← Legacy view v2 (rp.*)

amrdab/clawdcursor

https://github.com/AmrDab/clawdcursor · lang: typescript · LOC: · source: corpus_mined

Quality

89.0

Grade A-

Security

94.4

Findings

0 critical · 0 high

Status

completed

May 15, 2026 01:20

info: 7 low: 1 medium: 1

Top rules by occurrence

Rule	Severity	Count
`SEC020` Secret Printed to Logs	high	4
`SEC015` Insecure Randomness for Security	medium	4
`SEC006` XSS Risk	high	1

First 9 findings (severity-sorted)

medium SEC015 Insecure Randomness for Security

src/platform/native-helper.ts:558 · conf 1.00

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

low SEC006 XSS Risk

src/surface/dashboard.ts:1011 · conf 0.40

[SEC006] XSS Risk: Direct HTML injection without sanitization.

info SEC015 Insecure Randomness for Security

· conf 0.20

[SEC015] Insecure Randomness for Security (and 3 more): Same pattern found in 3 additional files. Review if needed.

info SEC015 Insecure Randomness for Security

src/surface/report.ts:183 · conf 0.25

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

info SEC015 Insecure Randomness for Security

src/tools/scheduler.ts:232 · conf 0.25

[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.

info SEC020 Secret Printed to Logs

· conf 0.20

[SEC020] Secret Printed to Logs (and 1 more): Same pattern found in 1 additional files. Review if needed.

info SEC020 Secret Printed to Logs

src/core/agent.ts:65 · conf 0.15

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

info SEC020 Secret Printed to Logs

src/surface/doctor.ts:1196 · conf 0.15

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

info SEC020 Secret Printed to Logs

src/surface/readiness.ts:195 · conf 0.10

[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/3d4b3648-08e1-458b-bd91-d5c810770f42/.