Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

zauberzeug/game-of-cards

https://github.com/zauberzeug/game-of-cards · scanned 2026-06-16 01:11 UTC (2 months, 1 week ago)

112 raw signals (0 security + 112 graph)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 2 months, 1 week ago · v1 · 62 actionable findings from 1 signal source. 50 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

88.9% cov · 62 findings

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 0 High 0 Medium 17 Low 25 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 62 Crowd 0 Layer: Software 3 Frontend 2 Cicd 4 Quality 51 Security 2

Exclude dismissed / FP Exclude test files

All 2474 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_write_done_card`	software	healthy	`tests/test_validate_closed_at_ordering.py:14`
`_write_open_card`	software	healthy	`tests/test_validate_closed_at_ordering.py:38`
`_run_validate`	software	healthy	`tests/test_validate_closed_at_ordering.py:62`
`test_closed_at_before_created_rejected`	software	healthy	`tests/test_validate_closed_at_ordering.py:77`
`test_intra_day_datetime_inversion_rejected`	software	healthy	`tests/test_validate_closed_at_ordering.py:88`
`test_closed_at_equals_created_accepted`	software	healthy	`tests/test_validate_closed_at_ordering.py:104`
`test_closed_at_after_created_accepted`	software	healthy	`tests/test_validate_closed_at_ordering.py:113`
`test_non_iso_created_still_only_shape_error_no_crash`	software	healthy	`tests/test_validate_closed_at_ordering.py:122`
`_load_hook`	software	healthy	`tests/test_session_start_hook.py:25`
`setUpClass`	software	healthy	`tests/test_session_start_hook.py:249`
`_readme`	software	healthy	`tests/test_session_start_hook.py:105`
`test_active_frontmatter_detected`	software	healthy	`tests/test_session_start_hook.py:45`
`test_done_frontmatter_not_active`	software	healthy	`tests/test_session_start_hook.py:49`
`test_body_mention_does_not_fool_parser`	software	healthy	`tests/test_session_start_hook.py:53`
`test_open_card_not_active`	software	healthy	`tests/test_session_start_hook.py:63`
`test_missing_frontmatter_returns_none`	software	healthy	`tests/test_session_start_hook.py:67`
`test_original_status_key_not_matched`	software	healthy	`tests/test_session_start_hook.py:71`
`test_human_gate_default_none_when_absent`	software	healthy	`tests/test_session_start_hook.py:76`
`test_human_gate_decision_parsed`	software	healthy	`tests/test_session_start_hook.py:80`
`test_human_gate_session_parsed`	software	healthy	`tests/test_session_start_hook.py:84`
`test_human_gate_empty_value_normalized_to_none`	software	healthy	`tests/test_session_start_hook.py:88`
`test_status_strips_trailing_comment`	software	healthy	`tests/test_session_start_hook.py:113`
`test_human_gate_strips_trailing_comment`	software	healthy	`tests/test_session_start_hook.py:117`
`test_waiting_on_strips_trailing_comment`	software	healthy	`tests/test_session_start_hook.py:123`
`test_waiting_until_strips_trailing_comment`	software	healthy	`tests/test_session_start_hook.py:129`
`test_hash_inside_bare_value_is_preserved`	software	healthy	`tests/test_session_start_hook.py:135`
`test_quoted_then_comment_unwraps_to_inner_value`	software	healthy	`tests/test_session_start_hook.py:144`
`_make_card`	software	healthy	`tests/test_session_start_hook.py:164`
`_run_hook`	software	healthy	`tests/test_session_start_hook.py:258`
`test_three_active_cards_partitioned_by_human_gate`	software	healthy	`tests/test_session_start_hook.py:180`
`test_only_gated_active_cards_emits_only_parked_line`	software	healthy	`tests/test_session_start_hook.py:206`
`test_only_resumable_active_cards_emits_only_resumable_line`	software	healthy	`tests/test_session_start_hook.py:217`
`test_no_active_cards_emits_nothing`	software	healthy	`tests/test_session_start_hook.py:228`
`_write_card`	software	healthy	`tests/test_session_start_hook.py:252`
`test_waiting_on_reader_returns_none_when_absent`	software	healthy	`tests/test_session_start_hook.py:266`
`test_waiting_on_reader_returns_value`	software	healthy	`tests/test_session_start_hook.py:271`
`test_waiting_until_reader_strips_quotes`	software	healthy	`tests/test_session_start_hook.py:278`
`test_is_impeded_true_for_each_waiting_on_value`	software	healthy	`tests/test_session_start_hook.py:286`
`test_is_impeded_true_for_future_waiting_until`	software	healthy	`tests/test_session_start_hook.py:297`
