← Back to search

Judges Panel

KevinRabun MIT Scanned 48d ago

45 judges that evaluate AI-generated code for security, cost, and quality with built-in AST.

MCP Registry ↗ npm ↗
D
40 / 100

Versions

1.0.0 latest
May 20, 2026
3.129.9
Apr 7, 2026
3.129.8
Apr 6, 2026
3.129.7
Apr 6, 2026
3.129.6
Apr 6, 2026
3.129.5
Apr 6, 2026
3.129.4
Apr 5, 2026
3.129.3
Apr 5, 2026
3.129.2
Apr 5, 2026
3.129.1
Apr 5, 2026
3.129.0
Apr 5, 2026
3.128.3
Apr 5, 2026
3.128.2
Apr 4, 2026
3.128.1
Apr 4, 2026
3.128.0
Apr 4, 2026
3.127.3
Apr 4, 2026
3.127.2
Apr 4, 2026
3.127.1
Apr 4, 2026
3.127.0
Apr 3, 2026
3.126.2
Apr 3, 2026
3.126.1
Apr 2, 2026
3.126.0
Apr 2, 2026
3.125.0
Apr 1, 2026
3.124.5
Mar 29, 2026
3.124.4
Mar 28, 2026
3.124.3
Mar 28, 2026
3.124.2
Mar 28, 2026
3.124.1
Mar 28, 2026
3.124.0
Mar 28, 2026
3.123.5
Mar 27, 2026
3.123.4
Mar 27, 2026
3.123.3
Mar 26, 2026
3.123.2
Mar 26, 2026
3.123.1
Mar 26, 2026
3.123.0
Mar 26, 2026
3.122.0
Mar 20, 2026
3.121.0
Mar 20, 2026
3.119.0
Mar 20, 2026
3.118.0
Mar 19, 2026
3.117.8
Mar 19, 2026
3.117.7
Mar 19, 2026
3.117.6
Mar 19, 2026
3.117.5
Mar 19, 2026
3.117.4
Mar 19, 2026
3.117.3
Mar 18, 2026
3.117.2
Mar 18, 2026
3.117.1
Mar 18, 2026
3.117.0
Mar 18, 2026
3.116.0
Mar 18, 2026
3.115.4
Mar 18, 2026
3.115.3
Mar 18, 2026
3.115.2
Mar 17, 2026
3.115.1
Mar 17, 2026
3.115.0
Mar 17, 2026
3.114.0
Mar 17, 2026
3.113.0
Mar 17, 2026
3.112.0
Mar 15, 2026
3.111.0
Mar 15, 2026
3.110.0
Mar 15, 2026
3.109.0
Mar 15, 2026
3.108.0
Mar 15, 2026
3.107.0
Mar 15, 2026
3.106.0
Mar 15, 2026
3.105.0
Mar 15, 2026
3.104.0
Mar 15, 2026
3.103.0
Mar 15, 2026
3.102.0
Mar 15, 2026
3.101.0
Mar 15, 2026
3.100.0
Mar 15, 2026
3.99.0
Mar 15, 2026
3.98.0
Mar 15, 2026
3.97.0
Mar 15, 2026
3.96.0
Mar 15, 2026
3.95.0
Mar 15, 2026
3.94.0
Mar 15, 2026
3.93.0
Mar 15, 2026
3.92.0
Mar 15, 2026
3.91.0
Mar 15, 2026
3.90.0
Mar 15, 2026
3.89.0
Mar 15, 2026
3.88.0
Mar 15, 2026
3.87.0
Mar 15, 2026
3.86.0
Mar 15, 2026
3.85.0
Mar 14, 2026
3.84.0
Mar 14, 2026
3.83.0
Mar 14, 2026
3.82.0
Mar 14, 2026
3.81.0
Mar 14, 2026
3.80.0
Mar 14, 2026
3.79.0
Mar 14, 2026
3.78.0
Mar 14, 2026
3.77.0
Mar 14, 2026
3.76.0
Mar 14, 2026
3.75.0
Mar 14, 2026
3.74.0
Mar 14, 2026
3.73.0
Mar 14, 2026
3.72.0
Mar 14, 2026
3.71.0
Mar 14, 2026
3.70.0
Mar 14, 2026
3.69.0
Mar 14, 2026
3.68.0
Mar 14, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 0

No tools indexed yet.

