alexazhou/TogoSpace

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

108 of your 182 findings came from Repobility's proprietary detections. ✓ Repobility tags below mark them.

Scan timing: clone 8.63s · analysis 13.17s · 17.9 MB · GitHub API rate-limit (preflight)

https://github.com/alexazhou/TogoSpace · scanned 2026-06-05 14:47 UTC (5 days, 4 hours ago) · 10 languages

330 raw signals (172 security + 158 graph) 52nd percentile · Python · medium (20-100K LoC) System graph score 84 (lower by 20)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 5 days, 4 hours ago · v2 · 153 actionable findings from 2 signal sources. 98 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 53 findings

Score breakdown â 2026-05-18-v5

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	25.7	0.25	6.42
`testing_score`	100.0	0.20	20.00
`documentation_score`	62.0	0.15	9.30
`practices_score`	87.0	0.15	13.05
`code_quality`	57.7	0.10	5.77
Overall		1.00	64.3

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 3 High 35 Medium 25 Low 60 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 100 System graph 53 Crowd 0 Layer: Quality 69 Software 64 Cicd 11 Security 4 Api 1 Hardware 3 Frontend 1

Exclude dismissed / FP Exclude test files

All 3169 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`_cancel_all_tasks`	software	healthy	`tests/base.py:48`
`_get_worker_offset`	software	healthy	`tests/base.py:58`
`_get_backend_port`	software	healthy	`tests/base.py:68`
`_get_mock_llm_port`	software	healthy	`tests/base.py:72`
`_find_free_port`	software	healthy	`tests/base.py:76`
`_no_proxy_urlopen`	software	healthy	`tests/base.py:82`
`_assert_port_ready`	software	healthy	`tests/base.py:88`
`_assert_tcp_ready`	software	healthy	`tests/base.py:115`
`_wait_port_released`	software	healthy	`tests/base.py:128`
`_get_test_db_path`	software	healthy	`tests/base.py:172`
`test_db_path`	software	healthy	`tests/base.py:181`
`patch_infer`	software	healthy	`tests/base.py:189`
`_to_infer_result`	software	healthy	`tests/base.py:208`
`_wrapped_handler`	software	healthy	`tests/base.py:220`
`normalize_to_mock`	software	healthy	`tests/base.py:237`
`setup_class`	software	healthy	`tests/base.py:276`
`teardown_class`	software	healthy	`tests/base.py:295`
`async_setup_class`	software	healthy	`tests/base.py:311`
`async_teardown_class`	software	healthy	`tests/base.py:315`
`_start_mock_llm`	software	healthy	`tests/base.py:319`
`_stop_mock_llm`	software	healthy	`tests/base.py:334`
`set_mock_response`	software	healthy	`tests/base.py:340`
`get_mock_response`	software	healthy	`tests/base.py:361`
`_load_config`	software	healthy	`tests/base.py:376`
`patched_load`	software	healthy	`tests/base.py:398`
`cleanup_sqlite_files`	software	healthy	`tests/base.py:414`
`prepare_sqlite_schema`	software	healthy	`tests/base.py:427`
`_start_backend`	software	healthy	`tests/base.py:439`
`_stop_backend`	software	healthy	`tests/base.py:498`
`_safe_cleanup_external_dependencies`	software	healthy	`tests/base.py:517`
`_read_process_output`	software	healthy	`tests/base.py:532`
`_tail_text`	software	healthy	`tests/base.py:544`
`_run_on_class_loop`	software	healthy	`tests/base.py:551`
`_close_class_loop`	software	healthy	`tests/base.py:562`
`_run_maybe_async`	software	healthy	`tests/base.py:574`
`wait_until`	software	healthy	`tests/base.py:585`
`create_room`	software	healthy	`tests/base.py:602`
`convert_to_gt_agents`	software	healthy	`tests/base.py:636`
`convert_to_gt_rooms`	software	healthy	`tests/base.py:652`
`infer_room_type`	software	healthy	`tests/base.py:653`
`get_mock_llm_port`	software	healthy	`tests/mock_llm_server.py:26`
`get_mock_llm_api_url`	software	healthy	`tests/mock_llm_server.py:30`
`get_mock_llm_anthropic_url`	software	healthy	`tests/mock_llm_server.py:34`
`_default_openai_response`	software	healthy	`tests/mock_llm_server.py:38`
`_has_operator_message`	software	healthy	`tests/mock_llm_server.py:89`
`_default_anthropic_response`	software	healthy	`tests/mock_llm_server.py:106`
`_infer_room_name`	software	healthy	`tests/mock_llm_server.py:132`
`post`	software	healthy	`tests/mock_llm_server.py:340`
`_normalize_response`	software	healthy	`tests/mock_llm_server.py:177`
