ucsandman/DashClaw

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

153 of your 364 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 3.48s · analysis 46.21s · 17.6 MB · GitHub API rate-limit (preflight)

https://github.com/ucsandman/DashClaw · scanned 2026-06-05 16:58 UTC (5 days ago) · 10 languages

1158 raw signals (336 security + 822 graph) 29th percentile · Javascript · large (100-500K LoC) System graph score 77 (lower by 12)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days ago · v2 · 521 actionable findings from 2 signal sources. 226 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 369 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	85.0	0.15	12.75
`security_score`	0.0	0.25	0.00
`testing_score`	90.0	0.20	18.00
`documentation_score`	96.8	0.15	14.52
`practices_score`	100.0	0.15	15.00
`code_quality`	46.0	0.10	4.60
Overall		1.00	64.9

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 6 High 60 Medium 76 Low 155 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 152 System graph 369 Crowd 0 Layer: Quality 256 Security 47 Software 99 Cicd 11 Api 1 Frontend 105 Hardware 2

Exclude dismissed / FP Exclude test files

All 7847 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`getLocalAdminSession`	software	healthy	`middleware.js:getLocalAdminSession`
`getDashclawMode`	software	healthy	`middleware.js:getDashclawMode`
`isDemoCookieSet`	software	healthy	`middleware.js:isDemoCookieSet`
`withCors`	software	healthy	`middleware.js:withCors`
`demoJson`	software	healthy	`middleware.js:demoJson`
`securedJson`	software	healthy	`middleware.js:securedJson`
`parseUrl`	software	healthy	`middleware.js:parseUrl`
`getPathSegments`	software	healthy	`middleware.js:getPathSegments`
`RATE_LIMIT_DISABLED`	software	healthy	`middleware.js:RATE_LIMIT_DISABLED`
`RATE_LIMIT_WINDOW`	software	healthy	`middleware.js:RATE_LIMIT_WINDOW`
`RATE_LIMIT_MAX`	software	healthy	`middleware.js:RATE_LIMIT_MAX`
`checkRateLimitLocal`	software	healthy	`middleware.js:checkRateLimitLocal`
`checkRateLimitDistributed`	software	healthy	`middleware.js:checkRateLimitDistributed`
`call`	software	healthy	`middleware.js:call`
`checkRateLimit`	software	healthy	`middleware.js:checkRateLimit`
`timingSafeEqual`	software	healthy	`middleware.js:timingSafeEqual`
`hashApiKey`	software	healthy	`middleware.js:hashApiKey`
`verifyOrgExists`	software	healthy	`middleware.js:verifyOrgExists`
`driver`	software	healthy	`middleware.js:driver`
`pruneApiKeyCache`	software	healthy	`middleware.js:pruneApiKeyCache`
`resolveApiKey`	software	healthy	`middleware.js:resolveApiKey`
`pruneOAuthTokenCache`	software	healthy	`middleware.js:pruneOAuthTokenCache`
`resolveOAuthToken`	software	healthy	`middleware.js:resolveOAuthToken`
`mcpAuthChallenge`	software	healthy	`middleware.js:mcpAuthChallenge`
`enforceHostedTrial`	software	healthy	`middleware.js:enforceHostedTrial`
`getCorsHeaders`	software	healthy	`middleware.js:getCorsHeaders`
`middleware`	software	healthy	`middleware.js:middleware`
`ip`	software	healthy	`middleware.js:ip`
`isSimulation`	software	healthy	`middleware.js:isSimulation`
`strippedApiRequestHeaders`	software	healthy	`middleware.js:strippedApiRequestHeaders`
`instead`	software	healthy	`next.config.js:instead`
`makeRequest`	software	healthy	`__tests__/helpers.js:makeRequest`
`createSqlMock`	software	healthy	`__tests__/helpers.js:createSqlMock`
`sql`	software	healthy	`__tests__/helpers.js:sql`
`proxiedSql`	software	healthy	`__tests__/helpers.js:proxiedSql`
`jsonRequest`	software	healthy	`__tests__/integration/handoffs.route.test.js:jsonRequest`
`that`	software	healthy	`__tests__/integration/guard-pipeline.test.js:that`
`with`	software	healthy	`__tests__/integration/guard-pipeline.test.js:with`
`createMockSql`	software	healthy	`__tests__/integration/guard-pipeline.test.js:createMockSql`
`sql`	software	healthy	`__tests__/integration/guard-pipeline.test.js:sql`
`proxied`	software	healthy	`__tests__/integration/guard-pipeline.test.js:proxied`
`makePolicy`	software	healthy	`__tests__/integration/guard-pipeline.test.js:makePolicy`
`fixtureRequest`	software	healthy	`__tests__/integration/code-sessions/ingest-live.route.test.…`
`jsonlRecord`	software	healthy	`__tests__/integration/code-sessions/ingest-jsonl.route.test…`
`fixtureRequest`	software	healthy	`__tests__/integration/code-sessions/ingest-jsonl.route.test…`
`gzipRequest`	software	healthy	`__tests__/integration/code-sessions/ingest-jsonl.route.test…`
`brRequest`	software	healthy	`__tests__/integration/code-sessions/ingest-jsonl.route.test…`
`req`	software	healthy	`__tests__/unit/cron-outcome-sweep.route.test.js:req`
`createSqlMock`	software	healthy	`__tests__/unit/repositories.contract.test.js:createSqlMock`
`sql`	software	healthy	`__tests__/unit/repositories.contract.test.js:sql`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`bar-mega.json`	software	healthy	`bar-mega.json`
`SYNC_AUDIT.md`	software	healthy	`SYNC_AUDIT.md`
`AGENTLENS_INTEGRATION_GOAL.md`	software	healthy	`AGENTLENS_INTEGRATION_GOAL.md`
`middleware.js`	software	healthy	`middleware.js`
`OVERNIGHT-CLEANUP-REPORT.md`	software	healthy	`OVERNIGHT-CLEANUP-REPORT.md`
`GEMINI.md`	software	healthy	`GEMINI.md`
`SYNC_AUDIT_IMPLEMENTATION.md`	software	healthy	`SYNC_AUDIT_IMPLEMENTATION.md`
`.mcp.json`	software	healthy	`.mcp.json`
`playwright.config.js`	software	warning	`playwright.config.js`
`vercel.json`	software	healthy	`vercel.json`
`QUICK-START.md`	software	healthy	`QUICK-START.md`
`README.md`	software	healthy	`README.md`
`AUDIT_FINDINGS.md`	software	healthy	`AUDIT_FINDINGS.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`tailwind.config.js`	software	warning	`tailwind.config.js`
`package.json`	software	healthy	`package.json`
`vitest.config.js`	software	warning	`vitest.config.js`
`SPEC-mega.md`	software	healthy	`SPEC-mega.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`next.config.js`	software	healthy	`next.config.js`
`PROJECT_DETAILS.md`	software	healthy	`PROJECT_DETAILS.md`
`Dockerfile`	software	healthy	`Dockerfile`
`.impeccable.md`	software	healthy	`.impeccable.md`
`package-lock.json`	software	healthy	`package-lock.json`
`DEMO.md`	software	healthy	`DEMO.md`