Permissions 0

No permissions indexed yet.

Scan Findings 326

critical
AWS Access Key ID found in content/snippets/rust/rs-07-xss-reflect.rs secret_scanner · 95%
info
Tool: get_judges manifest_parser · 70%
info
Tool: evaluate_policy_aware manifest_parser · 70%
info
Tool: list_files manifest_parser · 70%
info
Tool: read_file manifest_parser · 70%
info
Tool: evaluate_with_progress manifest_parser · 70%
info
Tool: scaffold_judge manifest_parser · 70%
info
Tool: scaffold_plugin manifest_parser · 70%
info
Tool: evaluate_public_repo_report manifest_parser · 70%
info
Tool: evaluate_app_builder_flow manifest_parser · 70%
info
Tool: analyze_dependencies manifest_parser · 70%
info
Tool: benchmark_gate manifest_parser · 70%
info
Tool: run_benchmark manifest_parser · 70%
info
Tool: evaluate_batch manifest_parser · 70%
info
Tool: evaluate_then_fix manifest_parser · 70%
info
Tool: evaluate_focused manifest_parser · 70%
info
Tool: session_status manifest_parser · 70%
info
Tool: record_feedback manifest_parser · 70%
info
Tool: evaluate_git_diff manifest_parser · 70%
info
Tool: explain_finding manifest_parser · 70%
info
Tool: triage_finding manifest_parser · 70%
info
Tool: get_finding_stats manifest_parser · 70%
info
Tool: get_suppression_analytics manifest_parser · 70%
info
Tool: list_triaged_findings manifest_parser · 70%
info
Tool: re_evaluate_with_context manifest_parser · 70%
info
Tool: fix_code manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (134) manifest_parser · 80%
low
Tool 'get_judges' has no annotations annotation_checker · 100%
low
Tool 'evaluate_policy_aware' has no annotations annotation_checker · 100%
low
Tool 'list_files' has no annotations annotation_checker · 100%
low
Tool 'read_file' has no annotations annotation_checker · 100%
low
Tool 'evaluate_with_progress' has no annotations annotation_checker · 100%
low
Tool 'scaffold_judge' has no annotations annotation_checker · 100%
low
Tool 'scaffold_plugin' has no annotations annotation_checker · 100%
low
Tool 'evaluate_public_repo_report' has no annotations annotation_checker · 100%
low
Tool 'evaluate_app_builder_flow' has no annotations annotation_checker · 100%
low
Tool 'analyze_dependencies' has no annotations annotation_checker · 100%
low
Tool 'benchmark_gate' has no annotations annotation_checker · 100%
low
Tool 'run_benchmark' has no annotations annotation_checker · 100%
low
Tool 'evaluate_batch' has no annotations annotation_checker · 100%
low
Tool 'evaluate_then_fix' has no annotations annotation_checker · 100%
low
Tool 'evaluate_focused' has no annotations annotation_checker · 100%
low
Tool 'session_status' has no annotations annotation_checker · 100%
low
Tool 'record_feedback' has no annotations annotation_checker · 100%
low
Tool 'evaluate_git_diff' has no annotations annotation_checker · 100%
low
Tool 'explain_finding' has no annotations annotation_checker · 100%
low
Tool 'triage_finding' has no annotations annotation_checker · 100%
low
Tool 'get_finding_stats' has no annotations annotation_checker · 100%
low
Tool 'get_suppression_analytics' has no annotations annotation_checker · 100%
low
Tool 'list_triaged_findings' has no annotations annotation_checker · 100%
low
Tool 're_evaluate_with_context' has no annotations annotation_checker · 100%
low
Tool 'fix_code' has no annotations annotation_checker · 100%
high
Hardcoded API key in tests/judges.test.ts auth_checker · 90%
high
Hardcoded API key in tests/subsystems.test.ts auth_checker · 90%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: @anthropic-ai/sdk@0.81.0 (GHSA-p7fg-763f-g4gf) dependency_analyzer · 95%
high
Hardcoded Password found in CHANGELOG.md secret_scanner · 65%
high
Hardcoded Password found in README.md secret_scanner · 65%
critical
AWS Access Key ID found in content/snippets/go/go-01-auth-bypass.go secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/go/go-07-xss-reflect.go secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/go/go-07-xss-reflect.go secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/go/go-04-hardcoded-secret.go secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/go/go-04-hardcoded-secret.go secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/go/go-02-command-injection.go secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/go/go-02-command-injection.go secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/python/py-03-command-injection.py secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/python/py-03-command-injection.py secret_scanner · 75%
high