`test_is_impeded_false_for_past_waiting_until_without_waitin…`	software	healthy	`tests/test_session_start_hook.py:305`
`test_is_impeded_false_for_waiting_on_with_elapsed_waiting_u…`	software	healthy	`tests/test_session_start_hook.py:314`
`test_case_a_card_appears_under_resumable_not_impeded`	software	healthy	`tests/test_session_start_hook.py:337`
`test_is_impeded_true_for_bare_deferral_with_malformed_waiti…`	software	healthy	`tests/test_session_start_hook.py:363`
`test_is_impeded_false_when_no_overlay`	software	healthy	`tests/test_session_start_hook.py:382`
`test_is_impeded_true_for_non_canonical_waiting_on`	software	healthy	`tests/test_session_start_hook.py:387`
`test_four_card_matrix_only_a_appears_under_resumable`	software	healthy	`tests/test_session_start_hook.py:414`
`test_same_day_future_datetime_waiting_until_is_impeded`	software	healthy	`tests/test_session_start_hook.py:457`
`now`	software	healthy	`tests/test_session_start_hook.py:476`
`test_impeded_bucket_distinct_from_gate_bucket`	software	healthy	`tests/test_session_start_hook.py:516`
`test_no_executable_fence_contains_angle_bracket_placeholder`	software	healthy	`tests/test_skill_template_fence_safety.py:23`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`DECK_LOCATION.md`	software	healthy	`DECK_LOCATION.md`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`ABOUT.md`	software	healthy	`ABOUT.md`
`.pre-commit-config.yaml`	software	healthy	`.pre-commit-config.yaml`
`goc.md`	software	healthy	`goc.md`
`pyproject.toml`	software	healthy	`pyproject.toml`
`PERSONAS.md`	software	healthy	`PERSONAS.md`
`LICENSE`	software	healthy	`LICENSE`
`AGENTS.md`	software	healthy	`AGENTS.md`
`test_validate_closed_at_ordering.py`	software	healthy	`tests/test_validate_closed_at_ordering.py`
`test_session_start_hook.py`	software	healthy	`tests/test_session_start_hook.py`
`test_skill_template_fence_safety.py`	software	healthy	`tests/test_skill_template_fence_safety.py`
`test_superseded_requires_by.py`	software	healthy	`tests/test_superseded_requires_by.py`
`test_close_terminal_gate_guard.py`	software	healthy	`tests/test_close_terminal_gate_guard.py`
`test_dod_fenced_checkbox.py`	software	healthy	`tests/test_dod_fenced_checkbox.py`
`test_sort_default_full_deck_tiebreak.py`	software	healthy	`tests/test_sort_default_full_deck_tiebreak.py`
`test_closure_gate_terminal_prereqs.py`	software	healthy	`tests/test_closure_gate_terminal_prereqs.py`
`test_status_filter.py`	software	healthy	`tests/test_status_filter.py`
`test_auto_populate_worker_empty_who.py`	software	healthy	`tests/test_auto_populate_worker_empty_who.py`
`test_global_flag_collision.py`	software	healthy	`tests/test_global_flag_collision.py`
`test_guidance_accuracy.py`	software	healthy	`tests/test_guidance_accuracy.py`
`test_decide_repairs_terminal_gate.py`	software	healthy	`tests/test_decide_repairs_terminal_gate.py`
`test_board.py`	software	healthy	`tests/test_board.py`
`test_validate_waiting_overlay_message.py`	software	healthy	`tests/test_validate_waiting_overlay_message.py`
`test_json_overlay.py`	software	healthy	`tests/test_json_overlay.py`
`test_validate_worker_whitespace.py`	software	healthy	`tests/test_validate_worker_whitespace.py`
`test_done_bundle.py`	software	healthy	`tests/test_done_bundle.py`
`test_yaml_lite.py`	software	healthy	`tests/test_yaml_lite.py`
`test_git_auto_commit_pathspec.py`	software	healthy	`tests/test_git_auto_commit_pathspec.py`
`test_superseded_by_allows_terminal_target.py`	software	healthy	`tests/test_superseded_by_allows_terminal_target.py`
`test_decide_rescope_reconciliation.py`	software	healthy	`tests/test_decide_rescope_reconciliation.py`
`test_version_flag_position.py`	software	healthy	`tests/test_version_flag_position.py`
`test_pattern_generalization_hook.py`	software	healthy	`tests/test_pattern_generalization_hook.py`
`test_move_rewrites_untracked_card.py`	software	healthy	`tests/test_move_rewrites_untracked_card.py`
`test_upgrade_preserves_user_owned_content.py`	software	healthy	`tests/test_upgrade_preserves_user_owned_content.py`
`test_non_list_advances_guard.py`	software	healthy	`tests/test_non_list_advances_guard.py`
`test_new_wires_edges.py`	software	healthy	`tests/test_new_wires_edges.py`
`test_since_filter.py`	software	healthy	`tests/test_since_filter.py`
`test_tag_filter.py`	software	healthy	`tests/test_tag_filter.py`
`test_schema_enum_surface_parity.py`	software	healthy	`tests/test_schema_enum_surface_parity.py`
`test_briefing_body_dedup.py`	software	healthy	`tests/test_briefing_body_dedup.py`