`DURABLE_FINALITY_RELEASE_READINESS_REPORT.md`	software	healthy	`DURABLE_FINALITY_RELEASE_READINESS_REPORT.md`
`.env.example`	software	healthy	`.env.example`
`install-mac.sh`	software	healthy	`install-mac.sh`
`.eslintrc.json`	software	healthy	`.eslintrc.json`
`DASHCLAW_DURABLE_FINALITY_RELEASE_READINESS_GOAL.md`	software	healthy	`DASHCLAW_DURABLE_FINALITY_RELEASE_READINESS_GOAL.md`
`postcss.config.js`	software	warning	`postcss.config.js`
`AGENTS.md`	software	healthy	`AGENTS.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`organism.json`	software	healthy	`organism.json`
`drizzle.config.js`	software	warning	`drizzle.config.js`
`helpers.js`	software	healthy	`__tests__/helpers.js`
`schema-0007-apply.test.js`	software	warning	`__tests__/integration/schema-0007-apply.test.js`
`handoffs.route.test.js`	software	healthy	`__tests__/integration/handoffs.route.test.js`
`secrets.route.test.js`	software	warning	`__tests__/integration/secrets.route.test.js`
`skills-scan.route.test.js`	software	warning	`__tests__/integration/skills-scan.route.test.js`
`guard-pipeline.test.js`	software	healthy	`__tests__/integration/guard-pipeline.test.js`
`handoff-e2e.test.js`	software	warning	`__tests__/integration/handoff-e2e.test.js`
`end-to-end.test.js`	software	warning	`__tests__/integration/hosted/end-to-end.test.js`
`ingest-live.route.test.js`	software	healthy	`__tests__/integration/code-sessions/ingest-live.route.test.…`
`ingest-jsonl.route.test.js`	software	healthy	`__tests__/integration/code-sessions/ingest-jsonl.route.test…`
`learning-analytics-velocity.route.test.js`	software	warning	`__tests__/unit/learning-analytics-velocity.route.test.js`
`predictive-risk.test.js`	software	warning	`__tests__/unit/predictive-risk.test.js`
`cron-outcome-sweep.route.test.js`	software	healthy	`__tests__/unit/cron-outcome-sweep.route.test.js`
`repositories.contract.test.js`	software	healthy	`__tests__/unit/repositories.contract.test.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`__tests__`	software	healthy	`__tests__`
`integration`	software	healthy	`__tests__/integration`
`hosted`	software	healthy	`__tests__/integration/hosted`
`code-sessions`	software	healthy	`__tests__/integration/code-sessions`
`unit`	software	healthy	`__tests__/unit`
`hosted`	software	healthy	`__tests__/unit/hosted`
`codex`	software	healthy	`__tests__/unit/codex`
`claude-code`	software	healthy	`__tests__/unit/claude-code`
`plugins`	software	healthy	`__tests__/unit/plugins`
`code-sessions`	software	healthy	`__tests__/unit/code-sessions`
`brand`	software	healthy	`brand`
`tests`	software	healthy	`tests`
`smoke`	software	healthy	`tests/smoke`
`docs`	software	healthy	`docs`
`superpowers`	software	healthy	`docs/superpowers`
`plans`	software	healthy	`docs/superpowers/plans`
`specs`	software	healthy	`docs/superpowers/specs`
`lessons`	software	healthy	`docs/lessons`
`archive`	software	healthy	`docs/archive`
`testing`	software	healthy	`docs/testing`
`releases`	software	healthy	`docs/releases`
`architecture`	software	healthy	`docs/architecture`
`ops`	software	healthy	`docs/ops`
`internal`	software	healthy	`docs/internal`
`routines`	software	healthy	`docs/internal/routines`
`research`	software	healthy	`docs/research`
`smoke-tests`	software	healthy	`docs/smoke-tests`
`handoffs`	software	healthy	`docs/handoffs`
`operator`	software	healthy	`docs/operator`
`repositories`	software	healthy	`docs/repositories`
`prompts`	software	healthy	`docs/prompts`
`contracts`	software	healthy	`docs/contracts`
`rfcs`	software	healthy	`docs/rfcs`
`decisions`	software	healthy	`docs/decisions`
`planning`	software	healthy	`docs/planning`
`seeds`	software	healthy	`docs/planning/seeds`
`openapi`	software	healthy	`docs/openapi`
`scripts`	software	healthy	`scripts`
`_archive`	software	healthy	`scripts/_archive`
`cli`	software	healthy	`cli`
`test`	software	healthy	`cli/test`
`code`	software	healthy	`cli/test/code`
`codex`	software	healthy	`cli/test/codex`
`lib`	software	healthy	`cli/lib`
`code`	software	healthy	`cli/lib/code`
`codex`	software	healthy	`cli/lib/codex`
`schema`	software	healthy	`schema`
`sdk-python`	software	healthy	`sdk-python`
`tests`	software	healthy	`sdk-python/tests`
`dashclaw`	software	healthy	`sdk-python/dashclaw`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`RecordingDashClaw`	software	healthy	`scripts/sdk_python_contract_capture.py:12`
`MockLLMResult`	software	healthy	`scripts/test_langchain_adapter.py:13`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_python_knowledge_runtime.py:11`
`PythonKnowledgeRuntimeTests`	software	healthy	`sdk-python/tests/test_python_knowledge_runtime.py:31`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_ws5_m2_parity.py:6`
`WS5M2ParityTests`	software	healthy	`sdk-python/tests/test_ws5_m2_parity.py:21`
`RecordingClient`	software	healthy	`sdk-python/tests/test_ws5_m6_langchain_duration.py:14`
`LangChainDurationTelemetryTests`	software	healthy	`sdk-python/tests/test_ws5_m6_langchain_duration.py:33`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_ws5_m3_parity.py:6`
`WS5M3ParityTests`	software	healthy	`sdk-python/tests/test_ws5_m3_parity.py:22`
`TestActionContext`	software	healthy	`sdk-python/tests/test_action_context.py:8`
`SlowSSEApprovalDashClaw`	software	healthy	`sdk-python/tests/test_python_approval_runtime.py:12`
`PythonApprovalRuntimeTests`	software	healthy	`sdk-python/tests/test_python_approval_runtime.py:30`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_ws5_m5_adaptive_loop.py:6`
`AdaptiveLoopPythonTests`	software	healthy	`sdk-python/tests/test_ws5_m5_adaptive_loop.py:33`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_ws5_m4_integration.py:15`
`WS5M4IntegrationHarnessTests`	software	healthy	`sdk-python/tests/test_ws5_m4_integration.py:52`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_python_model_strategies_runtime.py:11`
`PythonModelStrategiesRuntimeTests`	software	healthy	`sdk-python/tests/test_python_model_strategies_runtime.py:31`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_python_workflows_runtime.py:11`
`PythonWorkflowRuntimeTests`	software	healthy	`sdk-python/tests/test_python_workflows_runtime.py:31`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:20`