Generic API Key Assignment found in content/snippets/python/py-05-hardcoded-secret.py secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/python/py-01-auth-bypass.py secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/typescript/ts-07-xss-reflect.ts secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/typescript/ts-07-xss-reflect.ts secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/typescript/ts-03-hardcoded-secret.ts secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/typescript/ts-03-hardcoded-secret.ts secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/typescript/ts-01-auth-bypass.ts secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/rust/rs-04-hardcoded-secret.rs secret_scanner · 95%
info
package.json metadata manifest_parser · 100%
critical
AWS Access Key ID found in content/snippets/rust/rs-01-auth-bypass.rs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/java/java-01-auth-bypass.java secret_scanner · 95%
high
Hardcoded Password found in content/snippets/java/java-03-hardcoded-secret.java secret_scanner · 65%
high
Hardcoded Password found in content/snippets/java/java-02-sql-injection.java secret_scanner · 65%
critical
AWS Access Key ID found in content/snippets/java/java-07-xss-reflect.java secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/java/java-07-xss-reflect.java secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/java/java-04-path-traversal.java secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-04-hardcoded-secret.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-04-hardcoded-secret.cpp secret_scanner · 75%
high
Hardcoded Password found in content/snippets/cpp/cpp-05-path-traversal.cpp secret_scanner · 65%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-01-auth-bypass.cpp secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-02-command-injection.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-02-command-injection.cpp secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-07-buffer-overflow.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-07-buffer-overflow.cpp secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-08-format-string.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-08-format-string.cpp secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/csharp/cs-03-hardcoded-secret.cs secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/csharp/cs-03-hardcoded-secret.cs secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/csharp/cs-08-command-injection.cs secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/csharp/cs-08-command-injection.cs secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/csharp/cs-06-unsafe-deserialize.cs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/csharp/cs-01-auth-bypass.cs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/csharp/cs-07-xss-reflect.cs secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/csharp/cs-07-xss-reflect.cs secret_scanner · 75%
high
Hardcoded Password found in content/snippets/csharp/cs-04-path-traversal.cs secret_scanner · 65%
critical
Database URL with Password found in content/snippets/javascript/js-03-hardcoded-secret.js secret_scanner · 85%
high
Hardcoded Password found in content/snippets/javascript/js-03-hardcoded-secret.js secret_scanner · 65%
high
Hardcoded Password found in docs/real-world-evidence.md secret_scanner · 65%
high
Generic API Key Assignment found in docs/playground.html secret_scanner · 75%
high
Hardcoded Password found in docs/playground.html secret_scanner · 65%
high
Hardcoded Password found in examples/quickstart.ts secret_scanner · 65%
high
Generic API Key Assignment found in examples/sample-vulnerable-api.ts secret_scanner · 75%
critical
Database URL with Password found in examples/sample-vulnerable-api.ts secret_scanner · 85%
high
Hardcoded Password found in examples/sample-vulnerable-api.ts secret_scanner · 65%
high
Generic API Key Assignment found in scripts/debug-missed.ts secret_scanner · 75%
high
Hardcoded Password found in src/evaluators/false-positive-review.ts secret_scanner · 65%
high
Hardcoded Password found in src/commands/benchmark-coverage-gaps.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-expanded.ts secret_scanner · 95%
high
Generic API Key Assignment found in src/commands/benchmark-expanded.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-expanded.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-expanded.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-quality-ops.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-languages.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-languages.ts secret_scanner · 75%
high
Hardcoded Password found in src/commands/benchmark-languages.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-infrastructure.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 90%
