-CONDUCT.md software healthy CODE-OF-CONDUCT.md
.coderabbit.yaml software healthy .coderabbit.yaml
go.mod software healthy go.mod
README.zh_CN.md software healthy README.zh_CN.md
CONTRIBUTORS.md software healthy CONTRIBUTORS.md
AGENTS.md software healthy AGENTS.md
.typos.toml software healthy .typos.toml
RELEASE.md software healthy openclaw/RELEASE.md
INSTALL.zh_CN.md software healthy openclaw/INSTALL.zh_CN.md
EXTENDING.md software healthy openclaw/EXTENDING.md
README.md software healthy openclaw/README.md
install.sh software healthy openclaw/install.sh
openclaw.stdin.sqlite.yaml software healthy openclaw/openclaw.stdin.sqlite.yaml
release.sh software healthy openclaw/release.sh
openclaw.stdin.yaml software healthy openclaw/openclaw.stdin.yaml
RELEASE.zh_CN.md software healthy openclaw/RELEASE.zh_CN.md
INSTALL.md software healthy openclaw/INSTALL.md
go.mod software healthy openclaw/go.mod
INTEGRATIONS.md software healthy openclaw/INTEGRATIONS.md
README.zh_CN.md software healthy openclaw/README.zh_CN.md
openclaw.yaml software healthy openclaw/openclaw.yaml
types.go software healthy openclaw/gwproto/types.go
types_test.go software healthy openclaw/gwproto/types_test.go
README.md software healthy openclaw/browser-server/README.md
package.json software healthy openclaw/browser-server/package.json
smoke-relay.js software healthy openclaw/browser-server/scripts/smoke-relay.js
smoke-host.js software healthy openclaw/browser-server/scripts/smoke-host.js
common.js software healthy openclaw/browser-server/scripts/common.js
common.test.js software warning openclaw/browser-server/scripts/common.test.js
chrome-relay.test.js software healthy openclaw/browser-server/src/chrome-relay.test.js
host-profile.js software healthy openclaw/browser-server/src/host-profile.js
ssrf.test.js software warning openclaw/browser-server/src/ssrf.test.js
host-profile.test.js software healthy openclaw/browser-server/src/host-profile.test.js
chrome-relay.js software healthy openclaw/browser-server/src/chrome-relay.js
server.js software healthy openclaw/browser-server/src/server.js
dom-tools.js software healthy openclaw/browser-server/src/dom-tools.js
ssrf.js software healthy openclaw/browser-server/src/ssrf.js
runtime.js software healthy openclaw/browser-server/src/runtime.js
store_test.go software healthy openclaw/internal/memoryfile/store_test.go
context.go software healthy openclaw/internal/memoryfile/context.go
store.go software healthy openclaw/internal/memoryfile/store.go
templates.go software healthy openclaw/internal/memoryfile/templates.go
client_test.go software healthy openclaw/internal/telegram/client_test.go
types.go software healthy openclaw/internal/telegram/types.go
poller_test.go software healthy openclaw/internal/telegram/poller_test.go
poller.go software healthy openclaw/internal/telegram/poller.go