`TestConstructor`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:47`
`TestGuard`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:81`
`TestCreateAction`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:104`
`TestUpdateOutcome`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:146`
`TestReportActionOutcome`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:186`
`TestGetActionOutcome`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:214`
`TestReportActionConvenienceWrappers`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:223`
`TestDeriveIdempotencyKey`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:249`
`TestRecordAssumption`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:278`
`TestHeartbeat`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:294`
`TestReportConnections`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:328`
`TestRegisterOpenLoop`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:351`
`TestResolveOpenLoop`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:374`
`TestGetSignals`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:396`
`TestCreateWebhook`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:411`
`TestMapCompliance`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:435`
`TestGetProofReport`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:457`
`TestGetActivityLogs`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:477`
`TestGuardBlockedError`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:507`
`TestApprovalDeniedError`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:535`
`TestPhase2AuthToken`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:553`
`TestPhase1AgentNameAutoInclude`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:567`
`TestPhase2BearerHeader`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:594`
`_FakeResponse`	software	healthy	`sdk-python/tests/test_sdk_v2_surface.py:603`
`RecordingDashClaw`	software	healthy	`sdk-python/tests/test_python_capabilities_runtime.py:11`
`PythonCapabilityRuntimeTests`	software	healthy	`sdk-python/tests/test_python_capabilities_runtime.py:31`
`DashClawError`	software	healthy	`sdk-python/dashclaw/client.py:11`
`GuardBlockedError`	software	healthy	`sdk-python/dashclaw/client.py:18`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GovernancePanel`	frontend	healthy	`app/settings/components/GovernancePanel.jsx`
`BlogPostPage`	frontend	healthy	`app/blog/claude-code-beachhead/page.jsx`
`BlogPostPage`	frontend	healthy	`app/blog/codex-parity/page.jsx`
`BlogPostPage`	frontend	healthy	`app/blog/hermes-plugin/page.jsx`
`ConnectPage`	frontend	healthy	`app/connect/page.jsx`
`PolicyCoachPage`	frontend	healthy	`app/policy-coach/page.jsx`
`AnalyticsPage`	frontend	healthy	`app/analytics/page.jsx`
`CostTrendChart`	frontend	healthy	`app/analytics/components/CostTrendChart.jsx`
`ActionVolumeChart`	frontend	healthy	`app/analytics/components/ActionVolumeChart.jsx`
`BreakdownCard`	frontend	healthy	`app/analytics/components/BreakdownCard.jsx`
`TokenUsage`	frontend	healthy	`app/analytics/components/TokenUsage.jsx`
`HeroStats`	frontend	healthy	`app/analytics/components/HeroStats.jsx`
`GlobalActivityFeed`	frontend	healthy	`app/activity/page.jsx`
`SessionDetailPage`	frontend	healthy	`app/sessions/[sessionId]/page.jsx`
`OrgNameEditor`	frontend	healthy	`app/team/components/OrgNameEditor.jsx`
`VideoHero`	frontend	healthy	`app/components/VideoHero.jsx`
`VerifyReceiptPanel`	frontend	healthy	`app/components/VerifyReceiptPanel.jsx`
`SkillScanner`	frontend	healthy	`app/components/SkillScanner.jsx`
`MissionControlCapabilityHealthCard`	frontend	healthy	`app/components/MissionControlCapabilityHealthCard.jsx`
`DoctorPanel`	frontend	healthy	`app/components/DoctorPanel.jsx`
`ArtifactsTab`	frontend	healthy	`app/components/ArtifactsTab.jsx`
`CodeSessionAlertsPanel`	frontend	healthy	`app/components/CodeSessionAlertsPanel.jsx`
`SecurityScanners`	frontend	healthy	`app/components/SecurityScanners.jsx`
`CompliancePage`	frontend	healthy	`app/compliance/page.jsx`
`ComplianceExportsPage`	frontend	healthy	`app/compliance/exports/page.jsx`
`ScoringPage`	frontend	healthy	`app/scoring/page.jsx`
`AgentRegistryPage`	frontend	healthy	`app/agents/registry/page.jsx`
`EditPanel`	frontend	healthy	`app/agents/registry/components/EditPanel.jsx`
`CapabilitiesCard`	frontend	healthy	`app/agents/registry/components/CapabilitiesCard.jsx`
`InvokePanel`	frontend	healthy	`app/agents/registry/components/InvokePanel.jsx`
`HowItWorks`	frontend	healthy	`app/agents/registry/components/HowItWorks.jsx`
`RegistryEmptyState`	frontend	healthy	`app/agents/registry/components/RegistryEmptyState.jsx`
`AgentPoliciesSection`	frontend	healthy	`app/agents/[agentId]/components/AgentPoliciesSection.jsx`
`AgentSignals`	frontend	healthy	`app/agents/[agentId]/components/AgentSignals.jsx`
`AgentVitalsStrip`	frontend	healthy	`app/agents/[agentId]/components/AgentVitalsStrip.jsx`
`AgentReputation`	frontend	healthy	`app/agents/[agentId]/components/AgentReputation.jsx`
`AgentAssumptions`	frontend	healthy	`app/agents/[agentId]/components/AgentAssumptions.jsx`
`AgentConnectionsSection`	frontend	healthy	`app/agents/[agentId]/components/AgentConnectionsSection.jsx`
`AgentDecisionTable`	frontend	healthy	`app/agents/[agentId]/components/AgentDecisionTable.jsx`
`AgentTrustPosture`	frontend	healthy	`app/agents/[agentId]/components/AgentTrustPosture.jsx`
`ApprovalsPage`	frontend	healthy	`app/approvals/page.jsx`
`ThreadConversation`	frontend	healthy	`app/messages/_components/ThreadConversation.jsx`
`CapabilitiesPage`	frontend	healthy	`app/capabilities/page.jsx`
`CapabilityDetailPage`	frontend	healthy	`app/capabilities/[capabilityId]/page.jsx`
`CapabilityInvokePanel`	frontend	healthy	`app/capabilities/[capabilityId]/components/CapabilityInvoke…`
`CapabilityHistoryTable`	frontend	healthy	`app/capabilities/[capabilityId]/components/CapabilityHistor…`
`CapabilityFactsCard`	frontend	healthy	`app/capabilities/[capabilityId]/components/CapabilityFactsC…`
`CapabilityTestPanel`	frontend	healthy	`app/capabilities/[capabilityId]/components/CapabilityTestPa…`