critical
RSA Private Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 95%
critical
Stripe Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 90%
critical
Database URL with Password found in src/commands/benchmark-infrastructure.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-infrastructure.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-security-deep.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-security-deep.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-security-deep.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-security-deep.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-security-deep.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-ai-agents.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-ai-agents.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-ai-agents.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-ai-agents.ts secret_scanner · 85%
high
Generic API Key Assignment found in src/commands/snippet-eval.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-multi-file.ts secret_scanner · 85%
critical
AWS Access Key ID found in src/commands/benchmark-advanced.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-advanced.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-advanced.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-advanced.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-advanced.ts secret_scanner · 65%
high
Generic API Key Assignment found in src/commands/benchmark-expanded-2.ts secret_scanner · 75%
high
Hardcoded Password found in src/commands/benchmark-expanded-2.ts secret_scanner · 65%
high
Generic API Key Assignment found in src/commands/benchmark.ts secret_scanner · 75%
high
Hardcoded Password found in src/commands/benchmark.ts secret_scanner · 65%
high
Hardcoded Password found in src/commands/coach-mode.ts secret_scanner · 65%
medium
Buffer.from base64 in src/evaluators/data-security.ts:403 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in src/commands/benchmark-coverage-gaps.ts:177 entropy_analyzer · 54%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 551 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
high
Permission: shell access detected permission_analyzer · 95%
medium
Permission: database access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: @anthropic-ai/sdk@0.81.0 (GHSA-p7fg-763f-g4gf) dependency_analyzer · 95%
high
Hardcoded Password found in CHANGELOG.md secret_scanner · 65%
high
Hardcoded Password found in README.md secret_scanner · 65%
critical
AWS Access Key ID found in content/snippets/go/go-01-auth-bypass.go secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/go/go-07-xss-reflect.go secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/go/go-07-xss-reflect.go secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/go/go-04-hardcoded-secret.go secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/go/go-04-hardcoded-secret.go secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/go/go-02-command-injection.go secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/go/go-02-command-injection.go secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/python/py-03-command-injection.py secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/python/py-03-command-injection.py secret_scanner · 75%
high
Generic API Key Assignment found in content/snippets/python/py-05-hardcoded-secret.py secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/python/py-01-auth-bypass.py secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/typescript/ts-07-xss-reflect.ts secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/typescript/ts-07-xss-reflect.ts secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/typescript/ts-03-hardcoded-secret.ts secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/typescript/ts-03-hardcoded-secret.ts secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/typescript/ts-01-auth-bypass.ts secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/rust/rs-04-hardcoded-secret.rs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/rust/rs-07-xss-reflect.rs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/rust/rs-01-auth-bypass.rs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/java/java-01-auth-bypass.java secret_scanner · 95%
high
Hardcoded Password found in content/snippets/java/java-03-hardcoded-secret.java secret_scanner · 65%
high
Hardcoded Password found in content/snippets/java/java-02-sql-injection.java secret_scanner · 65%
critical