`test_verbose_render_empty_dod.py`	software	healthy	`tests/test_verbose_render_empty_dod.py`
`test_scheduler_workable_predicate_coupling.py`	software	healthy	`tests/test_scheduler_workable_predicate_coupling.py`
`test_skill_frontmatter_strict_yaml.py`	software	healthy	`tests/test_skill_frontmatter_strict_yaml.py`
`test_openclaw_session_start_hook.py`	software	healthy	`tests/test_openclaw_session_start_hook.py`
`test_validate_blocker_coherence.py`	software	healthy	`tests/test_validate_blocker_coherence.py`
`test_release_workflow_clawhub_source_ref.py`	software	healthy	`tests/test_release_workflow_clawhub_source_ref.py`
`test_skill_schema_yaml_parity.py`	software	healthy	`tests/test_skill_schema_yaml_parity.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`scripts`	software	healthy	`scripts`
`openclaw-plugin`	software	healthy	`openclaw-plugin`
`goc`	software	healthy	`openclaw-plugin/goc`
`_vendor`	software	healthy	`openclaw-plugin/goc/_vendor`
`templates`	software	healthy	`openclaw-plugin/goc/templates`
`game_of_cards`	software	healthy	`openclaw-plugin/goc/templates/game_of_cards`
`hooks`	software	healthy	`openclaw-plugin/goc/templates/game_of_cards/hooks`
`bootstrap`	software	healthy	`openclaw-plugin/goc/templates/bootstrap`
`agents`	software	healthy	`openclaw-plugin/goc/templates/agents`
`codex`	software	healthy	`openclaw-plugin/goc/templates/agents/codex`
`claude`	software	healthy	`openclaw-plugin/goc/templates/agents/claude`
`skills`	software	healthy	`openclaw-plugin/skills`
`advance-card`	software	healthy	`openclaw-plugin/skills/advance-card`
`decide-card`	software	healthy	`openclaw-plugin/skills/decide-card`
`openclaw-kickoff`	software	healthy	`openclaw-plugin/skills/openclaw-kickoff`
`create-card`	software	healthy	`openclaw-plugin/skills/create-card`
`next-card`	software	healthy	`openclaw-plugin/skills/next-card`
`card-schema`	software	healthy	`openclaw-plugin/skills/card-schema`
`kickoff`	software	healthy	`openclaw-plugin/skills/kickoff`
`deck`	software	healthy	`openclaw-plugin/skills/deck`
`upgrade`	software	healthy	`openclaw-plugin/skills/upgrade`
`finish-card`	software	healthy	`openclaw-plugin/skills/finish-card`
`retrospective`	software	healthy	`openclaw-plugin/skills/retrospective`
`refine-deck`	software	healthy	`openclaw-plugin/skills/refine-deck`
`standup`	software	healthy	`openclaw-plugin/skills/standup`
`scan-deck`	software	healthy	`openclaw-plugin/skills/scan-deck`
`pull-card`	software	healthy	`openclaw-plugin/skills/pull-card`
`audit-deck`	software	healthy	`openclaw-plugin/skills/audit-deck`
`site`	software	healthy	`site`
`codex-plugin`	software	healthy	`codex-plugin`
`hooks`	software	healthy	`codex-plugin/hooks`
`goc`	software	healthy	`codex-plugin/goc`
`_vendor`	software	healthy	`codex-plugin/goc/_vendor`
`templates`	software	healthy	`codex-plugin/goc/templates`
`game_of_cards`	software	healthy	`codex-plugin/goc/templates/game_of_cards`
`hooks`	software	healthy	`codex-plugin/goc/templates/game_of_cards/hooks`
`bootstrap`	software	healthy	`codex-plugin/goc/templates/bootstrap`
`agents`	software	healthy	`codex-plugin/goc/templates/agents`
`codex`	software	healthy	`codex-plugin/goc/templates/agents/codex`
`claude`	software	healthy	`codex-plugin/goc/templates/agents/claude`
`hooks`	software	healthy	`codex-plugin/goc/templates/hooks`
`skills`	software	healthy	`codex-plugin/skills`
`advance-card`	software	healthy	`codex-plugin/skills/advance-card`
`decide-card`	software	healthy	`codex-plugin/skills/decide-card`
`create-card`	software	healthy	`codex-plugin/skills/create-card`
`next-card`	software	healthy	`codex-plugin/skills/next-card`
`card-schema`	software	healthy	`codex-plugin/skills/card-schema`
`kickoff`	software	healthy	`codex-plugin/skills/kickoff`
`deck`	software	healthy	`codex-plugin/skills/deck`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`ValidateClosedAtOrderingTest`	software	healthy	`tests/test_validate_closed_at_ordering.py:76`
`SessionStartHookTest`	software	healthy	`tests/test_session_start_hook.py:32`
`SessionStartHookInlineCommentTest`	software	healthy	`tests/test_session_start_hook.py:93`
`SessionStartHookGatedActiveCardsTest`	software	healthy	`tests/test_session_start_hook.py:151`
`SessionStartHookWaitingOnTest`	software	healthy	`tests/test_session_start_hook.py:238`
`FrozenDateTime`	software	healthy	`tests/test_session_start_hook.py:474`
