← Back to search Server uses network capabilities via: fetch(), httpx, socket, urllib Server uses filesystem capabilities via: fs, fs sync ops, open(), os, path, pathlib, tempfile Server uses shell capabilities via: os.system(), subprocess Server uses database capabilities via: sqlite3 Server uses env_vars capabilities via: os.environ, os.getenv(), process.env
io.github.dingdawg/dingdawg-code-review
AI security scanning and trust scoring. Stack-specific threat models. Free local scan.
D
40 / 100
Versions
2.0.6latestfirst seen Jun 5, 2026
2.0.7first seen May 19, 2026
Tools 25
handle_check annotations: none low
Check handle availability.
handle str
agent_status annotations: none low
Get comprehensive live status for an agent.
agent_id str
agent_create annotations: none low
Create a new agent and return it with a hash-chain receipt.
name str handle str user_id str agent_type str config_json str template_id string branding_json str industry_type string
agent_get annotations: none low
Get a single agent record by ID or handle.
handle string agent_id string
agent_list annotations: none low
List agents for a user with pagination.
limit int offset int user_id str agent_type string
agent_update annotations: none low
Update one or more mutable fields on an agent.
name string status string agent_id str config_json string branding_json string industry_type string constitution_yaml string subscription_tier string
agent_delete annotations: none low
Soft-delete an agent (archive).
user_id str agent_id str
conversation_start annotations: none low
Start a new session and return its metadata.
user_id str agent_id string
conversation_message annotations: none low
Send a user message and get an agent reply within a session.
content str user_id str agent_id string session_id str
conversation_end annotations: none low
Close a conversation session and return its final stats.
user_id str session_id str
skill_execute annotations: none low
Execute a skill and return the result with usage and receipt.
user_id str agent_id str parameters string skill_name str
usage_get annotations: none low
Get monthly usage summary for an agent.
agent_id str year_month string
book_appointment annotations: none low
Manage appointments for a business agent.
notes string title string action str end_time string location string start_time string description string agent_handle str contact_name string contact_email string contact_phone string status_filter string appointment_id string
create_invoice annotations: none low
Manage invoices for a business agent.
notes string action str currency str due_date string tax_rate string invoice_id string line_items string client_name string agent_handle str client_email string payment_method string paid_amount_cents string
manage_contacts annotations: none low
Manage CRM contacts for a business agent.
name string tags string email string notes string phone string query string action str source string company string contact_id string agent_handle str
send_notification annotations: none low
Queue or manage notifications for a business agent.
body string action str channel string subject string priority str recipient string agent_handle str notification_id string
manage_webhooks annotations: none low
Manage outbound webhooks for a business agent.
url string name string action str method str payload string webhook_id string agent_handle str
manage_forms annotations: none low
Manage forms for a business agent.
title string action str fields string form_id string agent_handle str submission_data string
customer_engagement_tool annotations: none low
Manage customer engagement for a business agent.
action str points string metadata string contact_id string agent_handle str campaign_name string campaign_type string interaction_type string
manage_reviews annotations: none low
Manage customer reviews for a business agent.
action str rating string review_id string review_text string agent_handle str contact_name string contact_email string response_text string
referral_program_tool annotations: none low
Manage referral programs for a business agent.
action str referee_id string campaign_id string referrer_id string reward_type string agent_handle str reward_value string campaign_name string referral_code string
manage_inventory annotations: none low
Manage inventory for a business agent.
sku string action str category string quantity string product_id string agent_handle str product_name string unit_price_cents string adjustment_reason string low_stock_threshold string
track_expenses annotations: none low
Track expenses for a business agent.
date string action str period string vendor string category string expense_id string description string agent_handle str amount_cents string
business_operations_tool annotations: none low
Manage business operations for an agent.
action str task_id string assignee string due_date string priority string shift_end string staff_name string task_title string shift_start string agent_handle str task_description string
data_store_tool annotations: none low
Manage key-value data for a business agent.