`get`	software	healthy	`tests/mock_llm_server.py:237`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`.mcp.json`	software	healthy	`.mcp.json`
`README.md`	software	healthy	`README.md`
`CLAUDE.md`	software	healthy	`CLAUDE.md`
`Dockerfile`	software	healthy	`Dockerfile`
`task_design.md`	software	healthy	`task_design.md`
`README_EN.md`	software	healthy	`README_EN.md`
`requirements.txt`	software	healthy	`requirements.txt`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`__init__.py`	software	healthy	`tests/__init__.py`
`conftest.py`	software	warning	`tests/conftest.py`
`base.py`	software	healthy	`tests/base.py`
`mock_llm_server.py`	software	healthy	`tests/mock_llm_server.py`
`__init__.py`	software	healthy	`tests/integration/__init__.py`
`__init__.py`	software	healthy	`tests/integration/test_funcToolService/__init__.py`
`test_tool_functions.py`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`test_role_template_tools.py`	software	healthy	`tests/integration/test_funcToolService/test_role_template_t…`
`test.py`	software	healthy	`tests/integration/test_funcToolService/test.py`
`__init__.py`	software	healthy	`tests/integration/test_collaboration_task_flow/__init__.py`
`test.py`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py`
`setting.json`	software	healthy	`tests/integration/test_collaboration_task_flow/config/setti…`
`test_team.json`	software	healthy	`tests/integration/test_collaboration_task_flow/config/teams…`
`alice.json`	software	healthy	`tests/integration/test_collaboration_task_flow/config/role_…`
`bob.json`	software	healthy	`tests/integration/test_collaboration_task_flow/config/role_…`
`__init__.py`	software	healthy	`tests/integration/test_team_service/__init__.py`
`test_clear_team_data.py`	software	healthy	`tests/integration/test_team_service/test_clear_team_data.py`
`__init__.py`	software	healthy	`tests/integration/test_compact_flow/__init__.py`
`test.py`	software	healthy	`tests/integration/test_compact_flow/test.py`
`__init__.py`	software	healthy	`tests/integration/test_persistence_service/__init__.py`
`test_restore.py`	software	healthy	`tests/integration/test_persistence_service/test_restore.py`
`test.py`	software	healthy	`tests/integration/test_persistence_service/test.py`
`__init__.py`	software	healthy	`tests/integration/test_auto_timestamp_mixin/__init__.py`
`test.py`	software	healthy	`tests/integration/test_auto_timestamp_mixin/test.py`
`test_sdk_do_send.py`	software	healthy	`tests/integration/test_agent_service/test_sdk_do_send.py`
`__init__.py`	software	healthy	`tests/integration/test_agent_service/__init__.py`
`test_ctrl_room_inject.py`	software	healthy	`tests/integration/test_agent_service/test_ctrl_room_inject.…`
`test_agent_service.py`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py`
`setting.json`	software	healthy	`tests/integration/test_agent_service/config/setting.json`
`test_team.json`	software	healthy	`tests/integration/test_agent_service/config/teams/test_team…`
`alice.json`	software	healthy	`tests/integration/test_agent_service/config/role_templates/…`
`bob.json`	software	healthy	`tests/integration/test_agent_service/config/role_templates/…`
`__init__.py`	software	healthy	`tests/integration/test_agent_activity/__init__.py`
`test_infer_to_activity.py`	software	healthy	`tests/integration/test_agent_activity/test_infer_to_activit…`
`test.py`	software	healthy	`tests/integration/test_agent_activity/test.py`
`test.py`	software	healthy	`tests/integration/test_dal_manager/test.py`
`test_upsert_room.py`	software	healthy	`tests/integration/test_room_service/test_upsert_room.py`
`__init__.py`	software	healthy	`tests/integration/test_room_service/__init__.py`
`test_control_room.py`	software	healthy	`tests/integration/test_room_service/test_control_room.py`
`test_special_agent_in_room.py`	software	healthy	`tests/integration/test_room_service/test_special_agent_in_r…`
`test_turn_logic.py`	software	healthy	`tests/integration/test_room_service/test_turn_logic.py`
`test_room_api_payload.py`	software	healthy	`tests/integration/test_room_service/test_room_api_payload.py`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`ServiceTestCase`	software	healthy	`tests/base.py:143`
`SetResponseHandler`	software	healthy	`tests/mock_llm_server.py:167`
