info package.json metadata manifest_parser · 100%
info Tool: get_judges manifest_parser · 70%
info Tool: evaluate_policy_aware manifest_parser · 70%
info Tool: list_files manifest_parser · 70%
info Tool: read_file manifest_parser · 70%
info Tool: evaluate_with_progress manifest_parser · 70%
info Tool: scaffold_judge manifest_parser · 70%
info Tool: scaffold_plugin manifest_parser · 70%
info Tool: evaluate_public_repo_report manifest_parser · 70%
info Tool: evaluate_app_builder_flow manifest_parser · 70%
info Tool: analyze_dependencies manifest_parser · 70%
info Tool: benchmark_gate manifest_parser · 70%
info Tool: run_benchmark manifest_parser · 70%
info Tool: evaluate_batch manifest_parser · 70%
info Tool: evaluate_then_fix manifest_parser · 70%
info Tool: evaluate_focused manifest_parser · 70%
info Tool: session_status manifest_parser · 70%
info Tool: record_feedback manifest_parser · 70%
info Tool: evaluate_git_diff manifest_parser · 70%
info Tool: explain_finding manifest_parser · 70%
info Tool: triage_finding manifest_parser · 70%
info Tool: get_finding_stats manifest_parser · 70%
info Tool: get_suppression_analytics manifest_parser · 70%
info Tool: list_triaged_findings manifest_parser · 70%
info Tool: re_evaluate_with_context manifest_parser · 70%
info Tool: fix_code manifest_parser · 70%
info Transport: stdio manifest_parser · 90%
info Required env vars (134) manifest_parser · 80%
low Tool 'get_judges' has no annotations annotation_checker · 100%
low Tool 'evaluate_policy_aware' has no annotations annotation_checker · 100%
low Tool 'list_files' has no annotations annotation_checker · 100%
low Tool 'read_file' has no annotations annotation_checker · 100%
low Tool 'evaluate_with_progress' has no annotations annotation_checker · 100%
low Tool 'scaffold_judge' has no annotations annotation_checker · 100%
low Tool 'scaffold_plugin' has no annotations annotation_checker · 100%
low Tool 'evaluate_public_repo_report' has no annotations annotation_checker · 100%
low Tool 'evaluate_app_builder_flow' has no annotations annotation_checker · 100%
low Tool 'analyze_dependencies' has no annotations annotation_checker · 100%
low Tool 'benchmark_gate' has no annotations annotation_checker · 100%
low Tool 'run_benchmark' has no annotations annotation_checker · 100%
low Tool 'evaluate_batch' has no annotations annotation_checker · 100%
low Tool 'evaluate_then_fix' has no annotations annotation_checker · 100%
low Tool 'evaluate_focused' has no annotations annotation_checker · 100%
low Tool 'session_status' has no annotations annotation_checker · 100%
low Tool 'record_feedback' has no annotations annotation_checker · 100%
low Tool 'evaluate_git_diff' has no annotations annotation_checker · 100%
low Tool 'explain_finding' has no annotations annotation_checker · 100%
low Tool 'triage_finding' has no annotations annotation_checker · 100%
low Tool 'get_finding_stats' has no annotations annotation_checker · 100%
low Tool 'get_suppression_analytics' has no annotations annotation_checker · 100%
low Tool 'list_triaged_findings' has no annotations annotation_checker · 100%
low Tool 're_evaluate_with_context' has no annotations annotation_checker · 100%
low Tool 'fix_code' has no annotations annotation_checker · 100%
high Hardcoded API key in tests/judges.test.ts auth_checker · 90%
high Hardcoded API key in tests/subsystems.test.ts auth_checker · 90%
medium Permission: network access detected permission_analyzer · 90%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
medium Permission: database access detected permission_analyzer · 90%
low Permission: env_vars access detected permission_analyzer · 90%
medium Vulnerable dependency: @anthropic-ai/sdk@0.81.0 (GHSA-p7fg-763f-g4gf) dependency_analyzer · 95%
high Hardcoded Password found in CHANGELOG.md secret_scanner · 65%
high Hardcoded Password found in README.md secret_scanner · 65%
