low Tool 'project_create' has no annotations annotation_checker · 100%
low Tool 'project_list' has no annotations annotation_checker · 100%
low Tool 'project_switch' has no annotations annotation_checker · 100%
low Tool 'thread_create' has no annotations annotation_checker · 100%
low Tool 'thread_switch' has no annotations annotation_checker · 100%
low Tool 'thread_list' has no annotations annotation_checker · 100%
low Tool 'summary_update' has no annotations annotation_checker · 100%
low Tool 'context_get' has no annotations annotation_checker · 100%
low Tool 'thread_delete' has no annotations annotation_checker · 100%
low Tool 'thread_rebase' has no annotations annotation_checker · 100%
low Tool 'threadmind_init' has no annotations annotation_checker · 100%
low Tool 'stats_show' has no annotations annotation_checker · 100%
medium OAuth implementation without PKCE auth_checker · 75%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
low Cross-tool reference in 'thread_rebase': Comparison: 'similar to git' cross_tool_detector · 30%
medium Vulnerable dependency: vitest@3.0.0 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@3.0.0 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@3.0.0 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
info package.json metadata manifest_parser · 100%
info Tool: project_create manifest_parser · 70%
info Tool: project_list manifest_parser · 70%
info Tool: project_switch manifest_parser · 70%
info Tool: thread_create manifest_parser · 70%
info Tool: thread_switch manifest_parser · 70%
info Tool: thread_list manifest_parser · 70%
info Tool: summary_update manifest_parser · 70%
info Tool: context_get manifest_parser · 70%
info Tool: thread_delete manifest_parser · 70%
info Tool: thread_rebase manifest_parser · 70%
info Tool: threadmind_init manifest_parser · 70%
info Tool: stats_show manifest_parser · 70%
info Transport: stdio manifest_parser · 90%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
high Permission: shell access detected permission_analyzer · 95%
info SBOM generated: 388 components sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%