`GetResponseHandler`	software	healthy	`tests/mock_llm_server.py:234`
`ChatCompletionsHandler`	software	healthy	`tests/mock_llm_server.py:300`
`MessagesHandler`	software	healthy	`tests/mock_llm_server.py:337`
`MockLLMServer`	software	healthy	`tests/mock_llm_server.py:363`
`_FakeRuntimeAgent`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`TestPythonTypeToJsonSchema`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`Custom`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`TestGetFunctionMetadata`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`TestBuildtools`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`TestToolFunctions`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`TestSaveDeptParentName`	software	healthy	`tests/integration/test_funcToolService/test_tool_functions.…`
`TestRoleTemplateToolMetadata`	software	healthy	`tests/integration/test_funcToolService/test_role_template_t…`
`TestRoleTemplateTools`	software	healthy	`tests/integration/test_funcToolService/test_role_template_t…`
`TestfuncToolServiceInit`	software	healthy	`tests/integration/test_funcToolService/test.py:28`
`TestRunToolCall`	software	healthy	`tests/integration/test_funcToolService/test.py:50`
`_CollabTaskCase`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py:31`
`TestTaskPriority`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py:74`
`TestAutoSchedule`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py:118`
`TestCollaborationTaskTurnExecution`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py:309`
`TestTaskDrivenToolUsage`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py:413`
`TestConsumeRetryBehavior`	software	healthy	`tests/integration/test_collaboration_task_flow/test.py:464`
`TestClearTeamDataSchedulingRestart`	software	healthy	`tests/integration/test_team_service/test_clear_team_data.py…`
`TestCompactFlow`	software	healthy	`tests/integration/test_compact_flow/test.py:84`
`TestPersistenceRestoreIntegration`	software	healthy	`tests/integration/test_persistence_service/test_restore.py:…`
`TestRestoreRoomHistory`	software	healthy	`tests/integration/test_persistence_service/test.py:42`
`TestRestoreAgentHistory`	software	healthy	`tests/integration/test_persistence_service/test.py:113`
`TestAutoTimestampMixin`	software	healthy	`tests/integration/test_auto_timestamp_mixin/test.py:20`
`TestSdkDoSend`	software	healthy	`tests/integration/test_agent_service/test_sdk_do_send.py:34`
`_FakeClaudeClient`	software	healthy	`tests/integration/test_agent_service/test_sdk_do_send.py:295`
`TestClaudeSdkAgentDriver`	software	healthy	`tests/integration/test_agent_service/test_sdk_do_send.py:175`
`TestCtrlRoomMessageInjectionDuringGroupTurn`	software	healthy	`tests/integration/test_agent_service/test_ctrl_room_inject.…`
`_agentServiceCase`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestAgentCreateAndQuery`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestSetTeamEnabledSkipsOffBoard`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestAgentStatus`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestAgentHistorySync`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestSyncRoomSkipsOwnMessages`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestAgentHistoryCrossRoom`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestClearAgentData`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestAgentSystemPrompt`	software	healthy	`tests/integration/test_agent_service/test_agent_service.py:…`
`TestInferToActivity`	software	healthy	`tests/integration/test_agent_activity/test_infer_to_activit…`
`TestAgentActivityDAL`	software	healthy	`tests/integration/test_agent_activity/test.py:28`
`TestAgentActivityService`	software	healthy	`tests/integration/test_agent_activity/test.py:212`
`TestDalManagers`	software	healthy	`tests/integration/test_dal_manager/test.py:38`
`TestUpsertRoom`	software	healthy	`tests/integration/test_room_service/test_upsert_room.py:23`
`TestGetOrCreateControlRoom`	software	healthy	`tests/integration/test_room_service/test_control_room.py:24`
`TestRoomContainsSpecialAgent`	software	healthy	`tests/integration/test_room_service/test_special_agent_in_r…`