AWS Access Key ID found in content/snippets/java/java-07-xss-reflect.java secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/java/java-07-xss-reflect.java secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/java/java-04-path-traversal.java secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-04-hardcoded-secret.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-04-hardcoded-secret.cpp secret_scanner · 75%
high
Hardcoded Password found in content/snippets/cpp/cpp-05-path-traversal.cpp secret_scanner · 65%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-01-auth-bypass.cpp secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-02-command-injection.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-02-command-injection.cpp secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-07-buffer-overflow.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-07-buffer-overflow.cpp secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/cpp/cpp-08-format-string.cpp secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/cpp/cpp-08-format-string.cpp secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/csharp/cs-03-hardcoded-secret.cs secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/csharp/cs-03-hardcoded-secret.cs secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/csharp/cs-08-command-injection.cs secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/csharp/cs-08-command-injection.cs secret_scanner · 75%
critical
AWS Access Key ID found in content/snippets/csharp/cs-06-unsafe-deserialize.cs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/csharp/cs-01-auth-bypass.cs secret_scanner · 95%
critical
AWS Access Key ID found in content/snippets/csharp/cs-07-xss-reflect.cs secret_scanner · 95%
high
Generic API Key Assignment found in content/snippets/csharp/cs-07-xss-reflect.cs secret_scanner · 75%
high
Hardcoded Password found in content/snippets/csharp/cs-04-path-traversal.cs secret_scanner · 65%
critical
Database URL with Password found in content/snippets/javascript/js-03-hardcoded-secret.js secret_scanner · 85%
high
Hardcoded Password found in content/snippets/javascript/js-03-hardcoded-secret.js secret_scanner · 65%
high
Hardcoded Password found in docs/real-world-evidence.md secret_scanner · 65%
high
Generic API Key Assignment found in docs/playground.html secret_scanner · 75%
high
Hardcoded Password found in docs/playground.html secret_scanner · 65%
high
Hardcoded Password found in examples/quickstart.ts secret_scanner · 65%
high
Generic API Key Assignment found in examples/sample-vulnerable-api.ts secret_scanner · 75%
critical
Database URL with Password found in examples/sample-vulnerable-api.ts secret_scanner · 85%
high
Hardcoded Password found in examples/sample-vulnerable-api.ts secret_scanner · 65%
high
Generic API Key Assignment found in scripts/debug-missed.ts secret_scanner · 75%
info
SBOM generated: 551 components sbom_generator · 100%
high
Hardcoded Password found in src/evaluators/false-positive-review.ts secret_scanner · 65%
high
Hardcoded Password found in src/commands/benchmark-coverage-gaps.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-expanded.ts secret_scanner · 95%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%
high
Generic API Key Assignment found in src/commands/benchmark-expanded.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-expanded.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-expanded.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-quality-ops.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-languages.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-languages.ts secret_scanner · 75%
high
Hardcoded Password found in src/commands/benchmark-languages.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-infrastructure.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 90%
critical
RSA Private Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 95%
critical
Stripe Key found in src/commands/benchmark-infrastructure.ts secret_scanner · 90%
critical
Database URL with Password found in src/commands/benchmark-infrastructure.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-infrastructure.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-security-deep.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-security-deep.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-security-deep.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-security-deep.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-security-deep.ts secret_scanner · 65%
critical
AWS Access Key ID found in src/commands/benchmark-ai-agents.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-ai-agents.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-ai-agents.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-ai-agents.ts secret_scanner · 85%
high
