Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

yangyanhao2004/Family_Robot

https://github.com/yangyanhao2004/Family_Robot · scanned 2026-06-16 01:05 UTC (2 months, 1 week ago)

49 raw signals (0 security + 49 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 46 actionable findings from 1 signal source. 3 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
70.5
/100
Security checks
71
0 findings
System graph
71
88.9% cov · 46 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 23 Medium 7 Low 15 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 46 Crowd 0 Layer: Software 5 Security 4 Cicd 1 Quality 9 Api 27
Corpus Intelligence Cross-corpus context (cohort percentile, top patterns, fix plan) is shown only on repositories you own. Sign up and connect your repo to view it.
Scan summary Repository scanned at 70.5/100 with 88.9% coverage. It contains 2367 nodes across 17 cross-layer flows, written primarily in mixed languages. Engine surfaced 49 findings — concentrated in api (27), quality (12), software (5). Risk profile is high: 0 critical, 23 high, 7 medium. Recommended next step: open the api layer findings first — that's where the highest-impact wins live.

Showing 45 of 46 actionable findings. 49 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/admin/robots/${robotId} (Family_Robot_Web_PC/src/services/api.ts:185)
`Family_Robot_Web_PC/src/services/api.ts:185` calls `DELETE /api/admin/robots/${robotId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/admin/robots/<p>` If this points at an external API, prefix it with `…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/admin/users/${userId} (Family_Robot_Web_PC/src/services/api.ts:182)
`Family_Robot_Web_PC/src/services/api.ts:182` calls `DELETE /api/admin/users/${userId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/admin/users/<p>` If this points at an external API, prefix it with `htt…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/albums/${id} (Family_Robot_Web_PC/src/services/api.ts:101)
`Family_Robot_Web_PC/src/services/api.ts:101` calls `DELETE /api/albums/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/albums/<p>` If this points at an external API, prefix it with `https://` so the …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: DELETE /api/reminders/${id} (Family_Robot_Web_PC/src/services/api.ts:152)
`Family_Robot_Web_PC/src/services/api.ts:152` calls `DELETE /api/reminders/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/reminders/<p>` If this points at an external API, prefix it with `https://` s…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/admin/users/${userId}/password (Family_Robot_Web_PC/src/services/api.ts:163)
`Family_Robot_Web_PC/src/services/api.ts:163` calls `GET /api/admin/users/${userId}/password` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/admin/users/<p>/password` If this points at an external API, pref…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/albums (Family_Robot_Web_PC/src/services/api.ts:98)
`Family_Robot_Web_PC/src/services/api.ts:98` calls `GET /api/albums` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/albums` If this points at an external API, prefix it with `https://` so the matcher skips …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/reminders?userId=${userId} (Family_Robot_Web_PC/src/services/api.ts:137)
`Family_Robot_Web_PC/src/services/api.ts:137` calls `GET /api/reminders?userId=${userId}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/reminders` If this points at an external API, prefix it with `https:/…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/settings (Family_Robot_Web_PC/src/services/api.ts:111)
`Family_Robot_Web_PC/src/services/api.ts:111` calls `GET /api/settings` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/settings` If this points at an external API, prefix it with `https://` so the matcher s…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: GET /api/users/profile (Family_Robot_Web_PC/src/services/api.ts:133)
`Family_Robot_Web_PC/src/services/api.ts:133` calls `GET /api/users/profile` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/users/profile` If this points at an external API, prefix it with `https://` so the…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/admin/robots (Family_Robot_Web_PC/src/services/api.ts:176)
`Family_Robot_Web_PC/src/services/api.ts:176` calls `POST /api/admin/robots` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/admin/robots` If this points at an external API, prefix it with `https://` so the …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/albums (Family_Robot_Web_PC/src/services/api.ts:104)
`Family_Robot_Web_PC/src/services/api.ts:104` calls `POST /api/albums` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/albums` If this points at an external API, prefix it with `https://` so the matcher skip…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/login (Family_Robot_Web_PC/src/services/api.ts:54)