`SkillTemplateFenceSafetyTest`	software	healthy	`tests/test_skill_template_fence_safety.py:22`
`SupersededRequiresByTest`	software	healthy	`tests/test_superseded_requires_by.py:56`
`CloseTerminalGateGuardTest`	software	healthy	`tests/test_close_terminal_gate_guard.py:60`
`DodFencedCheckboxTest`	software	healthy	`tests/test_dod_fenced_checkbox.py:6`
`DodMismatchedFenceTest`	software	healthy	`tests/test_dod_fenced_checkbox.py:77`
`SortDefaultFullDeckTiebreakTest`	software	healthy	`tests/test_sort_default_full_deck_tiebreak.py:45`
`ClosureGateTerminalPrereqsTest`	software	healthy	`tests/test_closure_gate_terminal_prereqs.py:27`
`StatusFilterTest`	software	healthy	`tests/test_status_filter.py:14`
`AutoPopulateWorkerEmptyWhoTest`	software	healthy	`tests/test_auto_populate_worker_empty_who.py:46`
`GlobalFlagPreservedTest`	software	healthy	`tests/test_global_flag_collision.py:50`
`SubparserDestCollisionTripwireTest`	software	healthy	`tests/test_global_flag_collision.py:132`
`GuidanceAccuracyTest`	software	healthy	`tests/test_guidance_accuracy.py:33`
`AgentsArchitectureAccuracyTest`	software	healthy	`tests/test_guidance_accuracy.py:69`
`DecideRepairsTerminalGateTest`	software	healthy	`tests/test_decide_repairs_terminal_gate.py:63`
`BoardRenderingTest`	software	healthy	`tests/test_board.py:16`
`WaitingOverdueMessageTest`	software	healthy	`tests/test_validate_waiting_overlay_message.py:49`
`JsonOverlayTest`	software	healthy	`tests/test_json_overlay.py:42`
`ValidateWorkerWhitespaceTest`	software	healthy	`tests/test_validate_worker_whitespace.py:53`
`DoneBundleTest`	software	healthy	`tests/test_done_bundle.py:14`
`ScalarTest`	software	healthy	`tests/test_yaml_lite.py:26`
`BlockScalarTest`	software	healthy	`tests/test_yaml_lite.py:71`
`FoldedScalarRejectionTest`	software	healthy	`tests/test_yaml_lite.py:151`
`TabIndentationRejectionTest`	software	healthy	`tests/test_yaml_lite.py:174`
`BlockSequenceTest`	software	healthy	`tests/test_yaml_lite.py:213`
`CommentsTest`	software	healthy	`tests/test_yaml_lite.py:229`
`FullFrontmatterTest`	software	healthy	`tests/test_yaml_lite.py:247`
`EscapedQuoteFlowSplitTest`	software	healthy	`tests/test_yaml_lite.py:284`
`BlockScalarIndicatorRoundTripTest`	software	healthy	`tests/test_yaml_lite.py:339`
`DeckRoundTripTest`	software	healthy	`tests/test_yaml_lite.py:386`
`NonMappingFrontmatterTest`	software	healthy	`tests/test_yaml_lite.py:415`
`GitAutoCommitPathspecTest`	software	healthy	`tests/test_git_auto_commit_pathspec.py:19`
`SupersededByAllowsTerminalTargetTest`	software	healthy	`tests/test_superseded_by_allows_terminal_target.py:38`
`DecideRescopeReconciliationTest`	software	healthy	`tests/test_decide_rescope_reconciliation.py:14`
`VersionFlagPositionTest`	software	healthy	`tests/test_version_flag_position.py:37`
`PatternGeneralizationMatcherTest`	software	healthy	`tests/test_pattern_generalization_hook.py:30`
`CodeMutatingToolSetTest`	software	healthy	`tests/test_pattern_generalization_hook.py:97`
`ToolResultBoundaryTest`	software	healthy	`tests/test_pattern_generalization_hook.py:140`
`ReminderWordingTest`	software	healthy	`tests/test_pattern_generalization_hook.py:212`
`MoveRewritesUntrackedCardTest`	software	healthy	`tests/test_move_rewrites_untracked_card.py:14`
`UpgradePreservesUserOwnedContentTest`	software	healthy	`tests/test_upgrade_preserves_user_owned_content.py:64`
`UpgradeDivergenceReportTest`	software	healthy	`tests/test_upgrade_preserves_user_owned_content.py:164`
`UpgradeDryRunPlanAccuracyTest`	software	healthy	`tests/test_upgrade_preserves_user_owned_content.py:205`
`NonListAdvancesGuardTest`	software	healthy	`tests/test_non_list_advances_guard.py:35`
`TagsPropertyGuardTest`	software	healthy	`tests/test_non_list_advances_guard.py:104`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`claude-review`	cicd	healthy	`.github/workflows/claude-code-review.yml`
`smoke`	cicd	healthy	`.github/workflows/ci.yml`
`claude`	cicd	healthy	`.github/workflows/claude.yml`
`build`	cicd	healthy	`.github/workflows/release.yml`
`smoke`	cicd	healthy	`.github/workflows/release.yml`
`publish-pypi`	cicd	healthy	`.github/workflows/release.yml`
`publish-npm`	cicd	healthy	`.github/workflows/release.yml`
`publish-clawhub`	cicd	healthy	`.github/workflows/release.yml`
`build`	cicd	healthy	`.github/workflows/pages.yml`
`deploy`	cicd	healthy	`.github/workflows/pages.yml`
`audit-deck`	cicd	healthy	`.github/workflows/audit-deck.yml`
`pull-card`	cicd	healthy	`.github/workflows/pull-card.yml`