`CapabilityAccessTab`	frontend	healthy	`app/capabilities/[capabilityId]/components/CapabilityAccess…`
`CapabilityGeneratedTestForm`	frontend	healthy	`app/capabilities/[capabilityId]/components/CapabilityGenera…`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`jwt_replay_log`	data	healthy	`drizzle/0010_jti_replay_protection.sql`
`oauth_clients`	data	healthy	`drizzle/0014_oauth_connector.sql`
`oauth_authorization_codes`	data	healthy	`drizzle/0014_oauth_connector.sql`
`oauth_access_tokens`	data	healthy	`drizzle/0014_oauth_connector.sql`
`agent_identities`	data	healthy	`drizzle/0002_agent_sessions_and_permission_level.sql`
`agent_pairings`	data	healthy	`drizzle/0002_agent_sessions_and_permission_level.sql`
`agent_sessions`	data	healthy	`drizzle/0002_agent_sessions_and_permission_level.sql`
`session_events`	data	healthy	`drizzle/0002_agent_sessions_and_permission_level.sql`
`registered_agents`	data	healthy	`drizzle/0019_agent_registry.sql`
`registered_agent_capabilities`	data	healthy	`drizzle/0019_agent_registry.sql`
`agent_invocations`	data	healthy	`drizzle/0019_agent_registry.sql`
`action_embeddings`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`action_records`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`activity_logs`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`agent_connections`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`agent_messages`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`agent_presence`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`agent_schedules`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`api_keys`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`assumptions`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`calendar_events`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`compliance_snapshots`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`contacts`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`content`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`context_entries`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`context_points`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`daily_totals`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`decisions`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`drift_alerts`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`drift_baselines`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`drift_snapshots`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`entities`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`eval_runs`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`eval_scores`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`executions`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`feedback`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`goals`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`guard_decisions`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`guard_policies`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`guardrails_test_runs`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`health_snapshots`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`ideas`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`interactions`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`learning_curves`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`learning_episodes`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`learning_recommendation_events`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`learning_recommendations`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`learning_velocity`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`message_threads`	data	healthy	`drizzle/0000_clammy_falcon.sql`
`milestones`	data	healthy	`drizzle/0000_clammy_falcon.sql`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`auth::app/lib/oauth/crypto.js`	security	healthy	`app/lib/oauth/crypto.js`
`auth::__tests__/unit/doctor-format.test.js`	security	healthy	`__tests__/unit/doctor-format.test.js`
`auth::docs/api-inventory.json`	security	healthy	`docs/api-inventory.json`
`auth::app/components/SessionWrapper.js`	security	healthy	`app/components/SessionWrapper.js`
`auth::__tests__/unit/oauth-repository.test.js`	security	healthy	`__tests__/unit/oauth-repository.test.js`
`auth::app/api/oauth/metadata/protected-resource/route.js`	security	healthy	`app/api/oauth/metadata/protected-resource/route.js`
`auth::app/invite/[token]/page.js`	security	healthy	`app/invite/[token]/page.js`
`auth::__tests__/unit/policies.page.test.jsx`	security	healthy	`__tests__/unit/policies.page.test.jsx`
`auth::app/lib/validateEnv.js`	security	healthy	`app/lib/validateEnv.js`
`auth::next.config.js`	security	healthy	`next.config.js`
`auth::__tests__/unit/mcp-client-auth.test.js`	security	healthy	`__tests__/unit/mcp-client-auth.test.js`
`auth::__tests__/unit/oauth-authorize.test.js`	security	healthy	`__tests__/unit/oauth-authorize.test.js`
`auth::sdk/dashclaw.js`	security	healthy	`sdk/dashclaw.js`
`auth::app/lib/repositories/connections.repository.js`	security	healthy	`app/lib/repositories/connections.repository.js`
`auth::app/lib/repositories/jti-replay.repository.js`	security	healthy	`app/lib/repositories/jti-replay.repository.js`
`auth::mcp-server/lib/routes-inventory.generated.json`	security	healthy	`mcp-server/lib/routes-inventory.generated.json`
`auth::app/team/page.js`	security	healthy	`app/team/page.js`
`auth::app/api/oauth/register/route.js`	security	healthy	`app/api/oauth/register/route.js`
`auth::app/api/oauth/metadata/authorization-server/route.js`	security	healthy	`app/api/oauth/metadata/authorization-server/route.js`
`auth::app/lib/claude-code/optimal-files/secret-scan.js`	security	healthy	`app/lib/claude-code/optimal-files/secret-scan.js`
`auth::mcp-server/lib/client.js`	security	healthy	`mcp-server/lib/client.js`
`auth::app/lib/doctor/generated/last-snapshot.json`	security	healthy	`app/lib/doctor/generated/last-snapshot.json`
`auth::__tests__/unit/bootstrap-first-user-admin.test.js`	security	healthy	`__tests__/unit/bootstrap-first-user-admin.test.js`
`auth::cli/lib/code/apply.js`	security	healthy	`cli/lib/code/apply.js`
