Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

yody38/KizCapital-Battle-of-Bots

https://github.com/yody38/KizCapital-Battle-of-Bots · scanned 2026-06-16 01:06 UTC (2 months, 1 week ago)

58 raw signals (0 security + 58 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 43 actionable findings from 1 signal source. 15 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 43 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 13 Low 21 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 43 Crowd 0 Layer: Software 6 Frontend 5 Data 1 Hardware 4 Security 2 Cicd 3 Quality 22

Exclude dismissed / FP Exclude test files

All 676 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`nextUrl`	software	healthy	`login.js:nextUrl`
`setError`	software	healthy	`login.js:setError`
`setLoading`	software	healthy	`login.js:setLoading`
`showCodeStep`	software	healthy	`login.js:showCodeStep`
`showEmailStep`	software	healthy	`login.js:showEmailStep`
`clearOtp`	software	healthy	`login.js:clearOtp`
`readOtp`	software	healthy	`login.js:readOtp`
`startResendCooldown`	software	healthy	`login.js:startResendCooldown`
`tick`	software	healthy	`login.js:tick`
`friendlyAuthError`	software	healthy	`login.js:friendlyAuthError`
`msg`	software	healthy	`login.js:msg`
`sendOtp`	software	healthy	`login.js:sendOtp`
`text`	software	healthy	`login.js:text`
`finish`	software	healthy	`login.js:finish`
`diffHours`	software	healthy	`app.js:diffHours`
`wilsonLB`	software	healthy	`app.js:wilsonLB`
`readSnapCache`	software	healthy	`app.js:readSnapCache`
`writeSnapCache`	software	healthy	`app.js:writeSnapCache`
`applySnapshot`	software	healthy	`app.js:applySnapshot`
`realAccts`	software	healthy	`app.js:realAccts`
`allDemoBots`	software	healthy	`app.js:allDemoBots`
`paintCachedSnapshot`	software	healthy	`app.js:paintCachedSnapshot`
`loadSnapshot`	software	healthy	`app.js:loadSnapshot`
`renderStalenessBanner`	software	healthy	`app.js:renderStalenessBanner`
`lagMin`	software	healthy	`app.js:lagMin`
`setFreshness`	software	healthy	`app.js:setFreshness`
`diffMin`	software	healthy	`app.js:diffMin`
`vpsPrettyName`	software	healthy	`app.js:vpsPrettyName`
`vpsBadge`	software	healthy	`app.js:vpsBadge`
`render`	software	healthy	`app.js:render`
`totalBots`	software	healthy	`app.js:totalBots`
`total`	software	healthy	`app.js:total`
`safe`	software	healthy	`app.js:safe`
`auditBotHistoryCoverage`	software	healthy	`app.js:auditBotHistoryCoverage`
`ageMin`	software	healthy	`app.js:ageMin`
`signedClass`	software	healthy	`app.js:signedClass`
`distancePct`	software	healthy	`app.js:distancePct`
`historyForLogin`	software	healthy	`app.js:historyForLogin`
`drawSpark`	software	healthy	`app.js:drawSpark`
`ensureLivePill`	software	healthy	`app.js:ensureLivePill`
`setLivePillStatus`	software	healthy	`app.js:setLivePillStatus`
`liveLatestAgeSecs`	software	healthy	`app.js:liveLatestAgeSecs`
`refreshLivePillFromState`	software	healthy	`app.js:refreshLivePillFromState`
`setLiveUnverified`	software	healthy	`app.js:setLiveUnverified`
`flashLive`	software	healthy	`app.js:flashLive`
`_setTextWithFlash`	software	healthy	`app.js:_setTextWithFlash`
`_setSignedTextWithFlash`	software	healthy	`app.js:_setSignedTextWithFlash`
`buildPositionRowHtml`	software	healthy	`app.js:buildPositionRowHtml`
`fmtDist`	software	healthy	`app.js:fmtDist`
`typeStr`	software	healthy	`app.js:typeStr`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`styles.css`	software	healthy	`styles.css`