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
openclaw software healthy openclaw
gwproto software healthy openclaw/gwproto
browser-server software healthy openclaw/browser-server
scripts software healthy openclaw/browser-server/scripts
src software healthy openclaw/browser-server/src
internal software healthy openclaw/internal
memoryfile software healthy openclaw/internal/memoryfile
telegram software healthy openclaw/internal/telegram
uploads software healthy openclaw/internal/uploads
persona software healthy openclaw/internal/persona
debugrecorder software healthy openclaw/internal/debugrecorder
cron software healthy openclaw/internal/cron
octool software healthy openclaw/internal/octool
pairing software healthy openclaw/internal/pairing
gateway software healthy openclaw/internal/gateway
skills software healthy openclaw/internal/skills
deps software healthy openclaw/internal/deps
conversationscope software healthy openclaw/internal/conversationscope
subagentrun software healthy openclaw/internal/subagentrun
browser software healthy openclaw/internal/browser
testdata software healthy openclaw/internal/browser/testdata
browser_mcp_server software healthy openclaw/internal/browser/testdata/browser_mcp_server
conversationtool software healthy openclaw/internal/conversationtool
channel software healthy openclaw/internal/channel
telegram software healthy openclaw/internal/channel/telegram
outbound software healthy openclaw/internal/outbound
runtimeprofile software healthy openclaw/runtimeprofile
cmd software healthy openclaw/cmd
openclaw software healthy openclaw/cmd/openclaw
conversation software healthy openclaw/conversation
croncmd software healthy openclaw/croncmd
app software healthy openclaw/app
registry software healthy openclaw/registry
browser-extension software healthy openclaw/browser-extension
admin software healthy openclaw/admin
delivery software healthy openclaw/delivery
subagent software healthy openclaw/subagent
examples software healthy openclaw/examples
playwright_mcp_browser software healthy openclaw/examples/playwright_mcp_browser
a2a_subagent software healthy openclaw/examples/a2a_subagent
browser_server_use software healthy openclaw/examples/browser_server_use
mcp_stdio_server software healthy openclaw/examples/mcp_stdio_server
browser_use software healthy openclaw/examples/browser_use
stdin_chat software healthy openclaw/examples/stdin_chat
prompts software healthy openclaw/examples/stdin_chat/prompts
system software healthy openclaw/examples/stdin_chat/prompts/system
gwclient software healthy openclaw/gwclient
skills software healthy openclaw/skills
blucli software healthy openclaw/skills/blucli
openai-image-gen software healthy openclaw/skills/openai-image-gen

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
main software healthy openclaw/browser-server/scripts/smoke-relay.js:main
main software healthy openclaw/browser-server/scripts/smoke-host.js:main
findBrowserExecutable software healthy openclaw/browser-server/scripts/common.js:findBrowserExecut…
resolveHeadlessMode software healthy openclaw/browser-server/scripts/common.js:resolveHeadlessMo…
buildRelayLaunchOptions software healthy openclaw/browser-server/scripts/common.js:buildRelayLaunchO…
fetchJSON software healthy openclaw/browser-server/scripts/common.js:fetchJSON
authHeaders software healthy openclaw/browser-server/scripts/common.js:authHeaders
extractText software healthy openclaw/browser-server/scripts/common.js:extractText
extractFirstRef software healthy openclaw/browser-server/scripts/common.js:extractFirstRef
closeServer software healthy openclaw/browser-server/scripts/common.js:closeServer
socketStub software healthy openclaw/browser-server/src/chrome-relay.test.js:socketStub
textContent software healthy openclaw/browser-server/src/host-profile.js:textContent
normalizeModifiers software healthy openclaw/browser-server/src/host-profile.js:normalizeModifi…
waitTimeoutMs software healthy openclaw/browser-server/src/host-profile.js:waitTimeoutMs
waitDurationMs software healthy openclaw/browser-server/src/host-profile.js:waitDurationMs
evaluateSource software healthy openclaw/browser-server/src/host-profile.js:evaluateSource
formatEvaluatedValue software healthy openclaw/browser-server/src/host-profile.js:formatEvaluated…
formatTabs software healthy openclaw/browser-server/src/host-profile.js:formatTabs
safeFilename software healthy openclaw/browser-server/src/host-profile.js:safeFilename
snapshotMode software healthy openclaw/browser-server/src/host-profile.js:snapshotMode
snapshotDepth software healthy openclaw/browser-server/src/host-profile.js:snapshotDepth
normalizeSnapshotOptions software healthy openclaw/browser-server/src/host-profile.js:normalizeSnapsh…
downloadFilename software healthy openclaw/browser-server/src/host-profile.js:downloadFilename
cookiesText software healthy openclaw/browser-server/src/host-profile.js:cookiesText
storageText software healthy openclaw/browser-server/src/host-profile.js:storageText
cookieInput software healthy openclaw/browser-server/src/host-profile.js:cookieInput
currentOrigin software healthy openclaw/browser-server/src/host-profile.js:currentOrigin
withCDPSession software healthy openclaw/browser-server/src/host-profile.js:withCDPSession
refs software healthy openclaw/browser-server/src/host-profile.js:refs
fn software healthy openclaw/browser-server/src/host-profile.js:fn
clear software healthy openclaw/browser-server/src/host-profile.js:clear
profileForPage software healthy openclaw/browser-server/src/host-profile.test.js:profileFor…
createDeferred software healthy openclaw/browser-server/src/chrome-relay.js:createDeferred
textContent software healthy openclaw/browser-server/src/chrome-relay.js:textContent
readBool software healthy openclaw/browser-server/src/server.js:readBool
readConfig software healthy openclaw/browser-server/src/server.js:readConfig
json software healthy openclaw/browser-server/src/server.js:json
readJSON software healthy openclaw/browser-server/src/server.js:readJSON
requireAuth software healthy openclaw/browser-server/src/server.js:requireAuth
profileFromURL software healthy openclaw/browser-server/src/server.js:profileFromURL
startServer software healthy openclaw/browser-server/src/server.js:startServer
snapshotDOM software healthy openclaw/browser-server/src/dom-tools.js:snapshotDOM
isVisible software healthy openclaw/browser-server/src/dom-tools.js:isVisible
textFor software healthy openclaw/browser-server/src/dom-tools.js:textFor
roleFor software healthy openclaw/browser-server/src/dom-tools.js:roleFor
ensureRef software healthy openclaw/browser-server/src/dom-tools.js:ensureRef
matchesSelector software healthy openclaw/browser-server/src/dom-tools.js:matchesSelector
isInteractive software healthy openclaw/browser-server/src/dom-tools.js:isInteractive
isMeaningful software healthy openclaw/browser-server/src/dom-tools.js:isMeaningful
snapshotLine software healthy openclaw/browser-server/src/dom-tools.js:snapshotLine