`auth::__tests__/unit/oauth-metadata.test.js`	security	healthy	`__tests__/unit/oauth-metadata.test.js`
`auth::package.json`	security	healthy	`package.json`
`auth::__tests__/unit/middleware-auth.test.js`	security	healthy	`__tests__/unit/middleware-auth.test.js`
`auth::app/connect/page.jsx`	security	healthy	`app/connect/page.jsx`
`auth::__tests__/unit/capabilities.repository.test.js`	security	healthy	`__tests__/unit/capabilities.repository.test.js`
`auth::app/lib/auth.js`	security	healthy	`app/lib/auth.js`
`auth::app/components/UserMenu.js`	security	healthy	`app/components/UserMenu.js`
`auth::app/lib/act-binding.js`	security	healthy	`app/lib/act-binding.js`
`auth::app/lib/demoIntegrationsData.js`	security	healthy	`app/lib/demoIntegrationsData.js`
`auth::app/api/session/effective/route.js`	security	healthy	`app/api/session/effective/route.js`
`auth::hooks/dashclaw_agent_intel/behavior_recorder.py`	security	healthy	`hooks/dashclaw_agent_intel/behavior_recorder.py`
`auth::__tests__/unit/oauth-crypto.test.js`	security	healthy	`__tests__/unit/oauth-crypto.test.js`
`auth::app/lib/demo/fixtures/persona-agents.js`	security	healthy	`app/lib/demo/fixtures/persona-agents.js`
`auth::.env.example`	security	healthy	`.env.example`
`auth::__tests__/unit/security-scanner.test.js`	security	healthy	`__tests__/unit/security-scanner.test.js`
`auth::app/self-host/SetupTabs.js`	security	healthy	`app/self-host/SetupTabs.js`
`auth::app/agents/[agentId]/components/AgentConnectionsSecti…`	security	healthy	`app/agents/[agentId]/components/AgentConnectionsSection.jsx`
`auth::__tests__/unit/oauth-token.test.js`	security	healthy	`__tests__/unit/oauth-token.test.js`
`auth::scripts/security-scan.js`	security	healthy	`scripts/security-scan.js`
`auth::__tests__/unit/guard-jwks-verification.test.js`	security	healthy	`__tests__/unit/guard-jwks-verification.test.js`
`auth::__tests__/unit/capability-detail.page.test.jsx`	security	healthy	`__tests__/unit/capability-detail.page.test.jsx`
`auth::sdk-python/dashclaw/client.py`	security	healthy	`sdk-python/dashclaw/client.py`
`auth::app/hooks/useEffectiveRole.js`	security	healthy	`app/hooks/useEffectiveRole.js`
`auth::__tests__/unit/oauth-register.test.js`	security	healthy	`__tests__/unit/oauth-register.test.js`
`auth::app/lib/demo/fixtures/compliance-fixtures.js`	security	healthy	`app/lib/demo/fixtures/compliance-fixtures.js`
`auth::__tests__/unit/middleware-page-gating.test.js`	security	healthy	`__tests__/unit/middleware-page-gating.test.js`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`/`	frontend	healthy	`middleware.js`
`/api/capabilities`	frontend	healthy	`__tests__/unit/contracts.api-surface.test.js`
`/api/capabilities/health`	frontend	healthy	`__tests__/unit/contracts.api-surface.test.js`
`/api/knowledge/collections`	frontend	healthy	`__tests__/unit/contracts.api-surface.test.js`
`/demo`	frontend	healthy	`tests/smoke/pages.js`
`/connect`	frontend	healthy	`tests/smoke/pages.js`
`/self-host`	frontend	healthy	`tests/smoke/pages.js`
`/docs`	frontend	healthy	`tests/smoke/pages.js`
`/setup`	frontend	healthy	`tests/smoke/pages.js`
`/approve`	frontend	healthy	`tests/smoke/pages.js`
`/mission-control`	frontend	healthy	`tests/smoke/pages.js`
`/decisions`	frontend	healthy	`tests/smoke/pages.js`
`/approvals`	frontend	healthy	`tests/smoke/pages.js`
`/policies`	frontend	healthy	`tests/smoke/pages.js`
`/agents`	frontend	healthy	`tests/smoke/pages.js`
`/security`	frontend	healthy	`tests/smoke/pages.js`
`/analytics`	frontend	healthy	`tests/smoke/pages.js`
`/activity`	frontend	healthy	`tests/smoke/pages.js`
`/compliance`	frontend	healthy	`tests/smoke/pages.js`
`/compliance/exports`	frontend	healthy	`tests/smoke/pages.js`
`/api-keys`	frontend	healthy	`tests/smoke/pages.js`
`/integrations`	frontend	healthy	`tests/smoke/pages.js`
`/webhooks`	frontend	healthy	`tests/smoke/pages.js`
`/identities`	frontend	healthy	`tests/smoke/pages.js`
`/settings`	frontend	healthy	`tests/smoke/pages.js`
`/assumptions`	frontend	healthy	`tests/smoke/pages.js`
`/sessions`	frontend	healthy	`tests/smoke/pages.js`
`/drift`	frontend	healthy	`tests/smoke/pages.js`
`/learning`	frontend	healthy	`tests/smoke/pages.js`
`/prompts`	frontend	healthy	`tests/smoke/pages.js`
`/feedback`	frontend	healthy	`tests/smoke/pages.js`
`/workflows`	frontend	healthy	`tests/smoke/pages.js`
`/model-strategies`	frontend	healthy	`tests/smoke/pages.js`
`/knowledge`	frontend	healthy	`tests/smoke/pages.js`
`/capabilities`	frontend	healthy	`tests/smoke/pages.js`
`/prod/data`	frontend	healthy	`app/page.js`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`middleware.js`
`93.184.216.34`	network	healthy	`__tests__/unit/webhooks.approval.test.js`
`1.2.3.4`	network	healthy	`__tests__/unit/connect-complete-discord-alert.test.js`
`192.168.1.1`	network	healthy	`__tests__/unit/ssrf-validation.test.js`
`10.0.0.1`	network	healthy	`__tests__/unit/validate.test.js`
`172.16.0.1`	network	healthy	`__tests__/unit/validate.test.js`
`127.42.1.1`	network	healthy	`__tests__/unit/url-safety.test.js`
`172.31.255.255`	network	healthy	`__tests__/unit/url-safety.test.js`
`169.254.169.254`	network	healthy	`__tests__/unit/url-safety.test.js`
`169.254.0.1`	network	healthy	`__tests__/unit/url-safety.test.js`
`8.8.8.8`	network	healthy	`__tests__/unit/url-safety.test.js`
`192.168.1.50`	network	healthy	`__tests__/unit/security-headers.test.js`
`1.1.1.1`	network	healthy	`__tests__/unit/hosted/workspace-provision.test.js`
`9.9.9.9`	network	healthy	`__tests__/unit/hosted/workspace-provision.test.js`
`2.2.2.2`	network	healthy	`__tests__/unit/hosted/rate-limit.test.js`
`11.385.6.113`	network	healthy	`app/components/GithubIcon.js`
`3.495.998.108`	network	healthy	`app/components/GithubIcon.js`
`3.176.765.84`	network	healthy	`app/components/GithubIcon.js`
`5.92.42.36`	network	healthy	`app/components/GithubIcon.js`
`315.21.69.825`	network	healthy	`app/components/GithubIcon.js`
`10.0.0.0`	network	healthy	`app/lib/validate.js`
`127.0.0.0`	network	healthy	`app/lib/validate.js`
`169.254.0.0`	network	healthy	`app/lib/validate.js`
`172.16.0.0`	network	healthy	`app/lib/validate.js`
`192.168.0.0`	network	healthy	`app/lib/validate.js`

