Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

SC0RED/Agency

https://github.com/SC0RED/Agency · scanned 2026-06-16 00:04 UTC (2 months, 3 weeks ago)

220 raw signals (187 security + 33 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 3 weeks ago · v1 · 36 actionable findings from 2 signal sources. 344 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 28 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 2 High 4 Medium 20 Low 7 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 8 System graph 28 Crowd 0 Layer: Quality 20 Security 8 Hardware 3 Frontend 1 Cicd 4

Exclude dismissed / FP Exclude test files

All 836 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`clippy.toml`	software	healthy	`clippy.toml`
`rust-toolchain.toml`	software	healthy	`rust-toolchain.toml`
`deny.toml`	software	healthy	`deny.toml`
`Cargo.toml`	software	healthy	`Cargo.toml`
`README.md`	software	healthy	`README.md`
`rustfmt.toml`	software	healthy	`rustfmt.toml`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`Dockerfile`	software	healthy	`Dockerfile`
`.gitleaks.toml`	software	healthy	`.gitleaks.toml`
`AGENCY_PORT_GUIDE.md`	software	healthy	`AGENCY_PORT_GUIDE.md`
`.pre-commit-config.yaml`	software	healthy	`.pre-commit-config.yaml`
`.coderabbit.yaml`	software	healthy	`.coderabbit.yaml`
`Makefile`	software	healthy	`Makefile`
`CODEX_AUDIT.md`	software	healthy	`CODEX_AUDIT.md`
`Cargo.lock`	software	healthy	`Cargo.lock`
`AGENTS.md`	software	healthy	`AGENTS.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`design-patterns-guide.md`	software	healthy	`docs/design-patterns-guide.md`
`NAMING_CONVENTIONS.md`	software	healthy	`docs/standards/NAMING_CONVENTIONS.md`
`STANDARDS.md`	software	healthy	`docs/standards/STANDARDS.md`
`pricing-seed-2026-06-10.json`	software	healthy	`docs/plans/pricing-seed-2026-06-10.json`
`api-provider-abstraction.md`	software	healthy	`docs/plans/api-provider-abstraction.md`
`GIT_WORKFLOW.md`	software	healthy	`docs/guides/GIT_WORKFLOW.md`
`ENVIRONMENT_VARIABLES.md`	software	healthy	`docs/guides/ENVIRONMENT_VARIABLES.md`
`BRANCHING.md`	software	healthy	`docs/guides/BRANCHING.md`
`SECRETS_MANAGEMENT.md`	software	healthy	`docs/guides/SECRETS_MANAGEMENT.md`
`push-all-branches.sh`	software	healthy	`scripts/push-all-branches.sh`
`git_push_as_bot.sh`	software	healthy	`scripts/git_push_as_bot.sh`
`check_abbreviations.sh`	software	healthy	`scripts/check_abbreviations.sh`
`setup-branch-protection.sh`	software	healthy	`scripts/setup-branch-protection.sh`
`check_skip_comments.sh`	software	healthy	`scripts/check_skip_comments.sh`
`check_file_size.sh`	software	healthy	`scripts/check_file_size.sh`
`initialize_branches.sh`	software	healthy	`scripts/initialize_branches.sh`
`collect-claude-accounts.sh`	software	healthy	`scripts/collect-claude-accounts.sh`
`test_agency_mcp_server.py`	software	healthy	`scripts/test_agency_mcp_server.py`
`generate_github_app_token.sh`	software	healthy	`scripts/generate_github_app_token.sh`
`check_naming.sh`	software	healthy	`scripts/check_naming.sh`
`check_branch_name.sh`	software	healthy	`scripts/check_branch_name.sh`
`agency_mcp_server.py`	software	healthy	`scripts/agency_mcp_server.py`
`README.md`	software	healthy	`deploy/README.md`
`provision-builder-toolchain.sh`	software	healthy	`deploy/provision-builder-toolchain.sh`
`settings.json`	software	healthy	`.claude/settings.json`
`explore.md`	software	healthy	`.claude/commands/opsx/explore.md`
`archive.md`	software	healthy	`.claude/commands/opsx/archive.md`
`propose.md`	software	healthy	`.claude/commands/opsx/propose.md`
`apply.md`	software	healthy	`.claude/commands/opsx/apply.md`
`post-push-review.sh`	software	healthy	`.claude/hooks/post-push-review.sh`
`guard-edit.sh`	software	healthy	`.claude/hooks/guard-edit.sh`
`guard-bash.sh`	software	healthy	`.claude/hooks/guard-bash.sh`
`pre-commit-gate.sh`	software	healthy	`.claude/hooks/pre-commit-gate.sh`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`docs`	software	healthy	`docs`
`standards`	software	healthy	`docs/standards`
`plans`	software	healthy	`docs/plans`
`guides`	software	healthy	`docs/guides`
`scripts`	software	healthy	`scripts`
`deploy`	software	healthy	`deploy`
`.claude`	software	healthy	`.claude`
`commands`	software	healthy	`.claude/commands`
`opsx`	software	healthy	`.claude/commands/opsx`
`hooks`	software	healthy	`.claude/hooks`
`skills`	software	healthy	`.claude/skills`
`openspec-explore`	software	healthy	`.claude/skills/openspec-explore`
`openspec-apply-change`	software	healthy	`.claude/skills/openspec-apply-change`
`openspec-archive-change`	software	healthy	`.claude/skills/openspec-archive-change`
`openspec-propose`	software	healthy	`.claude/skills/openspec-propose`
`migrations`	software	healthy	`migrations`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`actions`	software	healthy	`.github/actions`
`setup-rust`	software	healthy	`.github/actions/setup-rust`
`openspec`	software	healthy	`openspec`
`specs`	software	healthy	`openspec/specs`
`enforcement`	software	healthy	`openspec/specs/enforcement`
`testing`	software	healthy	`openspec/specs/testing`
`developer-experience`	software	healthy	`openspec/specs/developer-experience`
