Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

B0bTheSkull/phishkit-analyzer

https://github.com/B0bTheSkull/phishkit-analyzer · scanned 2026-06-17 01:19 UTC (1 month, 2 weeks ago)

5 raw signals (0 security + 5 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 1 month, 2 weeks ago · v2 · last Δ +15.6 (diff) · 5 actionable findings from 1 signal source. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
92.3
/100
Security checks
92
0 findings
System graph
92
55.6% cov · 5 findings
Critical
0
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 0 High 2 Medium 1 Low 2 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 5 Crowd 0 Layer: Software 1 Security 3 Quality 1

All 71 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

LabelLayerStatusPath
test_rejects_private_and_loopback software healthy tests/test_safe_fetch.py:18
test_rejects_disallowed_schemes software healthy tests/test_safe_fetch.py:29
test_rejects_missing_host software healthy tests/test_safe_fetch.py:34
test_allows_public_url software healthy tests/test_safe_fetch.py:39
benign_html software healthy tests/test_analyzer.py:11
phish_html software healthy tests/test_analyzer.py:16
test_benign_low_score software healthy tests/test_analyzer.py:20
test_phish_high_score software healthy tests/test_analyzer.py:26
test_phish_detects_external_form_post software healthy tests/test_analyzer.py:32
test_phish_detects_brand_impersonation software healthy tests/test_analyzer.py:38
test_phish_detects_kit_fingerprints software healthy tests/test_analyzer.py:44
test_phish_detects_hidden_iframe software healthy tests/test_analyzer.py:52
test_iocs_extracted software healthy tests/test_analyzer.py:58
test_score_capped_at_100 software healthy tests/test_analyzer.py:65
_read_input software healthy phishkit/cli.py:15
_print_text software healthy phishkit/cli.py:50
_print_json software healthy phishkit/cli.py:90
build_parser software healthy phishkit/cli.py:115
main software healthy phishkit/cli.py:149
_ip_is_blocked software healthy phishkit/safe_fetch.py:19
validate_url software healthy phishkit/safe_fetch.py:30
_severity_for software healthy phishkit/analyzer.py:46
_detect_kits software healthy phishkit/analyzer.py:54
_detect_credential_form software healthy phishkit/analyzer.py:68
_detect_iframes software healthy phishkit/analyzer.py:100
_detect_brand_impersonation software healthy phishkit/analyzer.py:123
_extract_iocs software healthy phishkit/analyzer.py:144
analyze_html software healthy phishkit/analyzer.py:159
lookup software dead phishkit/whois_lookup.py:24

LabelLayerStatusPath
writeup.md software healthy writeup.md
README.md software healthy README.md
pyproject.toml software healthy pyproject.toml
LICENSE software healthy LICENSE
test_safe_fetch.py software healthy tests/test_safe_fetch.py
__init__.py software healthy tests/__init__.py
test_analyzer.py software healthy tests/test_analyzer.py
test.yml software healthy .github/workflows/test.yml
lint.yml software healthy .github/workflows/lint.yml
benign_login.html software healthy examples/samples/benign_login.html
phish_template.html software healthy examples/samples/phish_template.html
cli.py software healthy phishkit/cli.py
safe_fetch.py software healthy phishkit/safe_fetch.py
fingerprints.py software healthy phishkit/fingerprints.py
__init__.py software healthy phishkit/__init__.py
__main__.py software healthy phishkit/__main__.py
analyzer.py software healthy phishkit/analyzer.py
brands.py software healthy phishkit/brands.py
whois_lookup.py software healthy phishkit/whois_lookup.py

LabelLayerStatusPath
127.0.0.1 network healthy tests/test_safe_fetch.py
169.254.169.254 network healthy tests/test_safe_fetch.py
10.0.0.5 network healthy tests/test_safe_fetch.py
192.168.1.1 network healthy tests/test_safe_fetch.py
172.16.0.1 network healthy tests/test_safe_fetch.py
8.8.8.8 network healthy tests/test_safe_fetch.py
93.184.216.34 network healthy tests/test_safe_fetch.py

LabelLayerStatusPath
tests software healthy tests
.github software healthy .github
workflows software healthy .github/workflows
examples software healthy examples
samples software healthy examples/samples
phishkit software healthy phishkit

LabelLayerStatusPath
UnsafeURLError software healthy phishkit/safe_fetch.py:15
RiskFactor software healthy phishkit/analyzer.py:21
IOCs software healthy phishkit/analyzer.py:28
AnalysisReport software healthy phishkit/analyzer.py:35
WhoisInfo software healthy phishkit/whois_lookup.py:16

LabelLayerStatusPath
gha::test cicd healthy .github/workflows/test.yml
gha::lint cicd healthy .github/workflows/lint.yml

LabelLayerStatusPath
test cicd healthy .github/workflows/test.yml
lint cicd healthy .github/workflows/lint.yml

LabelLayerStatusPath
B0bTheSkull__phishkit-analyzer software healthy /data/fable5_failed_archive/B0bTheSkull__phishkit-analyzer
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/f79e2a2c-3932-41e4-98a1-d2a687743e3b/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/f79e2a2c-3932-41e4-98a1-d2a687743e3b/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.