Label	Layer	Status	Path
`generic_api_key::__tests__/unit/connect-complete-discord-al…`	security	healthy	`__tests__/unit/connect-complete-discord-alert.test.js`
`openai_or_anthropic_key::__tests__/unit/security-scanner.te…`	security	healthy	`__tests__/unit/security-scanner.test.js`
`password_literal::__tests__/unit/security-scanner.test.js`	security	healthy	`__tests__/unit/security-scanner.test.js`
`password_literal::__tests__/unit/security-scanner.test.js`	security	healthy	`__tests__/unit/security-scanner.test.js`
`generic_api_key::__tests__/unit/middleware-auth.test.js`	security	healthy	`__tests__/unit/middleware-auth.test.js`
`generic_api_key::__tests__/unit/middleware-auth.test.js`	security	healthy	`__tests__/unit/middleware-auth.test.js`
`password_literal::__tests__/unit/auth-config.test.js`	security	healthy	`__tests__/unit/auth-config.test.js`
`openai_or_anthropic_key::__tests__/unit/behavior-redaction.…`	security	healthy	`__tests__/unit/behavior-redaction.test.js`
`password_literal::__tests__/unit/readiness.test.js`	security	healthy	`__tests__/unit/readiness.test.js`
`password_literal::__tests__/unit/readiness.test.js`	security	healthy	`__tests__/unit/readiness.test.js`
`password_literal::__tests__/unit/readiness.test.js`	security	healthy	`__tests__/unit/readiness.test.js`
`password_literal::__tests__/unit/readiness.test.js`	security	healthy	`__tests__/unit/readiness.test.js`
`password_literal::__tests__/unit/readiness.test.js`	security	healthy	`__tests__/unit/readiness.test.js`
`password_literal::__tests__/unit/readiness.test.js`	security	healthy	`__tests__/unit/readiness.test.js`
`generic_api_key::__tests__/unit/hosted/middleware-trial-enf…`	security	healthy	`__tests__/unit/hosted/middleware-trial-enforcement.test.js`
`github_token::__tests__/unit/claude-code/claudemd.test.js`	security	healthy	`__tests__/unit/claude-code/claudemd.test.js`
`github_token::__tests__/unit/claude-code/claudemd.test.js`	security	healthy	`__tests__/unit/claude-code/claudemd.test.js`
`github_token::__tests__/unit/claude-code/optimal-files.test…`	security	healthy	`__tests__/unit/claude-code/optimal-files.test.js`
`generic_api_key::examples/claude-code-review-agent/sample-a…`	security	healthy	`examples/claude-code-review-agent/sample-auth.js`
`password_literal::examples/claude-code-review-agent/sample-…`	security	healthy	`examples/claude-code-review-agent/sample-auth.js`
`generic_api_key::examples/claude-code-review-agent/index.js`	security	healthy	`examples/claude-code-review-agent/index.js`
`generic_api_key::examples/codex-review-agent/sample-auth.js`	security	healthy	`examples/codex-review-agent/sample-auth.js`
`password_literal::examples/codex-review-agent/sample-auth.js`	security	healthy	`examples/codex-review-agent/sample-auth.js`