`TestRoomTurnLogic`	software	healthy	`tests/integration/test_room_service/test_turn_logic.py:22`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`integration`	software	healthy	`tests/integration`
`test_funcToolService`	software	healthy	`tests/integration/test_funcToolService`
`test_collaboration_task_flow`	software	healthy	`tests/integration/test_collaboration_task_flow`
`config`	software	healthy	`tests/integration/test_collaboration_task_flow/config`
`teams`	software	healthy	`tests/integration/test_collaboration_task_flow/config/teams`
`role_templates`	software	healthy	`tests/integration/test_collaboration_task_flow/config/role_…`
`test_team_service`	software	healthy	`tests/integration/test_team_service`
`test_compact_flow`	software	healthy	`tests/integration/test_compact_flow`
`test_persistence_service`	software	healthy	`tests/integration/test_persistence_service`
`test_auto_timestamp_mixin`	software	healthy	`tests/integration/test_auto_timestamp_mixin`
`test_agent_service`	software	healthy	`tests/integration/test_agent_service`
`config`	software	healthy	`tests/integration/test_agent_service/config`
`teams`	software	healthy	`tests/integration/test_agent_service/config/teams`
`role_templates`	software	healthy	`tests/integration/test_agent_service/config/role_templates`
`test_agent_activity`	software	healthy	`tests/integration/test_agent_activity`
`test_dal_manager`	software	healthy	`tests/integration/test_dal_manager`
`test_room_service`	software	healthy	`tests/integration/test_room_service`
`test_dept_service`	software	healthy	`tests/integration/test_dept_service`
`test_agent_history_store`	software	healthy	`tests/integration/test_agent_history_store`
`test_chat_flow`	software	healthy	`tests/integration/test_chat_flow`
`config`	software	healthy	`tests/integration/test_chat_flow/config`
`teams`	software	healthy	`tests/integration/test_chat_flow/config/teams`
`role_templates`	software	healthy	`tests/integration/test_chat_flow/config/role_templates`
`test_scheduler_service`	software	healthy	`tests/integration/test_scheduler_service`
`test_message_bus`	software	healthy	`tests/integration/test_message_bus`
`test_preset_service`	software	healthy	`tests/integration/test_preset_service`
`unit`	software	healthy	`tests/unit`
`util`	software	healthy	`tests/unit/util`
`json_util`	software	healthy	`tests/unit/util/json_util`
`controller`	software	healthy	`tests/unit/controller`
`dal`	software	healthy	`tests/unit/dal`
`service`	software	healthy	`tests/unit/service`
`auth`	software	healthy	`tests/unit/service/auth`
`funcToolService`	software	healthy	`tests/unit/service/funcToolService`
`agentService`	software	healthy	`tests/unit/service/agentService`
`teamService`	software	healthy	`tests/unit/service/teamService`
`model`	software	healthy	`tests/unit/model`
`migrate`	software	healthy	`tests/unit/migrate`
`backend`	software	healthy	`tests/unit/backend`
`config`	software	healthy	`tests/config`
`teams`	software	healthy	`tests/config/teams`
`role_templates`	software	healthy	`tests/config/role_templates`
`api`	software	healthy	`tests/api`
`test_system_controller`	software	healthy	`tests/api/test_system_controller`
`config`	software	healthy	`tests/api/test_system_controller/config`
`test_config_controller`	software	healthy	`tests/api/test_config_controller`
`test_agent_controller`	software	healthy	`tests/api/test_agent_controller`
`test_role_template_controller`	software	healthy	`tests/api/test_role_template_controller`
`test_dept_controller`	software	healthy	`tests/api/test_dept_controller`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tasks`	data	healthy	`assets/migrate/0009_add_tasks_table.sql`
`teams`	data	healthy	`assets/migrate/0001.sql`
`agents`	data	healthy	`assets/migrate/0001.sql`
`rooms`	data	healthy	`assets/migrate/0001.sql`
`room_messages`	data	healthy	`assets/migrate/0001.sql`
`agent_histories`	data	healthy	`assets/migrate/0001.sql`
`role_templates`	data	healthy	`assets/migrate/0001.sql`
`depts`	data	healthy	`assets/migrate/0001.sql`
`system_configs`	data	healthy	`assets/migrate/0001.sql`
`agent_tasks`	data	healthy	`assets/migrate/0001.sql`
`agent_activities`	data	healthy	`assets/migrate/0001.sql`
`IF`	data	healthy	`src/db.py`