Generic API Key Assignment found in src/commands/snippet-eval.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-multi-file.ts secret_scanner · 85%
critical
AWS Access Key ID found in src/commands/benchmark-advanced.ts secret_scanner · 95%
critical
AWS Secret Access Key found in src/commands/benchmark-advanced.ts secret_scanner · 90%
high
Generic API Key Assignment found in src/commands/benchmark-advanced.ts secret_scanner · 75%
critical
Database URL with Password found in src/commands/benchmark-advanced.ts secret_scanner · 85%
high
Hardcoded Password found in src/commands/benchmark-advanced.ts secret_scanner · 65%
high
Generic API Key Assignment found in src/commands/benchmark-expanded-2.ts secret_scanner · 75%
high
Hardcoded Password found in src/commands/benchmark-expanded-2.ts secret_scanner · 65%
high
Generic API Key Assignment found in src/commands/benchmark.ts secret_scanner · 75%
high
Hardcoded Password found in src/commands/benchmark.ts secret_scanner · 65%
high
Hardcoded Password found in src/commands/coach-mode.ts secret_scanner · 65%
medium
Buffer.from base64 in src/evaluators/data-security.ts:403 entropy_analyzer · 75%
medium
High-entropy string (5.95 bits/char) in src/commands/benchmark-coverage-gaps.ts:177 entropy_analyzer · 54%
info
SLSA Build Level 3 detected slsa_assessor · 85%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: get_judges manifest_parser · 70%
info
Tool: evaluate_policy_aware manifest_parser · 70%
info
Tool: list_files manifest_parser · 70%
info
Tool: read_file manifest_parser · 70%
info
Tool: evaluate_with_progress manifest_parser · 70%
info
Tool: scaffold_judge manifest_parser · 70%
info
Tool: scaffold_plugin manifest_parser · 70%
info
Tool: evaluate_public_repo_report manifest_parser · 70%
info
Tool: evaluate_app_builder_flow manifest_parser · 70%
info
Tool: analyze_dependencies manifest_parser · 70%
info
Tool: benchmark_gate manifest_parser · 70%
info
Tool: run_benchmark manifest_parser · 70%
info
Tool: evaluate_batch manifest_parser · 70%
info
Tool: evaluate_then_fix manifest_parser · 70%
info
Tool: evaluate_focused manifest_parser · 70%
info
Tool: session_status manifest_parser · 70%
info
Tool: record_feedback manifest_parser · 70%
info
Tool: evaluate_git_diff manifest_parser · 70%
info
Tool: explain_finding manifest_parser · 70%
info
Tool: triage_finding manifest_parser · 70%
info
Tool: get_finding_stats manifest_parser · 70%
info
Tool: get_suppression_analytics manifest_parser · 70%
info
Tool: list_triaged_findings manifest_parser · 70%
info
Tool: re_evaluate_with_context manifest_parser · 70%
info
Tool: fix_code manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (134) manifest_parser · 80%
low
Tool 'get_judges' has no annotations annotation_checker · 100%
low
Tool 'evaluate_policy_aware' has no annotations annotation_checker · 100%
low
Tool 'list_files' has no annotations annotation_checker · 100%
low
Tool 'read_file' has no annotations annotation_checker · 100%
low
Tool 'evaluate_with_progress' has no annotations annotation_checker · 100%
low
Tool 'scaffold_judge' has no annotations annotation_checker · 100%
low
Tool 'scaffold_plugin' has no annotations annotation_checker · 100%
low
Tool 'evaluate_public_repo_report' has no annotations annotation_checker · 100%
low
Tool 'evaluate_app_builder_flow' has no annotations annotation_checker · 100%
low
Tool 'analyze_dependencies' has no annotations annotation_checker · 100%
low
Tool 'benchmark_gate' has no annotations annotation_checker · 100%
low
Tool 'run_benchmark' has no annotations annotation_checker · 100%
low
Tool 'evaluate_batch' has no annotations annotation_checker · 100%
low
Tool 'evaluate_then_fix' has no annotations annotation_checker · 100%
low
Tool 'evaluate_focused' has no annotations annotation_checker · 100%
low
Tool 'session_status' has no annotations annotation_checker · 100%
low
Tool 'record_feedback' has no annotations annotation_checker · 100%
low
Tool 'evaluate_git_diff' has no annotations annotation_checker · 100%
low
Tool 'explain_finding' has no annotations annotation_checker · 100%
low
Tool 'triage_finding' has no annotations annotation_checker · 100%
low
Tool 'get_finding_stats' has no annotations annotation_checker · 100%
low
Tool 'get_suppression_analytics' has no annotations annotation_checker · 100%
low
Tool 'list_triaged_findings' has no annotations annotation_checker · 100%
low
Tool 're_evaluate_with_context' has no annotations annotation_checker · 100%
low
Tool 'fix_code' has no annotations annotation_checker · 100%
high
Hardcoded API key in tests/judges.test.ts auth_checker · 90%
high
Hardcoded API key in tests/subsystems.test.ts auth_checker · 90%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%