Label	Layer	Status	Path
`analyze`	cicd	healthy	`.github/workflows/codeql.yml`
`refresh`	cicd	healthy	`.github/workflows/refresh-model-pricing.yml`
`reset`	cicd	healthy	`.github/workflows/reset-meters.yml`
`build-and-push`	cicd	healthy	`.github/workflows/demo-image.yml`
`build-and-test`	cicd	healthy	`.github/workflows/ci.yml`
`startup-smoke`	cicd	healthy	`.github/workflows/ci.yml`
`ping`	cicd	healthy	`.github/workflows/integration-health.yml`
`sdk-live-node`	cicd	healthy	`.github/workflows/sdk-live.yml`
`sdk-live-python`	cicd	healthy	`.github/workflows/sdk-live.yml`
`memo`	cicd	healthy	`.github/workflows/code-session-weekly-memo.yml`
`claude`	cicd	healthy	`.github/workflows/claude.yml`
`sweep`	cicd	healthy	`.github/workflows/jti-sweep.yml`
`sweep`	cicd	healthy	`.github/workflows/hosted-cleanup.yml`
`crater`	cicd	healthy	`.github/workflows/code-session-cache-crater.yml`
`sweep`	cicd	healthy	`.github/workflows/outcome-sweep.yml`

Label	Layer	Status	Path
`gha::codeql`	cicd	healthy	`.github/workflows/codeql.yml`
`gha::refresh-model-pricing`	cicd	healthy	`.github/workflows/refresh-model-pricing.yml`
`gha::reset-meters`	cicd	healthy	`.github/workflows/reset-meters.yml`
`gha::demo-image`	cicd	healthy	`.github/workflows/demo-image.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::integration-health`	cicd	healthy	`.github/workflows/integration-health.yml`
`gha::sdk-live`	cicd	healthy	`.github/workflows/sdk-live.yml`
`gha::code-session-weekly-memo`	cicd	healthy	`.github/workflows/code-session-weekly-memo.yml`
`gha::claude`	cicd	healthy	`.github/workflows/claude.yml`
`gha::jti-sweep`	cicd	healthy	`.github/workflows/jti-sweep.yml`
`gha::hosted-cleanup`	cicd	healthy	`.github/workflows/hosted-cleanup.yml`
`gha::code-session-cache-crater`	cicd	healthy	`.github/workflows/code-session-cache-crater.yml`
`gha::outcome-sweep`	cicd	healthy	`.github/workflows/outcome-sweep.yml`