critical AWS Access Key ID found in content/snippets/go/go-01-auth-bypass.go secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/go/go-07-xss-reflect.go secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/go/go-07-xss-reflect.go secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/go/go-04-hardcoded-secret.go secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/go/go-04-hardcoded-secret.go secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/go/go-02-command-injection.go secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/go/go-02-command-injection.go secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/python/py-03-command-injection.py secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/python/py-03-command-injection.py secret_scanner · 75%
high Generic API Key Assignment found in content/snippets/python/py-05-hardcoded-secret.py secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/python/py-01-auth-bypass.py secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/typescript/ts-07-xss-reflect.ts secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/typescript/ts-07-xss-reflect.ts secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/typescript/ts-03-hardcoded-secret.ts secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/typescript/ts-03-hardcoded-secret.ts secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/typescript/ts-01-auth-bypass.ts secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/rust/rs-04-hardcoded-secret.rs secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/rust/rs-07-xss-reflect.rs secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/rust/rs-01-auth-bypass.rs secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/java/java-01-auth-bypass.java secret_scanner · 95%
high Hardcoded Password found in content/snippets/java/java-03-hardcoded-secret.java secret_scanner · 65%
high Hardcoded Password found in content/snippets/java/java-02-sql-injection.java secret_scanner · 65%
critical AWS Access Key ID found in content/snippets/java/java-07-xss-reflect.java secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/java/java-07-xss-reflect.java secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/java/java-04-path-traversal.java secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/cpp/cpp-04-hardcoded-secret.cpp secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/cpp/cpp-04-hardcoded-secret.cpp secret_scanner · 75%
high Hardcoded Password found in content/snippets/cpp/cpp-05-path-traversal.cpp secret_scanner · 65%
critical AWS Access Key ID found in content/snippets/cpp/cpp-01-auth-bypass.cpp secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/cpp/cpp-02-command-injection.cpp secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/cpp/cpp-02-command-injection.cpp secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/cpp/cpp-07-buffer-overflow.cpp secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/cpp/cpp-07-buffer-overflow.cpp secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/cpp/cpp-08-format-string.cpp secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/cpp/cpp-08-format-string.cpp secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/csharp/cs-03-hardcoded-secret.cs secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/csharp/cs-03-hardcoded-secret.cs secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/csharp/cs-08-command-injection.cs secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/csharp/cs-08-command-injection.cs secret_scanner · 75%
critical AWS Access Key ID found in content/snippets/csharp/cs-06-unsafe-deserialize.cs secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/csharp/cs-01-auth-bypass.cs secret_scanner · 95%
critical AWS Access Key ID found in content/snippets/csharp/cs-07-xss-reflect.cs secret_scanner · 95%
high Generic API Key Assignment found in content/snippets/csharp/cs-07-xss-reflect.cs secret_scanner · 75%
high Hardcoded Password found in content/snippets/csharp/cs-04-path-traversal.cs secret_scanner · 65%
critical Database URL with Password found in content/snippets/javascript/js-03-hardcoded-secret.js secret_scanner · 85%
high Hardcoded Password found in content/snippets/javascript/js-03-hardcoded-secret.js secret_scanner · 65%
high Hardcoded Password found in docs/real-world-evidence.md secret_scanner · 65%
high Generic API Key Assignment found in docs/playground.html secret_scanner · 75%
high Hardcoded Password found in docs/playground.html secret_scanner · 65%
high Hardcoded Password found in examples/quickstart.ts secret_scanner · 65%
high Generic API Key Assignment found in examples/sample-vulnerable-api.ts secret_scanner · 75%