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

LabelLayerStatusPath
CLAAssistant cicd healthy .github/workflows/cla.yml
deploy cicd healthy .github/workflows/deploy.yml
prepare cicd healthy .github/workflows/openclaw-release.yml
build cicd healthy .github/workflows/openclaw-release.yml
release cicd healthy .github/workflows/openclaw-release.yml
check-current-module-sums cicd healthy .github/workflows/module-sum-check.yml
build cicd healthy .github/workflows/prc.yml
discover-go-modules cicd healthy .github/workflows/prc.yml
test-go-modules cicd healthy .github/workflows/prc.yml
e2e cicd healthy .github/workflows/prc.yml
coverage cicd healthy .github/workflows/prc.yml
golangci cicd healthy .github/workflows/prc.yml
check-go-mod-tidy cicd healthy .github/workflows/prc.yml
check-external-consumer cicd healthy .github/workflows/prc.yml
check-examples cicd healthy .github/workflows/prc.yml
check-examples-build-script cicd healthy .github/workflows/prc.yml
check-lfs-excluded cicd healthy .github/workflows/prc.yml
check-file-size cicd healthy .github/workflows/prc.yml
check-go-sumdb cicd healthy .github/workflows/prc.yml
typos cicd healthy .github/workflows/prc.yml
go-apidiff cicd healthy .github/workflows/prc.yml
docs-build cicd healthy .github/workflows/prc.yml
check-go-mod-version cicd healthy .github/workflows/prc.yml

LabelLayerStatusPath
auth::plugin/identity/identity.go security healthy plugin/identity/identity.go
auth::examples/knowledge/go.mod security healthy examples/knowledge/go.mod
auth::examples/go.mod security healthy examples/go.mod
auth::examples/evaluation/usersimulation_expectedrunner/out… security healthy examples/evaluation/usersimulation_expectedrunner/output/us…
auth::examples/plugin/identity/provider.go security healthy examples/plugin/identity/provider.go
auth::examples/openapitool/petstore3.yaml security healthy examples/openapitool/petstore3.yaml
auth::go.mod security healthy go.mod
auth::knowledge/chunking/markdown_test.go security healthy knowledge/chunking/markdown_test.go
auth::storage/milvus/go.mod security healthy storage/milvus/go.mod
auth::examples/agui/go.mod security healthy examples/agui/go.mod
auth::examples/callbacks/auth/callbacks.go security healthy examples/callbacks/auth/callbacks.go
auth::openclaw/go.mod security healthy openclaw/go.mod
auth::examples/openapitool/petstore3.json security healthy examples/openapitool/petstore3.json
auth::plugin/identity/doc.go security healthy plugin/identity/doc.go
auth::tool/mcpbroker/broker.go security healthy tool/mcpbroker/broker.go
auth::knowledge/vectorstore/milvus/go.mod security healthy knowledge/vectorstore/milvus/go.mod
auth::examples/graph/go.mod security healthy examples/graph/go.mod