Label	Layer	Status	Path
`gha::claude-code-review`	cicd	healthy	`.github/workflows/claude-code-review.yml`
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::claude`	cicd	healthy	`.github/workflows/claude.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::pages`	cicd	healthy	`.github/workflows/pages.yml`
`gha::audit-deck`	cicd	healthy	`.github/workflows/audit-deck.yml`
`gha::pull-card`	cicd	healthy	`.github/workflows/pull-card.yml`

Label	Layer	Status	Path
`port:02`	network	healthy	`.github/workflows/audit-deck.yml`
`port:03`	network	healthy	`.github/workflows/pull-card.yml`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`openclaw-plugin/package-lock.json`
`vps::gcp`	hardware	healthy	`openclaw-plugin/package-lock.json`

Label	Layer	Status	Path
`auth::AGENTS.md`	security	healthy	`AGENTS.md`
`auth::.github/workflows/release.yml`	security	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`repobility-clone-j3tujpim`	software	healthy	`/tmp/repobility-clone-j3tujpim`

Label	Layer	Status	Path
`sqlite`	data	healthy	`openclaw-plugin/package-lock.json`

Label	Layer	Status	Path
`1.2.3.4`	network	healthy	`tests/test_release_rewrite_version_format.py`

Label	Layer	Status	Path
`gpu (detected)`	hardware	healthy	`AGENTS.md`

Label	Layer	Status	Path
`CLAUDE_CODE_OAUTH_TOKEN`	cicd	healthy	`—`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/ec0c44ae-ab30-4e93-9ba4-510a6a6e8359/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/ec0c44ae-ab30-4e93-9ba4-510a6a6e8359/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

zauberzeug/game-of-cards

Complete repo analysis

function 50+

file 50+

directory 50+

class 50+

job 12

pipeline 7

port 2

vps 2

auth 2

repo 1

database 1

service 1

gpu 1

env_var 1