Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

comphone/comphone-superapp

https://github.com/comphone/comphone-superapp · scanned 2026-06-17 01:50 UTC (1 month, 1 week ago)

404 raw signals (0 security + 404 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 1 week ago · v2 · last Δ -20.8 (diff) · 387 actionable findings from 1 signal source. 17 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

77.8% cov · 387 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 4 Medium 157 Low 195 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 387 Crowd 0 Layer: Software 5 Frontend 168 Network 9 Security 135 Cicd 3 Quality 67

Exclude dismissed / FP Exclude test files

All 2586 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`runGasDiagnostic`	software	healthy	`workers/line-webhook/src/index.js:runGasDiagnostic`
`prepareForwardPayload`	software	healthy	`workers/line-webhook/src/index.js:prepareForwardPayload`
`isExplicitLineCommand`	software	healthy	`workers/line-webhook/src/index.js:isExplicitLineCommand`
`handlePrivateGreeting`	software	healthy	`workers/line-webhook/src/index.js:handlePrivateGreeting`
`forwardToGAS`	software	healthy	`workers/line-webhook/src/index.js:forwardToGAS`
`json`	software	healthy	`workers/line-webhook/src/index.js:json`
`load_html`	software	healthy	`Comphone AI Move New/validate_v1610.py:16`
`check`	software	healthy	`Comphone AI Move New/validate_v1610.py:22`
`check`	software	healthy	`Comphone AI Move New/validate_final_handover.py:19`
`check`	software	healthy	`Comphone AI Move New/validate_runtime_guard.py:15`
`classify`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:classify`
`normalizeArray`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:normalizeArray`
`hasObject`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:hasObject`
`sanitizePayload`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:sanitizePayload`
`request`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:request`
`okBase`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:okBase`
`runStep`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:runStep`
`run`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js:run`
`BASE_URL`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js:BASE_…`
`read`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js:read`
`extract`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js:extra…`
`fetchText`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js:fetch…`
`main`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js:main`
`check`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js:check`
`read`	software	healthy	`scripts/sprint185_line_group_image_pilot.js:read`
`redactLiveStatus`	software	healthy	`scripts/sprint185_line_group_image_pilot.js:redactLiveStatus`
`request`	software	healthy	`scripts/sprint185_line_group_image_pilot.js:request`
`maybeLogin`	software	healthy	`scripts/sprint185_line_group_image_pilot.js:maybeLogin`
`main`	software	healthy	`scripts/sprint185_line_group_image_pilot.js:main`
`read`	software	healthy	`scripts/sprint146_ai_vision_pilot_workflow.js:read`
`has`	software	healthy	`scripts/sprint146_ai_vision_pilot_workflow.js:has`
`request`	software	healthy	`scripts/sprint146_ai_vision_pilot_workflow.js:request`
`main`	software	healthy	`scripts/sprint146_ai_vision_pilot_workflow.js:main`
`read`	software	healthy	`scripts/sprint148_ops_permission_cleanup.js:read`
`has`	software	healthy	`scripts/sprint148_ops_permission_cleanup.js:has`
`request`	software	healthy	`scripts/sprint148_ops_permission_cleanup.js:request`
`secretLeakChecks`	software	healthy	`scripts/sprint148_ops_permission_cleanup.js:secretLeakChecks`
`main`	software	healthy	`scripts/sprint148_ops_permission_cleanup.js:main`
`readJson`	software	healthy	`scripts/sprint174_strict_protected_browser_runbook.js:readJ…`
`run`	software	healthy	`scripts/sprint174_strict_protected_browser_runbook.js:run`
`main`	software	healthy	`scripts/sprint174_strict_protected_browser_runbook.js:main`
`read`	software	healthy	`scripts/pwa_ui_write_contract.js:read`
`has`	software	healthy	`scripts/pwa_ui_write_contract.js:has`
`main`	software	healthy	`scripts/pwa_ui_write_contract.js:main`
`read`	software	healthy	`scripts/sprint101_write_lifecycle_audit.js:read`
`readJsonIfExists`	software	healthy	`scripts/sprint101_write_lifecycle_audit.js:readJsonIfExists`
`has`	software	healthy	`scripts/sprint101_write_lifecycle_audit.js:has`
`main`	software	healthy	`scripts/sprint101_write_lifecycle_audit.js:main`
`check`	software	healthy	`scripts/sprint101_write_lifecycle_audit.js:check`
`failedWrites`	software	healthy	`scripts/sprint101_write_lifecycle_audit.js:failedWrites`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`RECOVERY_AUDIT_20260513.md`	software	healthy	`RECOVERY_AUDIT_20260513.md`