Label	Layer	Status	Path
`GH_PAT`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`APPLE_CERTIFICATE_PASSWORD`	cicd	healthy	`—`
`APPLE_ID`	cicd	healthy	`—`
`DOCKERHUB_TOKEN`	cicd	healthy	`—`
`ZIP_PATH`	cicd	healthy	`—`
`APPLE_TEAM_ID`	cicd	healthy	`—`
`APPLE_APP_PASSWORD`	cicd	healthy	`—`
`APPLE_SIGNING_IDENTITY`	cicd	healthy	`—`
`APPLE_CERTIFICATE_P12`	cicd	healthy	`—`
`DOCKERHUB_USERNAME`	cicd	healthy	`—`

Label	Layer	Status	Path
`test`	cicd	healthy	`.github/workflows/test.yml`
`build`	cicd	healthy	`.github/workflows/docker.yml`
`merge`	cicd	healthy	`.github/workflows/docker.yml`
`build-macos`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`gha::test`	cicd	healthy	`.github/workflows/test.yml`
`gha::docker`	cicd	healthy	`.github/workflows/docker.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`

Label	Layer	Status	Path
`test_db_migration_tool.py`	data	healthy	`tests/unit/dal/test_db_migration_tool.py`
`test_migration_0011.py`	data	healthy	`tests/unit/migrate/test_migration_0011.py`

Label	Layer	Status	Path
`port:8080`	network	healthy	`Dockerfile`
`port:9090`	network	healthy	`tests/unit/backend/test_backend_main_shutdown.py`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`togospace`	hardware	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`repobility-clone-m1dzb3np`	software	healthy	`/tmp/repobility-clone-m1dzb3np`

Label	Layer	Status	Path
`sqlite`	data	healthy	`tests/unit/service/test_main_config_loading.py`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`tests/base.py`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/fb33e155-60d3-4e4a-ad61-f14db63879d8/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/fb33e155-60d3-4e4a-ad61-f14db63879d8/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

alexazhou/TogoSpace

Complete repo analysis

function 50+

file 50+

class 50+

directory 50+

table 12

env_var 11

job 4

pipeline 3

migration 2

port 2

container 2

repo 1

database 1

service 1