LabelLayerStatusPath
port:28881 network healthy agent/a2aagent/example_test.go
port:28882 network healthy agent/a2aagent/example_test.go
port:8888 network healthy codeexecutor/jupyter/jupyter_test.go
port:65535 network healthy codeexecutor/jupyter/jupyter_test.go
port:5432 network healthy memory/pgvector/service_test.go
port:5433 network healthy memory/pgvector/service_test.go
port:8081 network healthy examples/a2aadk/adk/adk_server.py
port:8082 network healthy examples/a2aadk/adk/adk_codeexec_server.py
port:4317 network healthy examples/callbacks/timer/docker-compose.yaml
port:9090 network healthy examples/callbacks/timer/docker-compose.yaml
port:16686 network healthy examples/callbacks/timer/docker-compose.yaml
port:4318 network healthy examples/telemetry/jaeger-prometheus/docker-compose.yaml
port:5001 network healthy examples/knowledge/features/extractor/main.go
port:18881 network healthy server/a2a/example_test.go
port:18882 network healthy server/a2a/example_test.go
port:127 network healthy model/ollama/ollama.go

LabelLayerStatusPath
generic_api_key::openclaw/install.sh security healthy openclaw/install.sh
password_literal::openclaw/internal/gateway/stream.go security healthy openclaw/internal/gateway/stream.go
password_literal::memory/pgvector/service_test.go security healthy memory/pgvector/service_test.go
password_literal::memory/postgres/service_test.go security healthy memory/postgres/service_test.go
generic_api_key::examples/memory/compare/main.go security healthy examples/memory/compare/main.go
password_literal::examples/session/simple/main.go security healthy examples/session/simple/main.go
password_literal::examples/session/simple/main.go security healthy examples/session/simple/main.go
password_literal::examples/session/simple/main.go security healthy examples/session/simple/main.go
password_literal::session/pgvector/options_test.go security healthy session/pgvector/options_test.go
password_literal::session/pgvector/options_test.go security healthy session/pgvector/options_test.go
password_literal::session/pgvector/options_test.go security healthy session/pgvector/options_test.go
password_literal::session/postgres/service_test.go security healthy session/postgres/service_test.go
password_literal::session/postgres/service_edge_test.go security healthy session/postgres/service_edge_test.go
password_literal::storage/milvus/milvus_test.go security healthy storage/milvus/milvus_test.go

LabelLayerStatusPath
HostProfile software healthy openclaw/browser-server/src/host-profile.js:HostProfile
ChromeRelay software healthy openclaw/browser-server/src/chrome-relay.js:ChromeRelay
BrowserRuntime software healthy openclaw/browser-server/src/runtime.js:BrowserRuntime
WebSocketStub software healthy openclaw/browser-extension/background.test.js:WebSocketStub
EventStub software healthy openclaw/browser-extension/background.test.js:EventStub
OffscreenCanvasStub software healthy openclaw/browser-extension/background.test.js:OffscreenCanv…
ModelCost software healthy openclaw/skills/model-usage/scripts/model_usage.py:102
CustomEventMirroringAgent software healthy examples/agui/client/copilotkit/app/api/copilotkit/route.ts…
DownloadError software healthy examples/skill/scripts/download_gaia_2023_level1_validation…
RerankRequest software healthy examples/knowledge/reranker/infinity/deploy_infinity.py:26
RerankResult software healthy examples/knowledge/reranker/infinity/deploy_infinity.py:33
RerankResponse software healthy examples/knowledge/reranker/infinity/deploy_infinity.py:38

LabelLayerStatusPath
127.0.0.1 network healthy openclaw/openclaw.stdin.sqlite.yaml
192.0.2.1 network healthy openclaw/internal/gateway/user_message_test.go
192.168.1.20 network healthy openclaw/internal/browser/navigation_guard_test.go
10.0.0.8 network healthy openclaw/internal/browser/navigation_guard_test.go
192.168.1.1 network healthy internal/a2a/url_test.go
255.255.255.255 network healthy memory/redis/service_test.go
120.0.0.0 network healthy examples/skill/main.go
1.1.1.1 network healthy knowledge/chunking/markdown_test.go
1.1.1.2 network healthy knowledge/chunking/markdown_test.go
2.2.1.1 network healthy knowledge/chunking/markdown_test.go
2.2.1.2 network healthy knowledge/chunking/markdown_test.go
2.2.1.3 network healthy knowledge/chunking/markdown_test.go