`tool-forging`	software	healthy	`openspec/specs/tool-forging`
`error-handling`	software	healthy	`openspec/specs/error-handling`
`ci-cd`	software	healthy	`openspec/specs/ci-cd`
`agent-runner-strategy`	software	healthy	`openspec/specs/agent-runner-strategy`
`api-design`	software	healthy	`openspec/specs/api-design`
`observability`	software	healthy	`openspec/specs/observability`
`code-architecture`	software	healthy	`openspec/specs/code-architecture`
`agent-versioning`	software	healthy	`openspec/specs/agent-versioning`
`quality-framework`	software	healthy	`openspec/specs/quality-framework`
`webhook-proxy-domain`	software	healthy	`openspec/specs/webhook-proxy-domain`
`infrastructure`	software	healthy	`openspec/specs/infrastructure`
`agent-tool-use`	software	healthy	`openspec/specs/agent-tool-use`
`changes`	software	healthy	`openspec/changes`
`004-runtime-boundary`	software	healthy	`openspec/changes/004-runtime-boundary`
`archive`	software	healthy	`openspec/changes/archive`
`2026-05-12-spe-2078-tool-use`	software	healthy	`openspec/changes/archive/2026-05-12-spe-2078-tool-use`
`specs`	software	healthy	`openspec/changes/archive/2026-05-12-spe-2078-tool-use/specs`
`observability`	software	healthy	`openspec/changes/archive/2026-05-12-spe-2078-tool-use/specs…`
`agent-versioning`	software	healthy	`openspec/changes/archive/2026-05-12-spe-2078-tool-use/specs…`
`agent-tool-use`	software	healthy	`openspec/changes/archive/2026-05-12-spe-2078-tool-use/specs…`
`2026-05-24-add-event-driven-principle`	software	healthy	`openspec/changes/archive/2026-05-24-add-event-driven-princi…`
`specs`	software	healthy	`openspec/changes/archive/2026-05-24-add-event-driven-princi…`
`code-architecture`	software	healthy	`openspec/changes/archive/2026-05-24-add-event-driven-princi…`
`2026-05-24-add-builder-tool-forging`	software	healthy	`openspec/changes/archive/2026-05-24-add-builder-tool-forging`
`specs`	software	healthy	`openspec/changes/archive/2026-05-24-add-builder-tool-forgin…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`_reset_emitter_state`	software	healthy	`scripts/test_agency_mcp_server.py:35`
`test_build_internal_events_request_url_method_and_headers`	software	healthy	`scripts/test_agency_mcp_server.py:45`
`test_emits_post_on_tool_error`	software	healthy	`scripts/test_agency_mcp_server.py:64`
`__init__`	software	healthy	`scripts/test_agency_mcp_server.py:72`
`__enter__`	software	healthy	`scripts/test_agency_mcp_server.py:75`
`__exit__`	software	healthy	`scripts/test_agency_mcp_server.py:78`
`fake_urlopen`	software	healthy	`scripts/test_agency_mcp_server.py:81`
`test_fail_soft_when_token_unset`	software	healthy	`scripts/test_agency_mcp_server.py:117`
`explode`	software	healthy	`scripts/test_agency_mcp_server.py:220`
`test_fail_soft_when_listener_unreachable`	software	healthy	`scripts/test_agency_mcp_server.py:157`
`fail_urlopen`	software	healthy	`scripts/test_agency_mcp_server.py:161`
`test_fail_soft_on_http_error_status`	software	healthy	`scripts/test_agency_mcp_server.py:182`
`http_error`	software	healthy	`scripts/test_agency_mcp_server.py:189`
`test_disabled_flag_skips_subsequent_calls`	software	healthy	`scripts/test_agency_mcp_server.py:210`
`test_listener_url_defaults_to_loopback_8794`	software	healthy	`scripts/test_agency_mcp_server.py:237`
`test_listener_url_strips_trailing_slash`	software	healthy	`scripts/test_agency_mcp_server.py:244`
`_log`	software	healthy	`scripts/agency_mcp_server.py:47`
`_load_config`	software	healthy	`scripts/agency_mcp_server.py:53`
`_load_credentials`	software	healthy	`scripts/agency_mcp_server.py:58`
`_agent_version`	software	healthy	`scripts/agency_mcp_server.py:84`
`_audit_path`	software	healthy	`scripts/agency_mcp_server.py:88`
`_redact_credentials`	software	healthy	`scripts/agency_mcp_server.py:92`
`_redact_value`	software	healthy	`scripts/agency_mcp_server.py:106`
`_write_audit_record`	software	healthy	`scripts/agency_mcp_server.py:120`
`_internal_events_url`	software	healthy	`scripts/agency_mcp_server.py:127`
`_emit_tool_error_event`	software	healthy	`scripts/agency_mcp_server.py:135`
`_emit_eligibility_check`	software	healthy	`scripts/agency_mcp_server.py:170`
`_build_event_body`	software	healthy	`scripts/agency_mcp_server.py:192`
`_post_event_or_disable`	software	healthy	`scripts/agency_mcp_server.py:214`
`_build_internal_events_request`	software	healthy	`scripts/agency_mcp_server.py:248`
`_now_iso`	software	healthy	`scripts/agency_mcp_server.py:265`
`_validate_content_block`	software	healthy	`scripts/agency_mcp_server.py:279`
`_content_blocks`	software	healthy	`scripts/agency_mcp_server.py:295`
`_summarize_blocks_for_audit`	software	healthy	`scripts/agency_mcp_server.py:321`
`_stringify`	software	healthy	`scripts/agency_mcp_server.py:334`
`__init__`	software	healthy	`scripts/agency_mcp_server.py:340`
`list_tools`	software	healthy	`scripts/agency_mcp_server.py:353`
`call_tool`	software	healthy	`scripts/agency_mcp_server.py:378`
`_respond`	software	healthy	`scripts/agency_mcp_server.py:457`
`_handle_request`	software	healthy	`scripts/agency_mcp_server.py:467`
`main`	software	healthy	`scripts/agency_mcp_server.py:499`