Label	Layer	Status	Path
`DASHCLAW_API_KEY`	cicd	healthy	`—`
`HOSTED_CLEANUP_SECRET`	cicd	healthy	`—`
`CLAUDE_CODE_OAUTH_TOKEN`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`DASHCLAW_BASE_URL`	cicd	healthy	`—`
`NEXTAUTH_SECRET`	cicd	healthy	`—`
`DATABASE_URL`	cicd	healthy	`—`
`CRON_SECRET`	cicd	healthy	`—`

Label	Layer	Status	Path
`port:3000`	network	healthy	`Dockerfile`
`port:5433`	network	healthy	`docker-compose.yml`
`port:5432`	network	healthy	`docker-compose.yml`
`port:8080`	network	healthy	`hooks/tests/test_command_parser.py`
`port:05`	network	healthy	`.github/workflows/refresh-model-pricing.yml`
`port:04`	network	healthy	`.github/workflows/code-session-weekly-memo.yml`
`port:03`	network	healthy	`.github/workflows/hosted-cleanup.yml`

Label	Layer	Status	Path
`postgres`	data	healthy	`bar-mega.json`
`redis`	data	healthy	`middleware.js`
`sqlite`	data	healthy	`package-lock.json`
`postgresql`	data	healthy	`.env.example`
`mongodb`	data	healthy	`app/components/IntegrationsCard.js`
`mysql`	data	healthy	`app/lib/security.js`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`app`	hardware	healthy	`docker-compose.yml`
`db`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`reputation-migration.test.js`	data	healthy	`__tests__/unit/reputation-migration.test.js`
`2026-04-18-hosted-trial-columns.sql`	data	healthy	`migrations/2026-04-18-hosted-trial-columns.sql`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`package-lock.json`
`vps::gcp`	hardware	healthy	`packages/openclaw-plugin/package-lock.json`

Label	Layer	Status	Path
`repobility-clone-np3egv03`	software	healthy	`/tmp/repobility-clone-np3egv03`

Label	Layer	Status	Path
`nginx`	network	healthy	`hooks/tests/test_command_parser.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/d3c22f64-81c6-4c3d-aaa5-f34a57f8b76b/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/d3c22f64-81c6-4c3d-aaa5-f34a57f8b76b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

ucsandman/DashClaw

Complete repo analysis

function 50+

file 50+

directory 50+

class 50+

component 50+

table 50+

auth 50+

route 36

service 25

secret 23

job 15

pipeline 13

env_var 8

port 7

database 6

container 3

migration 2

vps 2

repo 1

load_balancer 1