LabelLayerStatusPath
sqlite data healthy openclaw/openclaw.stdin.sqlite.yaml
mysql data healthy openclaw/go.mod
postgres data healthy openclaw/go.mod
redis data healthy openclaw/go.mod
clickhouse data healthy openclaw/go.mod
elasticsearch data healthy openclaw/go.mod
postgresql data healthy docs/mkdocs.yml
mongodb data healthy storage/mongodb/go.mod

LabelLayerStatusPath
IF data healthy evaluation/evalresult/mysql/schema.sql
syntax data healthy session/mysql/schema_tdsql.sql
statements data healthy session/mysql/schema.sql
session_states data healthy session/pgvector/schema.sql
session_events data healthy session/pgvector/schema.sql
session_summaries data healthy session/pgvector/schema.sql
app_states data healthy session/pgvector/schema.sql
user_states data healthy session/pgvector/schema.sql

LabelLayerStatusPath
otel-collector hardware healthy examples/callbacks/timer/docker-compose.yaml
prometheus hardware healthy examples/callbacks/timer/docker-compose.yaml
jaeger hardware healthy examples/callbacks/timer/docker-compose.yaml
otel-collector hardware healthy examples/telemetry/jaeger-prometheus/docker-compose.yaml
prometheus hardware healthy examples/telemetry/jaeger-prometheus/docker-compose.yaml
jaeger hardware healthy examples/telemetry/jaeger-prometheus/docker-compose.yaml

LabelLayerStatusPath
gha::cla cicd healthy .github/workflows/cla.yml
gha::deploy cicd healthy .github/workflows/deploy.yml
gha::openclaw-release cicd healthy .github/workflows/openclaw-release.yml
gha::module-sum-check cicd healthy .github/workflows/module-sum-check.yml
gha::prc cicd healthy .github/workflows/prc.yml

LabelLayerStatusPath
CLA_DATABASE_ACCESS_TOKEN cicd healthy —
GITHUB_TOKEN cicd healthy —
EXAMPLES_GO_VERSION cicd healthy —
ROOT_GO_VERSION cicd healthy —
CODECOV_TOKEN cicd healthy —

LabelLayerStatusPath
grpc::AgentService api healthy examples/knowledge/exampledata/ast/proto-lib/agent/v1/agent…
grpc::KnowledgeService api healthy examples/knowledge/exampledata/ast/proto-lib/knowledge/v1/k…
grpc::AgentService api healthy examples/knowledge/exampledata/file/api.proto
grpc::KnowledgeService api healthy examples/knowledge/exampledata/file/api.proto

LabelLayerStatusPath
vps::azure hardware healthy examples/skillrun/go.mod
vps::aws hardware healthy artifact/s3/go.mod
vps::ec2 hardware healthy artifact/s3/go.mod

LabelLayerStatusPath
Home frontend healthy examples/agui/client/copilotkit/app/page.tsx
RootLayout frontend healthy examples/agui/client/copilotkit/app/layout.tsx
App frontend healthy examples/agui/client/tdesign-chat/src/App.tsx

LabelLayerStatusPath
POST /rerank api healthy examples/knowledge/reranker/infinity/deploy_infinity.py
GET /health api healthy examples/knowledge/reranker/infinity/deploy_infinity.py

LabelLayerStatusPath
/page.tsx frontend healthy examples/agui/client/copilotkit/app/page.tsx
/ frontend healthy openclaw/browser-server/src/host-profile.test.js

LabelLayerStatusPath
repobility-clone-6xzwhcev software healthy /tmp/repobility-clone-6xzwhcev

LabelLayerStatusPath
gpu (detected) hardware healthy examples/knowledge/reranker/infinity/deploy_infinity.py
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/a403e5be-55bf-4133-b7a5-6bc687c43c3b/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/a403e5be-55bf-4133-b7a5-6bc687c43c3b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.