critical Database URL with Password found in examples/sample-vulnerable-api.ts secret_scanner · 85%
high Hardcoded Password found in examples/sample-vulnerable-api.ts secret_scanner · 65%
high Generic API Key Assignment found in scripts/debug-missed.ts secret_scanner · 75%
high Hardcoded Password found in src/evaluators/false-positive-review.ts secret_scanner · 65%
high Hardcoded Password found in src/commands/benchmark-coverage-gaps.ts secret_scanner · 65%
critical AWS Access Key ID found in src/commands/benchmark-expanded.ts secret_scanner · 95%
high Generic API Key Assignment found in src/commands/benchmark-expanded.ts secret_scanner · 75%
critical Database URL with Password found in src/commands/benchmark-expanded.ts secret_scanner · 85%
high Hardcoded Password found in src/commands/benchmark-expanded.ts secret_scanner · 65%
critical AWS Access Key ID found in src/commands/benchmark-quality-ops.ts secret_scanner · 95%
critical AWS Secret Access Key found in src/commands/benchmark-languages.ts secret_scanner · 90%
high Generic API Key Assignment found in src/commands/benchmark-languages.ts secret_scanner · 75%
high Hardcoded Password found in src/commands/benchmark-languages.ts secret_scanner · 65%
critical AWS Access Key ID found in src/commands/benchmark-infrastructure.ts secret_scanner · 95%
critical AWS Secret Access Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 90%
critical RSA Private Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 95%
critical Stripe Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 90%
critical Database URL with Password found in src/commands/benchmark-infrastructure.ts secret_scanner · 85%
high Hardcoded Password found in src/commands/benchmark-infrastructure.ts secret_scanner · 65%
critical AWS Access Key ID found in src/commands/benchmark-security-deep.ts secret_scanner · 95%
critical AWS Secret Access Key found in src/commands/benchmark-security-deep.ts secret_scanner · 90%
high Generic API Key Assignment found in src/commands/benchmark-security-deep.ts secret_scanner · 75%
critical Database URL with Password found in src/commands/benchmark-security-deep.ts secret_scanner · 85%
high Hardcoded Password found in src/commands/benchmark-security-deep.ts secret_scanner · 65%
critical AWS Access Key ID found in src/commands/benchmark-ai-agents.ts secret_scanner · 95%
critical AWS Secret Access Key found in src/commands/benchmark-ai-agents.ts secret_scanner · 90%
high Generic API Key Assignment found in src/commands/benchmark-ai-agents.ts secret_scanner · 75%
critical Database URL with Password found in src/commands/benchmark-ai-agents.ts secret_scanner · 85%
high Generic API Key Assignment found in src/commands/snippet-eval.ts secret_scanner · 75%
critical Database URL with Password found in src/commands/benchmark-multi-file.ts secret_scanner · 85%
critical AWS Access Key ID found in src/commands/benchmark-advanced.ts secret_scanner · 95%
critical AWS Secret Access Key found in src/commands/benchmark-advanced.ts secret_scanner · 90%
high Generic API Key Assignment found in src/commands/benchmark-advanced.ts secret_scanner · 75%
critical Database URL with Password found in src/commands/benchmark-advanced.ts secret_scanner · 85%
high Hardcoded Password found in src/commands/benchmark-advanced.ts secret_scanner · 65%
high Generic API Key Assignment found in src/commands/benchmark-expanded-2.ts secret_scanner · 75%
high Hardcoded Password found in src/commands/benchmark-expanded-2.ts secret_scanner · 65%
high Generic API Key Assignment found in src/commands/benchmark.ts secret_scanner · 75%
high Hardcoded Password found in src/commands/benchmark.ts secret_scanner · 65%
high Hardcoded Password found in src/commands/coach-mode.ts secret_scanner · 65%
medium Buffer.from base64 in src/evaluators/data-security.ts:403 entropy_analyzer · 75%
medium High-entropy string (5.95 bits/char) in src/commands/benchmark-coverage-gaps.ts:177 entropy_analyzer · 54%
info SLSA Build Level 3 detected slsa_assessor · 85%
info Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info SBOM generated: 551 components sbom_generator · 100%
info MITRE ATLAS technique coverage summary atlas_annotator · 100%
info ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%