`vercel.json`	software	healthy	`vercel.json`
`README.md`	software	healthy	`README.md`
`supabase-client.js`	software	healthy	`supabase-client.js`
`login.js`	software	healthy	`login.js`
`login.html`	software	healthy	`login.html`
`index.html`	software	healthy	`index.html`
`SETUP_HARDENING.md`	software	healthy	`SETUP_HARDENING.md`
`config.js`	software	healthy	`config.js`
`app.js`	software	healthy	`app.js`
`auth-guard.js`	software	healthy	`auth-guard.js`
`.env.example`	software	healthy	`.env.example`
`login.css`	software	healthy	`login.css`
`data-source.js`	software	healthy	`data-source.js`
`fetch_ledger.py`	software	healthy	`scripts/fetch_ledger.py`
`run_direction_audit.sh`	software	healthy	`scripts/run_direction_audit.sh`
`emit_timing.py`	software	healthy	`scripts/emit_timing.py`
`mirror.sh`	software	healthy	`scripts/mirror.sh`
`cdp_verify_timing.js`	software	healthy	`scripts/cdp_verify_timing.js`
`reconcile_snapshot.py`	software	healthy	`scripts/reconcile_snapshot.py`
`live_publisher.py`	software	healthy	`scripts/live_publisher.py`
`cdp_verify_auth.js`	software	healthy	`scripts/cdp_verify_auth.js`
`dashboard_audit.js`	software	healthy	`scripts/dashboard_audit.js`
`snapshot.sh`	software	healthy	`scripts/snapshot.sh`
`equity_sampler.py`	software	healthy	`scripts/equity_sampler.py`
`alert_telegram.py`	software	healthy	`scripts/alert_telegram.py`
`alert_email.py`	software	healthy	`scripts/alert_email.py`
`cdp_verify_live.js`	software	healthy	`scripts/cdp_verify_live.js`
`demo_real_transfer.py`	software	healthy	`scripts/demo_real_transfer.py`
`_metrics.py`	software	healthy	`scripts/_metrics.py`
`data_manifest_root.py`	software	healthy	`scripts/data_manifest_root.py`
`dispatch_refresh.py`	software	healthy	`scripts/dispatch_refresh.py`
`mcp_health.py`	software	healthy	`scripts/mcp_health.py`
`audit_direction.py`	software	healthy	`scripts/audit_direction.py`
`test_determinism.py`	software	healthy	`scripts/test_determinism.py`
`post_merge.py`	software	healthy	`scripts/post_merge.py`
`upload_to_supabase.py`	software	healthy	`scripts/upload_to_supabase.py`
`integrity_watchdog.py`	software	healthy	`scripts/integrity_watchdog.py`
`verify_trade_direction.py`	software	healthy	`scripts/verify_trade_direction.py`
`carry_forward_stale.py`	software	healthy	`scripts/carry_forward_stale.py`
`promote_to_runbook.py`	software	healthy	`scripts/promote_to_runbook.py`
`heartbeat_check.py`	software	healthy	`scripts/heartbeat_check.py`
`verify_integrity.py`	software	healthy	`scripts/verify_integrity.py`
`README.md`	software	healthy	`railway/live-bridge/README.md`
`Dockerfile`	software	healthy	`railway/live-bridge/Dockerfile`
`railway.json`	software	healthy	`railway/live-bridge/railway.json`
`entrypoint.sh`	software	healthy	`railway/live-bridge/entrypoint.sh`
`snapshot_builder.vps4.py`	software	healthy	`upstream/snapshot_builder.vps4.py`
`live_real_state.sql`	software	healthy	`supabase/live_real_state.sql`
`schema.sql`	software	healthy	`supabase/schema.sql`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`GITHUB_TOKEN`	cicd	healthy	`—`
`R2_SECRET_ACCESS_KEY`	cicd	healthy	`—`
`SUPABASE_SERVICE_ROLE_KEY`	cicd	healthy	`—`
`SUPABASE_URL`	cicd	healthy	`—`
`TELEGRAM_BOT_TOKEN`	cicd	healthy	`—`
`TS_OAUTH_CLIENT_ID`	cicd	healthy	`—`
`TELEGRAM_CHAT_ID`	cicd	healthy	`—`
`TS_OAUTH_SECRET`	cicd	healthy	`—`
`R2_ACCESS_KEY_ID`	cicd	healthy	`—`
`R2_ACCOUNT_ID`	cicd	healthy	`—`
`SSH_PRIVATE_KEY`	cicd	healthy	`—`