Label	Layer	Status	Path
`auth::src/strategies/signature/README.md`	security	healthy	`src/strategies/signature/README.md`
`auth::src/runners/claude_cli/mod.rs`	security	healthy	`src/runners/claude_cli/mod.rs`
`auth::src/runners/claude_cli/command_builder.rs`	security	healthy	`src/runners/claude_cli/command_builder.rs`
`auth::src/runtime_assembly/mod.rs`	security	healthy	`src/runtime_assembly/mod.rs`
`auth::scripts/collect-claude-accounts.sh`	security	healthy	`scripts/collect-claude-accounts.sh`
`auth::src/workspace/config/runner.rs`	security	healthy	`src/workspace/config/runner.rs`
`auth::src/authz/hints.rs`	security	healthy	`src/authz/hints.rs`
`auth::deploy/README.md`	security	healthy	`deploy/README.md`
`auth::src/http/ingest/mod.rs`	security	healthy	`src/http/ingest/mod.rs`
`auth::src/runners/claude_cli/pool_failover.rs`	security	healthy	`src/runners/claude_cli/pool_failover.rs`
`auth::src/workspace/config/mod.rs`	security	healthy	`src/workspace/config/mod.rs`
`auth::src/http/ingest/tests/coalesce.rs`	security	healthy	`src/http/ingest/tests/coalesce.rs`
`auth::src/runtime/assembly/gating/tests.rs`	security	healthy	`src/runtime/assembly/gating/tests.rs`
`auth::src/runtime_assembly/dispatch_groups.rs`	security	healthy	`src/runtime_assembly/dispatch_groups.rs`
`auth::.claude/skills/openspec-explore/SKILL.md`	security	healthy	`.claude/skills/openspec-explore/SKILL.md`
`auth::scripts/generate_github_app_token.sh`	security	healthy	`scripts/generate_github_app_token.sh`
`auth::src/http/ingest/signature.rs`	security	healthy	`src/http/ingest/signature.rs`
`auth::src/strategies/oidc.rs`	security	healthy	`src/strategies/oidc.rs`
`auth::src/http/ingest/tests/pipeline.rs`	security	healthy	`src/http/ingest/tests/pipeline.rs`
`auth::.gitleaks.toml`	security	healthy	`.gitleaks.toml`
`auth::src/http/ingest/tests/calendar.rs`	security	healthy	`src/http/ingest/tests/calendar.rs`
`auth::src/http/tasks.rs`	security	healthy	`src/http/tasks.rs`
`auth::src/strategies/mod.rs`	security	healthy	`src/strategies/mod.rs`
`auth::src/entities/pg_repository/tests.rs`	security	healthy	`src/entities/pg_repository/tests.rs`
`auth::src/http/mod.rs`	security	healthy	`src/http/mod.rs`
`auth::.github/workflows/deploy-runtime.yml`	security	healthy	`.github/workflows/deploy-runtime.yml`
`auth::src/http/ingest/tests/zoom.rs`	security	healthy	`src/http/ingest/tests/zoom.rs`
`auth::src/runtime_assembly/providers.rs`	security	healthy	`src/runtime_assembly/providers.rs`
`auth::src/runners/claude_account.rs`	security	healthy	`src/runners/claude_account.rs`
`auth::clippy.toml`	security	healthy	`clippy.toml`
`auth::src/runners/types.rs`	security	healthy	`src/runners/types.rs`
`auth::src/runtime/assembly/gating/mod.rs`	security	healthy	`src/runtime/assembly/gating/mod.rs`
`auth::src/workspace/config/fixtures.rs`	security	healthy	`src/workspace/config/fixtures.rs`
`auth::src/http/ingest/tests/mod.rs`	security	healthy	`src/http/ingest/tests/mod.rs`
`auth::src/workspace/config/provider.rs`	security	healthy	`src/workspace/config/provider.rs`