`ReceiptTemplate.html`	software	healthy	`ReceiptTemplate.html`
`JS_Part1.html`	software	healthy	`JS_Part1.html`
`dashboard_preview.html`	software	healthy	`dashboard_preview.html`
`AUDIT_REPORT.md`	software	healthy	`AUDIT_REPORT.md`
`COMPLEXITY_LEVERAGE_ANALYSIS.md`	software	healthy	`COMPLEXITY_LEVERAGE_ANALYSIS.md`
`INSTALL_PHASE2_SYSTEMS.md`	software	healthy	`INSTALL_PHASE2_SYSTEMS.md`
`PhotoGallery.html`	software	healthy	`PhotoGallery.html`
`config.json`	software	healthy	`config.json`
`COWORK_SYSTEM_HANDOFF.md`	software	healthy	`COWORK_SYSTEM_HANDOFF.md`
`SETUP_LOCAL_SYNC.md`	software	healthy	`SETUP_LOCAL_SYNC.md`
`MEMORY.md`	software	healthy	`MEMORY.md`
`PHASE_20_1_APPROVAL_HARDENING.md`	software	healthy	`PHASE_20_1_APPROVAL_HARDENING.md`
`README.md`	software	healthy	`README.md`
`JobQRView.html`	software	healthy	`JobQRView.html`
`JS_Part2.html`	software	healthy	`JS_Part2.html`
`INSTALL_PHASE1_SYSTEMS.md`	software	healthy	`INSTALL_PHASE1_SYSTEMS.md`
`JS_Dashboard.html`	software	healthy	`JS_Dashboard.html`
`coordination-saon.md`	software	healthy	`coordination-saon.md`
`BLUEPRINT.md`	software	healthy	`BLUEPRINT.md`
`Index.html`	software	healthy	`Index.html`
`SPRINT_74_CORE_AUDIT.md`	software	healthy	`SPRINT_74_CORE_AUDIT.md`
`FREEZE_POLICY.md`	software	healthy	`FREEZE_POLICY.md`
`deploy_all.sh`	software	healthy	`deploy_all.sh`
`appsscript.json`	software	healthy	`appsscript.json`
`RUNTIME_FAILURE_MODE_REPORT.md`	software	healthy	`RUNTIME_FAILURE_MODE_REPORT.md`
`CLASP_PUSH_GUIDE.md`	software	healthy	`CLASP_PUSH_GUIDE.md`
`coordination-comphone.md`	software	healthy	`coordination-comphone.md`
`FAILURE_PATTERNS.json`	software	healthy	`memory/FAILURE_PATTERNS.json`
`session.md`	software	healthy	`memory/session.md`
`GUARD_EVOLUTION.json`	software	healthy	`memory/GUARD_EVOLUTION.json`
`README.md`	software	healthy	`workers/line-webhook/README.md`
`package.json`	software	healthy	`workers/line-webhook/package.json`
`wrangler.toml`	software	healthy	`workers/line-webhook/wrangler.toml`
`index.js`	software	healthy	`workers/line-webhook/src/index.js`
`validate_v1610.py`	software	healthy	`Comphone AI Move New/validate_v1610.py`
`🧠 COMPHONE SUPER APP AI — Master Handover Document.md`	software	healthy	`Comphone AI Move New/🧠 COMPHONE SUPER APP AI — Master Hando…`
`validate_final_handover.py`	software	healthy	`Comphone AI Move New/validate_final_handover.py`
`SYSTEM_MANIFEST.json`	software	healthy	`Comphone AI Move New/SYSTEM_MANIFEST.json`
`HANDOVER_REPORT.md`	software	healthy	`Comphone AI Move New/HANDOVER_REPORT.md`
`validate_runtime_guard.py`	software	healthy	`Comphone AI Move New/validate_runtime_guard.py`
`🚀 COMPHONE SUPER APP AI — Agent Boot Sequence.md`	software	healthy	`Comphone AI Move New/🚀 COMPHONE SUPER APP AI — Agent Boot S…`
`📦 COMPHONE SUPER APP AI — Final Handover Report.md`	software	healthy	`Comphone AI Move New/📦 COMPHONE SUPER APP AI — Final Handov…`
`appsscript.json`	software	healthy	`clasp-batch1/appsscript.json`
`sprint85_live_mobile_menu_smoke.js`	software	healthy	`scripts/sprint85_live_mobile_menu_smoke.js`
`guard-self-test.sh`	software	healthy	`scripts/guard-self-test.sh`
`sprint159_post_deploy_publish_confirmation.js`	software	healthy	`scripts/sprint159_post_deploy_publish_confirmation.js`
`sprint185_line_group_image_pilot.js`	software	healthy	`scripts/sprint185_line_group_image_pilot.js`
`sprint146_ai_vision_pilot_workflow.js`	software	healthy	`scripts/sprint146_ai_vision_pilot_workflow.js`
`sprint148_ops_permission_cleanup.js`	software	healthy	`scripts/sprint148_ops_permission_cleanup.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`memory`	software	healthy	`memory`
`workers`	software	healthy	`workers`
`line-webhook`	software	healthy	`workers/line-webhook`
`src`	software	healthy	`workers/line-webhook/src`
`Comphone AI Move New`	software	healthy	`Comphone AI Move New`
`clasp-batch1`	software	healthy	`clasp-batch1`
`scripts`	software	healthy	`scripts`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`
`pwa`	software	healthy	`pwa`
`js`	software	healthy	`pwa/js`
`_backup_phase3`	software	healthy	`pwa/_backup_phase3`
`docs`	software	healthy	`docs`
`memory`	software	healthy	`docs/memory`
`spec`	software	healthy	`docs/spec`
`reviews`	software	healthy	`docs/reviews`
`clasp-accumulated`	software	healthy	`clasp-accumulated`
`clasp-ready`	software	healthy	`clasp-ready`
`test_reports`	software	healthy	`test_reports`
`Skill-2026`	software	healthy	`Skill-2026`
`delivery`	software	healthy	`delivery`
`pwa`	software	healthy	`delivery/pwa`
`docs`	software	healthy	`delivery/docs`
`backups`	software	healthy	`backups`
`session`	software	healthy	`backups/session`
`ARCHIVED_Shop_vnext`	software	healthy	`ARCHIVED_Shop_vnext`
`src`	software	healthy	`ARCHIVED_Shop_vnext/src`