Label	Layer	Status	Path
`scripts`	software	healthy	`scripts`
`railway`	software	healthy	`railway`
`live-bridge`	software	healthy	`railway/live-bridge`
`upstream`	software	healthy	`upstream`
`supabase`	software	healthy	`supabase`
`.github`	software	healthy	`.github`
`workflows`	software	healthy	`.github/workflows`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`README.md`
`100.81.54.93`	network	healthy	`README.md`
`100.101.9.46`	network	healthy	`scripts/run_direction_audit.sh`
`100.118.159.44`	network	healthy	`scripts/run_direction_audit.sh`
`100.125.237.26`	network	healthy	`scripts/run_direction_audit.sh`
`100.70.228.19`	network	healthy	`scripts/run_direction_audit.sh`
`100.112.112.115`	network	healthy	`scripts/run_direction_audit.sh`

Label	Layer	Status	Path
`auth::.github/workflows/sampler-tick.yml`	security	healthy	`.github/workflows/sampler-tick.yml`
`auth::railway/live-bridge/entrypoint.sh`	security	healthy	`railway/live-bridge/entrypoint.sh`
`auth::.github/workflows/mcp-health.yml`	security	healthy	`.github/workflows/mcp-health.yml`
`auth::.github/workflows/refresh.yml`	security	healthy	`.github/workflows/refresh.yml`
`auth::README.md`	security	healthy	`README.md`

Label	Layer	Status	Path
`gha::sampler-tick`	cicd	healthy	`.github/workflows/sampler-tick.yml`
`gha::integrity-watchdog`	cicd	healthy	`.github/workflows/integrity-watchdog.yml`
`gha::refresh`	cicd	healthy	`.github/workflows/refresh.yml`
`gha::mcp-health`	cicd	healthy	`.github/workflows/mcp-health.yml`

Label	Layer	Status	Path
`tick`	cicd	healthy	`.github/workflows/sampler-tick.yml`
`watchdog`	cicd	healthy	`.github/workflows/integrity-watchdog.yml`
`refresh`	cicd	healthy	`.github/workflows/refresh.yml`
`probe`	cicd	healthy	`.github/workflows/mcp-health.yml`

Label	Layer	Status	Path
`Audit`	software	healthy	`scripts/dashboard_audit.js:Audit`
`PMC`	software	healthy	`scripts/equity_sampler.py:250`
`Uploader`	software	healthy	`scripts/upload_to_supabase.py:142`

Label	Layer	Status	Path
`repobility-clone-4x051dey`	software	healthy	`/tmp/repobility-clone-4x051dey`

Label	Layer	Status	Path
`public`	data	healthy	`supabase/live_real_state.sql`

Label	Layer	Status	Path
`port:9222`	network	healthy	`scripts/cdp_verify_timing.js`

Label	Layer	Status	Path
`image::railway/live-bridge/Dockerfile`	hardware	healthy	`railway/live-bridge/Dockerfile`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/e3f861c2-b7c4-439a-82ba-999c8d4340b4/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/e3f861c2-b7c4-439a-82ba-999c8d4340b4/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

yody38/KizCapital-Battle-of-Bots

Complete repo analysis

function 50+

file 50+

env_var 11

directory 7

service 7

auth 5

pipeline 4

job 4

class 3

repo 1

table 1

port 1

container 1