Label	Layer	Status	Path
`ci`	cicd	healthy	`.github/workflows/pull-request.yml`
`naming`	cicd	healthy	`.github/workflows/pull-request.yml`
`summary`	cicd	healthy	`.github/workflows/pull-request.yml`
`lint`	cicd	healthy	`.github/workflows/_ci-checks.yml`
`test`	cicd	healthy	`.github/workflows/_ci-checks.yml`
`security`	cicd	healthy	`.github/workflows/_ci-checks.yml`
`sonarcloud`	cicd	healthy	`.github/workflows/_ci-checks.yml`
`validate-branch-name`	cicd	healthy	`.github/workflows/_naming-validation.yml`
`validate-naming`	cicd	healthy	`.github/workflows/_naming-validation.yml`
`naming-summary`	cicd	healthy	`.github/workflows/_naming-validation.yml`
`gitStream`	cicd	healthy	`.github/workflows/gitstream.yml`
`update-secrets`	cicd	healthy	`.github/workflows/update-secrets.yml`
`build`	cicd	healthy	`.github/workflows/deploy-runtime.yml`
`canary`	cicd	healthy	`.github/workflows/deploy-runtime.yml`
`bake`	cicd	healthy	`.github/workflows/deploy-runtime.yml`
`fleet`	cicd	healthy	`.github/workflows/deploy-runtime.yml`