`Family_Robot_Web_PC/src/services/api.ts:54` calls `POST /api/auth/login` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/login` If this points at an external API, prefix it with `https://` so the match…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/login-code/send (Family_Robot_Web_PC/src/services/api.ts:73)
`Family_Robot_Web_PC/src/services/api.ts:73` calls `POST /api/auth/login-code/send` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/login-code/send` If this points at an external API, prefix it with `ht…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/login-code/verify (Family_Robot_Web_PC/src/services/api.ts:79)
`Family_Robot_Web_PC/src/services/api.ts:79` calls `POST /api/auth/login-code/verify` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/login-code/verify` If this points at an external API, prefix it with…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/register (Family_Robot_Web_PC/src/services/api.ts:61)
`Family_Robot_Web_PC/src/services/api.ts:61` calls `POST /api/auth/register` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/register` If this points at an external API, prefix it with `https://` so the…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/reset-password/send (Family_Robot_Web_PC/src/services/api.ts:85)
`Family_Robot_Web_PC/src/services/api.ts:85` calls `POST /api/auth/reset-password/send` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/reset-password/send` If this points at an external API, prefix it …
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/reset-password/verify (Family_Robot_Web_PC/src/services/api.ts:91)
`Family_Robot_Web_PC/src/services/api.ts:91` calls `POST /api/auth/reset-password/verify` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/reset-password/verify` If this points at an external API, prefix…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/auth/verify (Family_Robot_Web_PC/src/services/api.ts:67)
`Family_Robot_Web_PC/src/services/api.ts:67` calls `POST /api/auth/verify` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/auth/verify` If this points at an external API, prefix it with `https://` so the mat…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: POST /api/reminders (Family_Robot_Web_PC/src/services/api.ts:140)
`Family_Robot_Web_PC/src/services/api.ts:140` calls `POST /api/reminders` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/reminders` If this points at an external API, prefix it with `https://` so the matche…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/reminders/${id} (Family_Robot_Web_PC/src/services/api.ts:146)
`Family_Robot_Web_PC/src/services/api.ts:146` calls `PUT /api/reminders/${id}` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/reminders/<p>` If this points at an external API, prefix it with `https://` so t…
Dangling fetchHelper:request
high System graph api Wiring conf 1.00 Dangling fetch: PUT /api/settings/emergency-contact (Family_Robot_Web_PC/src/services/api.ts:114)
`Family_Robot_Web_PC/src/services/api.ts:114` calls `PUT /api/settings/emergency-contact` but no backend route matches that path. This is a runtime 404 waiting to happen. Tool: helper:request Normalized path used for matching: `/settings/emergency-contact` If this points at an external API, prefix…
Dangling fetchHelper:request
high System graph security auth conf 1.00 FastAPI POST `handle_fall_alert` without auth dependency — Family_Robot_pi/backend/emergency/handler.py:34
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
Family_Robot_pi/backend/emergency/handler.py:34 securityAuth fastapi unauth mutation
high System graph security auth conf 1.00 FastAPI POST `handle_voice_reminder` without auth dependency — Family_Robot_pi/backend/internal/voice_reminder.py:33
`@router.post` decorator with no `Depends(get_current_user)` or auth-shaped dependency in its signature. Mutating endpoints should require authentication unless explicitly public.
Family_Robot_pi/backend/internal/voice_reminder.py:33 securityAuth fastapi unauth mutation
medium System graph quality Integrity conf 1.00 `fetch()` without try/.catch or AbortSignal — Family_Robot_Web_PC/src/services/api.ts:122
Bare `fetch(...)` will throw an unhandled rejection on network failure. Wrap in try/catch, attach a `.catch(...)`, or pass an AbortSignal with a timeout.
runtime safetyRobustness
medium System graph security security conf 1.00 Insecure pattern 'cors_wildcard' in Family_Robot_pi/backend/app.py:27
Found a known-risky pattern (cors_wildcard). Review and replace if possible.
Family_Robot_pi/backend/app.py:27 Cors wildcard
medium System graph security security conf 1.00 Insecure pattern 'local_storage_auth_token' in Family_Robot_Web_PC/src/stores/authStore.ts:18
Found a known-risky pattern (local_storage_auth_token). Review and replace if possible.