Label	Layer	Status	Path
`port:800`	network	healthy	`scripts/guard-stewardship.sh`
`port:25`	network	healthy	`scripts/guard-stewardship.sh`
`port:500`	network	healthy	`scripts/guard-stewardship.sh`
`port:15`	network	healthy	`scripts/guard-stewardship.sh`
`port:1600`	network	healthy	`scripts/guard-stewardship.sh`
`port:50`	network	healthy	`scripts/guard-stewardship.sh`
`port:1200`	network	healthy	`scripts/guard-stewardship.sh`
`port:1000`	network	healthy	`scripts/guard-stewardship.sh`
`port:40`	network	healthy	`scripts/guard-stewardship.sh`
`port:600`	network	healthy	`scripts/guard-stewardship.sh`
`port:20`	network	healthy	`scripts/guard-stewardship.sh`
`port:400`	network	healthy	`scripts/guard-stewardship.sh`
`port:8765`	network	healthy	`scripts/browser-smoke-test.py`
`port:23`	network	healthy	`.github/workflows/session-backup.yml`
`port:16`	network	healthy	`.github/workflows/session-backup.yml`

Label	Layer	Status	Path
`validate`	cicd	healthy	`.github/workflows/deploy-gas.yml`
`deploy-gas`	cicd	healthy	`.github/workflows/deploy-gas.yml`
`notify`	cicd	healthy	`.github/workflows/deploy-gas.yml`
`validate`	cicd	healthy	`.github/workflows/auto-deploy.yml`
`deploy-pwa`	cicd	healthy	`.github/workflows/auto-deploy.yml`
`backup-session`	cicd	healthy	`.github/workflows/auto-deploy.yml`
`auto-tag`	cicd	healthy	`.github/workflows/auto-deploy.yml`
`backup`	cicd	healthy	`.github/workflows/drive-sync.yml`
`backup`	cicd	healthy	`.github/workflows/session-backup.yml`
`deploy`	cicd	healthy	`.github/workflows/deploy-line-worker.yml`

Label	Layer	Status	Path
`C`	software	healthy	`scripts/drive_sync.py:29`
`CallbackHandler`	software	healthy	`scripts/setup_gdrive_auth.py:113`
`C`	software	healthy	`scripts/auto_push.py:34`
`FileWatcher`	software	healthy	`scripts/auto_push.py:116`
`C`	software	healthy	`scripts/sync_all.py:28`

Label	Layer	Status	Path
`auth::scripts/drive_sync.py`	security	healthy	`scripts/drive_sync.py`
`auth::scripts/setup_gdrive_auth.py`	security	healthy	`scripts/setup_gdrive_auth.py`
`auth::scripts/sync_all.py`	security	healthy	`scripts/sync_all.py`
`auth::scripts/drive_oauth_upload.py`	security	healthy	`scripts/drive_oauth_upload.py`
`auth::pwa/pentest_frontend.js`	security	healthy	`pwa/pentest_frontend.js`

Label	Layer	Status	Path
`gha::deploy-gas`	cicd	healthy	`.github/workflows/deploy-gas.yml`
`gha::auto-deploy`	cicd	healthy	`.github/workflows/auto-deploy.yml`
`gha::drive-sync`	cicd	healthy	`.github/workflows/drive-sync.yml`
`gha::session-backup`	cicd	healthy	`.github/workflows/session-backup.yml`
`gha::deploy-line-worker`	cicd	healthy	`.github/workflows/deploy-line-worker.yml`

Label	Layer	Status	Path
`CLASPRC_JSON`	cicd	healthy	`—`
`GOOGLE_SERVICE_ACCOUNT_JSON`	cicd	healthy	`—`
`GOOGLE_SERVICE_ACCOUNT_KEY`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`CLOUDFLARE_API_TOKEN`	cicd	healthy	`—`

Label	Layer	Status	Path
`comphone__comphone-superapp`	software	healthy	`/data/fable5_failed_archive/comphone__comphone-superapp`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`pwa/runtime_self_test.js`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`pwa/smart_quotation.js`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/d0164833-4ccd-4366-913c-72945c2d0555/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/d0164833-4ccd-4366-913c-72945c2d0555/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

comphone/comphone-superapp

Complete repo analysis

function 50+

file 50+

directory 27

port 15

job 10

class 5

auth 5

pipeline 5

env_var 5

repo 1

service 1

gpu 1