← Legacy view v2 (rp.*)

nikolai-vysotskyi/trace-mcp

https://github.com/nikolai-vysotskyi/trace-mcp · lang: typescript · LOC: · source: user_submitted

Quality
79.6
Grade B+
Security
81.7
Findings
9
0 critical · 0 high
Status
completed
May 15, 2026 12:20
info: 6 medium: 2 low: 1
Top rules by occurrence
RuleSeverityCount
SEC015 Insecure Randomness for Security medium 4
SEC020 Secret Printed to Logs high 3
SEC005 Command Injection Risk high 1
SEC006 XSS Risk high 1
First 9 findings (severity-sorted)
medium SEC005 Command Injection Risk
src/cli/daemon-stats.ts:32 · conf 0.50 
[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.
medium SEC015 Insecure Randomness for Security
src/session/resume.ts:102 · conf 1.00 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
low SEC006 XSS Risk
src/tools/analysis/visualize.ts:1844 · conf 0.40 
[SEC006] XSS Risk: Direct HTML injection without sanitization.
info SEC015 Insecure Randomness for Security
· conf 0.20 
[SEC015] Insecure Randomness for Security (and 5 more): Same pattern found in 5 additional files. Review if needed.
info SEC015 Insecure Randomness for Security
packages/app/src/renderer/tabs/GraphExplorerGPU.tsx:1677 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
packages/app/src/renderer/tabs/Notebook.tsx:39 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC020 Secret Printed to Logs
src/ai/index.ts:378 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
src/cli/analytics.ts:140 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
src/cli/memory.ts:304 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/05828901-c452-4662-bb38-71c7434ab1f8/.