key string value string action str prefix string namespace string agent_handle str
Permissions 5
network medium filesystem low shell high database medium env_vars low Scan Findings 169
low
Tool 'agent_create' has no annotations
low
Tool 'agent_get' has no annotations
low
Tool 'agent_list' has no annotations
low
Tool 'agent_update' has no annotations
low
Tool 'agent_delete' has no annotations
low
Tool 'conversation_start' has no annotations
low
Tool 'conversation_message' has no annotations
low
Tool 'conversation_end' has no annotations
low
Tool 'skill_execute' has no annotations
low
Tool 'usage_get' has no annotations
low
Tool 'handle_check' has no annotations
low
Tool 'agent_status' has no annotations
low
Tool 'book_appointment' has no annotations
low
Tool 'create_invoice' has no annotations
low
Tool 'manage_contacts' has no annotations
low
Tool 'send_notification' has no annotations
low
Tool 'manage_webhooks' has no annotations
low
Tool 'manage_forms' has no annotations
low
Tool 'customer_engagement_tool' has no annotations
low
Tool 'manage_reviews' has no annotations
low
Tool 'referral_program_tool' has no annotations
low
Tool 'manage_inventory' has no annotations
low
Tool 'track_expenses' has no annotations
low
Tool 'business_operations_tool' has no annotations
low
Tool 'data_store_tool' has no annotations
high
Hardcoded OAuth client ID in dingdawg-dingdawg-agent-1-0489d0b/gateway/tests/test_cap6_marketing.py
high
Hardcoded OAuth client secret in dingdawg-dingdawg-agent-1-0489d0b/gateway/tests/test_payments.py
info
Sandbox failed to start for behavioral verification
medium
Excessive dependency count: 54 direct dependencies
medium
Suspicious package name: react-dom
medium
Suspicious package name: react-markdown
medium
Suspicious package name: react-virtuoso
medium
Vulnerable dependency: ws@8.18.0 (GHSA-58qx-3vcg-4xpx)
medium
Vulnerable dependency: ws@8.18.0 (GHSA-96hv-2xvq-fx4p)
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@2.1.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-356w-63v5-8wf4)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4r4m-qw57-chr8)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-4w7w-66w2-5vf9)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-859w-5945-r5v3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-93m4-6634-74q7)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-fx2h-pf6j-xcff)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-g4jq-h2w9-997c)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-jqfw-vq24-v9c3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-p9ff-h696-f583)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-v6wh-96g9-6wx3)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-vg6x-rcgg-rjx6)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-x574-m823-4x7w)
medium
Vulnerable dependency: vite@6.0.0 (GHSA-xcj6-pq6g-qj4x)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-35jp-ww65-95wh)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3g43-6gmg-66jw)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3p68-rc4w-qgx5)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-3w6x-2g7m-8v23)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-42h9-826w-cgv3)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-445q-vr5w-6q77)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-5c9x-8gcm-mpgx)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-62hf-57xw-28j9)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-6chq-wfr3-2hj9)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-777c-7fjr-54vf)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-7q8q-rj6j-mhjq)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-898c-q2cr-xwhg)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-fvcv-3m26-pcqx)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-hfxv-24rg-xrqf)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-j5f8-grm9-p9fc)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-jqh4-m9w3-8hp9)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-m7pr-hjqh-92cm)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-mmx7-hfxf-jppx)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-mwf2-3pr3-8698)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-p92q-9vqr-4j8v)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-pf86-5x62-jrwf)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-pmv8-rq9r-6j72)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-pmwg-cvhr-8vh7)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-q8qp-cvcw-x6jj)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-vf2m-468p-8v99)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-w9j2-pvgh-6h63)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-xhjh-pmcv-23jw)
medium
Vulnerable dependency: axios@1.13.5 (GHSA-xx6v-rp6x-q39c)
medium
Vulnerable dependency: next@16.1.6 (GHSA-267c-6grr-h53f)
