← Legacy view v2 (rp.*)

tinyhumansai/openhuman

https://github.com/tinyhumansai/openhuman · lang: rust · LOC: · source: both

Quality
70.8
Grade B
Security
60.3
Findings
8
0 critical · 0 high
Status
completed
May 15, 2026 22:52
info: 7 medium: 1
Top rules by occurrence
RuleSeverityCount
SEC015 Insecure Randomness for Security medium 4
SEC020 Secret Printed to Logs high 3
SEC005 Command Injection Risk high 1
First 8 findings (severity-sorted)
medium SEC005 Command Injection Risk
app/src/pages/conversations/utils/workerThreadRef.ts:34 · conf 0.50 
[SEC005] Command Injection Risk: Unsafe shell execution or eval of user input.
info SEC015 Insecure Randomness for Security
· conf 0.20 
[SEC015] Insecure Randomness for Security (and 3 more): Same pattern found in 3 additional files. Review if needed.
info SEC015 Insecure Randomness for Security
app/src/pages/Accounts.tsx:40 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
app/src/pages/Intelligence.tsx:77 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC015 Insecure Randomness for Security
app/src/pages/Skills.tsx:303 · conf 0.25 
[SEC015] Insecure Randomness for Security: Weak PRNG used in security-sensitive context. Output is predictable.
info SEC020 Secret Printed to Logs
app/src/utils/configPersistence.ts:220 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
app/src/utils/desktopDeepLinkListener.ts:103 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…
info SEC020 Secret Printed to Logs
app/src/utils/tauriCommands/memory.ts:89 · conf 0.15 
[SEC020] Secret Printed to Logs: Debug or diagnostic code appears to print a credential-bearing value. This is a frequent AI-assisted coding failure: the helper exposes the exact value needed for tro…

Reading from rp.scan + rp.finding + rp.rule (unified schema, R78 series). Legacy data path unchanged. Compare with /scan/c35a7e1b-8fb0-4ff0-b83d-ff9c894573b2/.