Label	Layer	Status	Path
`entities`	data	healthy	`migrations/0002_create_entity_store.sql`
`relations`	data	healthy	`migrations/0002_create_entity_store.sql`
`entity_embeddings`	data	healthy	`migrations/0002_create_entity_store.sql`
`entity_audit`	data	healthy	`migrations/0002_create_entity_store.sql`
`scheduled_tasks`	data	healthy	`migrations/0002_create_entity_store.sql`
`entity_external_ids`	data	healthy	`migrations/0006_create_entity_external_ids.sql`
`events`	data	healthy	`migrations/0001_create_events.sql`
`exception_dispatches`	data	healthy	`migrations/0003_create_exception_dispatches.sql`
`recovery_dispatches`	data	healthy	`migrations/0004_create_recovery_dispatches.sql`

Label	Layer	Status	Path
`AWS_SECRET_ACCESS_KEY`	cicd	healthy	`—`
`ENVIRONMENT`	cicd	healthy	`—`
`AGENCY_DEPLOY_SSH_KEY`	cicd	healthy	`—`
`AWS_ACCESS_KEY_ID`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`AWS_REGION`	cicd	healthy	`—`
`OP_SERVICE_ACCOUNT_TOKEN`	cicd	healthy	`—`
`TAILSCALE_AUTHKEY`	cicd	healthy	`—`
`SONAR_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`0002_create_entity_store.sql`	data	healthy	`migrations/0002_create_entity_store.sql`
`0006_create_entity_external_ids.sql`	data	healthy	`migrations/0006_create_entity_external_ids.sql`
`0005_drop_old_dispatch_tables.sql`	data	healthy	`migrations/0005_drop_old_dispatch_tables.sql`
`0001_create_events.sql`	data	healthy	`migrations/0001_create_events.sql`
`0003_create_exception_dispatches.sql`	data	healthy	`migrations/0003_create_exception_dispatches.sql`
`0004_create_recovery_dispatches.sql`	data	healthy	`migrations/0004_create_recovery_dispatches.sql`

Label	Layer	Status	Path
`gha::pull-request`	cicd	healthy	`.github/workflows/pull-request.yml`
`gha::_ci-checks`	cicd	healthy	`.github/workflows/_ci-checks.yml`
`gha::_naming-validation`	cicd	healthy	`.github/workflows/_naming-validation.yml`
`gha::gitstream`	cicd	healthy	`.github/workflows/gitstream.yml`
`gha::update-secrets`	cicd	healthy	`.github/workflows/update-secrets.yml`
`gha::deploy-runtime`	cicd	healthy	`.github/workflows/deploy-runtime.yml`

Label	Layer	Status	Path
`sqlite`	data	healthy	`clippy.toml`
`redis`	data	healthy	`Cargo.toml`
`postgres`	data	healthy	`Cargo.toml`
`mysql`	data	healthy	`.gitleaks.toml`
`mongodb`	data	healthy	`.gitleaks.toml`

Label	Layer	Status	Path
`port:6379`	network	healthy	`docker-compose.yml`
`port:5432`	network	healthy	`.github/workflows/_ci-checks.yml`
`port:8793`	network	healthy	`src/scheduled/fire/fixtures.rs`
`port:8792`	network	healthy	`src/runtime/mod.rs`

Label	Layer	Status	Path
`bullmq`	data	healthy	`clippy.toml`
`sqs`	data	healthy	`README.md`
`pubsub`	data	healthy	`scripts/test_agency_mcp_server.py`

Label	Layer	Status	Path
`FakeResp`	software	healthy	`scripts/test_agency_mcp_server.py:71`
`ToolRegistry`	software	healthy	`scripts/agency_mcp_server.py:339`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`scripts/test_agency_mcp_server.py`
`10.0.0.5`	network	healthy	`src/util/redact.rs`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`redis`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`vps::ec2`	hardware	healthy	`README.md`
`vps::aws`	hardware	healthy	`README.md`

Label	Layer	Status	Path
`repobility-clone-dac0qfbe`	software	healthy	`/tmp/repobility-clone-dac0qfbe`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/b8fb0a2d-c052-494e-9e0a-a82171ca3909/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/b8fb0a2d-c052-494e-9e0a-a82171ca3909/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

SC0RED/Agency

Complete repo analysis

file 50+

directory 50+

function 41

auth 35

job 16

table 9

env_var 9

migration 6

pipeline 6

database 5

port 4

queue 3

class 2

service 2

container 2

vps 2

repo 1