medium
Vulnerable dependency: next@16.1.6 (GHSA-26hh-7cqf-hhc6)
medium
Vulnerable dependency: next@16.1.6 (GHSA-36qx-fr4f-26g5)
medium
Vulnerable dependency: next@16.1.6 (GHSA-3g8h-86w9-wvmq)
medium
Vulnerable dependency: next@16.1.6 (GHSA-3x4c-7xq6-9pq8)
medium
Vulnerable dependency: next@16.1.6 (GHSA-4633-3j49-mh5q)
medium
Vulnerable dependency: next@16.1.6 (GHSA-492v-c6pp-mqqv)
medium
Vulnerable dependency: next@16.1.6 (GHSA-4c39-4ccg-62r3)
medium
Vulnerable dependency: next@16.1.6 (GHSA-68g3-v927-f742)
medium
Vulnerable dependency: next@16.1.6 (GHSA-6gpp-xcg3-4w24)
medium
Vulnerable dependency: next@16.1.6 (GHSA-89xv-2m56-2m9x)
medium
Vulnerable dependency: next@16.1.6 (GHSA-8h8q-6873-q5fj)
medium
Vulnerable dependency: next@16.1.6 (GHSA-955p-x3mx-jcvp)
medium
Vulnerable dependency: next@16.1.6 (GHSA-c4j6-fc7j-m34r)
medium
Vulnerable dependency: next@16.1.6 (GHSA-ffhc-5mcf-pf4q)
medium
Vulnerable dependency: next@16.1.6 (GHSA-ggv3-7p47-pfv8)
medium
Vulnerable dependency: next@16.1.6 (GHSA-gx5p-jg67-6x7h)
medium
Vulnerable dependency: next@16.1.6 (GHSA-h27x-g6w4-24gq)
medium
Vulnerable dependency: next@16.1.6 (GHSA-h64f-5h5j-jqjh)
medium
Vulnerable dependency: next@16.1.6 (GHSA-jcc7-9wpm-mj36)
medium
Vulnerable dependency: next@16.1.6 (GHSA-m99w-x7hq-7vfj)
medium
Vulnerable dependency: next@16.1.6 (GHSA-mg66-mrh9-m8jx)
medium
Vulnerable dependency: next@16.1.6 (GHSA-mq59-m269-xvcx)
medium
Vulnerable dependency: next@16.1.6 (GHSA-p9j2-gv94-2wf4)
medium
Vulnerable dependency: next@16.1.6 (GHSA-q4gf-8mx6-v5v3)
medium
Vulnerable dependency: next@16.1.6 (GHSA-q8wf-6r8g-63ch)
medium
Vulnerable dependency: next@16.1.6 (GHSA-vfv6-92ff-j949)
medium
Vulnerable dependency: next@16.1.6 (GHSA-wfc6-r584-vfw7)
medium
Vulnerable dependency: vitest@1.6.1 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@1.0.0 (GHSA-5xrq-8626-4rwp)
medium
Vulnerable dependency: vitest@1.0.0 (GHSA-9crc-q9x8-hgqq)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-59g5-xgcq-4qw3)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-5rvq-cxj2-64vf)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-6jv3-5f52-599m)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-mj87-hwqh-73pj)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-pp6c-gr5w-3c5g)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-v9pg-7xvm-68hf)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-vffw-93wf-4j4q)
medium
Vulnerable dependency: python-multipart@0.0.9 (GHSA-wp53-j4wj-2cfg)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-1851)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-1852)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-3036)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-3037)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-3038)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-3039)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-3040)
medium
Vulnerable dependency: python-multipart@0.0.9 (PYSEC-2026-3041)
high
Long unicode escape chain in dingdawg-dingdawg-agent-1-0489d0b/gateway/tests/test_language_detect.py:167
medium
Hex string literal (>50 chars) in dingdawg-dingdawg-agent-1-0489d0b/gateway/isg_agent/api/routes/public.py:39
high
Long hex escape sequence in dingdawg-dingdawg-agent-1-0489d0b/gateway/isg_agent/api/routes/voice.py:478
info
package.json metadata
info
pyproject.toml metadata
info
Tool: agent_create
info
Tool: agent_get
info
Tool: agent_list
info
Tool: agent_update
info
Tool: agent_delete
info
Tool: conversation_start
info
Tool: conversation_message
info
Tool: conversation_end
info
Tool: skill_execute
info
Tool: usage_get
info
Tool: handle_check
info
Tool: agent_status
info
Tool: book_appointment
info
Tool: create_invoice
info
Tool: manage_contacts
info
Tool: send_notification
info
Tool: manage_webhooks
info
Tool: manage_forms
info
Tool: customer_engagement_tool
info
Tool: manage_reviews
info
Tool: referral_program_tool
info
Tool: manage_inventory
info
Tool: track_expenses
info
Tool: business_operations_tool
info
Tool: data_store_tool
info
Transport: streamable-http
info
Required env vars (73)
medium
Hardcoded OAuth client ID in dingdawg-dingdawg-agent-1-0489d0b/gateway/tests/test_cap6_marketing.py
high
High-risk OAuth scope: https://www.googleapis.com/auth/calendar
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
medium
Permission: database access detected
low
Permission: env_vars access detected
info
SBOM generated: 1037 components
high
Hardcoded Password found in dingdawg-dingdawg-agent-1-0489d0b/gateway/scripts/deploy_checklist.py
critical
AWS Access Key ID found in dingdawg-dingdawg-agent-1-0489d0b/gateway/frontend/playwright-report/index.html
high
Hardcoded Password found in dingdawg-dingdawg-agent-1-0489d0b/gateway/frontend/src/app/register/page.tsx
medium
No build provenance detected (SLSA L0)