Family_Robot_Web_PC/src/stores/authStore.ts:18 Local storage auth token
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — Family_Robot_pi/audio/stt_engine.py:127
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph quality Integrity conf 1.00 Network/subprocess call without timeout or try/except — Family_Robot_pi/audio/tts_engine.py:142
`subprocess.run(...)` here lacks both a `timeout=` arg and an enclosing try/except. This is exactly the class of bug that took down our git-clone earlier (HTTP/2 stream cancel surfaced as a fatal). Add a `timeout=` and wrap in try/except, or use a wrapper that retries.
runtime safetyRobustness
medium System graph cicd CI/CD security conf 1.00 No CI/CD pipelines detected
No GitHub Actions, GitLab CI, or CircleCI configs found. Without CI you can't gate deploys on tests/lints.
CI/CD securityCoverage
medium System graph quality Tests conf 1.00 Very low test-to-source ratio
3 test file(s) for 67 source file(s) (ratio 0.04). Consider adding integration or unit tests for critical paths.
Coverage
low System graph quality Integrity conf 1.00 5 env vars used in code but missing from .env.example
Drift between code and config docs. The first few: `DEEPSEEK_API_KEY`, `JAVA_API_URL`, `VITE_BACKEND_HTTP_URL`, `VITE_JAVA_API_URL`, `VITE_PI_HTTP_URL`. Add them (with a placeholder/comment) to .env.example so onboarding doesn't break.
config drift
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 82 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph quality Integrity conf 1.00 4 occurrences Near-duplicate function bodies in 2 places
Functions with the same first-5-line body hash: Family_Robot_pi/interaction/webrtc_call.py:stop, Family_Robot_pi/interaction/webrtc_call.py:stop This is *the* AI-coder failure mode (4× more duplication in vibe-coded repos — see https://jw.hn/ai-code-hygiene). Consolidate or document why they're se…
4 occurrences
repo-level (4 hits)
duplicatesduplication
low System graph software Dead code conf 1.00 Possibly dead Python function: audio_callback
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
Family_Robot_pi/senses/wake_word_detector.py:175
low System graph software Dead code conf 1.00 Possibly dead Python function: callback
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
Family_Robot_pi/audio/audio_manager.py:153
low System graph software Dead code conf 1.00 Possibly dead Python function: chat_text
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
Family_Robot_pi/brain/web_ai_client.py:183
low System graph software Dead code conf 1.00 Possibly dead Python function: is_active
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
Family_Robot_pi/brain/session_manager.py:61
low System graph software Dead code conf 1.00 Possibly dead Python function: voice_runner
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
Family_Robot_pi/main.py:149
low System graph quality Provenance conf 1.00 Shallow git history limits provenance confidence
The repository is a shallow clone. Origin/evolution analysis cannot distinguish fresh generation, imported legacy code, or long-lived human code with high confidence.
Git historyGenerated repo pattern
low System graph api Wiring conf 1.00 Unused endpoint: GET /
`Family_Robot_pi/backend/app.py` declares `GET /` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /api/photos
`Family_Robot_pi/backend/app.py` declares `GET /api/photos` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /video/frame
`Family_Robot_pi/backend/app.py` declares `GET /video/frame` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: GET /video/stream
`Family_Robot_pi/backend/app.py` declares `GET /video/stream` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /fall
`Family_Robot_pi/backend/emergency/handler.py` declares `POST /fall` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consumes it.
Unused endpoint
low System graph api Wiring conf 1.00 Unused endpoint: POST /voice-reminder
`Family_Robot_pi/backend/internal/voice_reminder.py` declares `POST /voice-reminder` but no frontend code we scanned calls it. This is fine if the endpoint serves external clients (mobile app, third-party, server-side webhooks). Otherwise it's dead code — consider removing or documenting who consum…
Unused endpoint
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/bdaacedc-5442-442f-a0ec-f733f15c16a1/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/bdaacedc-5442-442f-a0ec-f733f15c16a1/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.