low Tool 'test' has no annotations annotation_checker · 100%
info Tool 'announce_work' annotations are consistent annotation_checker · 80%
info Tool 'post_to_thread' annotations are consistent annotation_checker · 80%
info Tool 'propose_resolution' annotations are consistent annotation_checker · 80%
info Tool 'approve_resolution' annotations are consistent annotation_checker · 80%
info Tool 'contest_resolution' annotations are consistent annotation_checker · 80%
info Tool 'close_thread' annotations are consistent annotation_checker · 80%
info Tool 'cancel_thread' annotations are consistent annotation_checker · 80%
info Tool 'get_thread' annotations are consistent annotation_checker · 80%
info Tool 'get_thread_updates' annotations are consistent annotation_checker · 80%
info Tool 'list_threads' annotations are consistent annotation_checker · 80%
info Tool 'log_action_summary' annotations are consistent annotation_checker · 80%
info Tool 'wait_for_message' annotations are consistent annotation_checker · 80%
medium Tool 'get_queued_messages' claims destructive but name implies read-only operation annotation_checker · 80%
info Tool 'mqtt_publish' annotations are consistent annotation_checker · 80%
info Tool 'set_dependency_map' annotations are consistent annotation_checker · 80%
info Tool 'get_blast_radius' annotations are consistent annotation_checker · 80%
info Tool 'get_module_info' annotations are consistent annotation_checker · 80%
info Tool 'hot_files' annotations are consistent annotation_checker · 80%
info Tool 'get_session_files' annotations are consistent annotation_checker · 80%
info Tool 'check_file_conflict' annotations are consistent annotation_checker · 80%
info Tool 'coordinator_status' annotations are consistent annotation_checker · 80%
info Tool 'wait_for_peers' annotations are consistent annotation_checker · 80%
info Tool 'register_agent' annotations are consistent annotation_checker · 80%
info Tool 'list_agents' annotations are consistent annotation_checker · 80%
info Tool 'heartbeat' annotations are consistent annotation_checker · 80%
info Tool 'agent_activity' annotations are consistent annotation_checker · 80%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/integration/health-ready-encryption.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/unit/boot-deps-injection.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/unit/oidc-provider.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/unit/boot.test.ts auth_checker · 95%
high Hardcoded OAuth client ID in swoofer-mcp-coordinator-b341906/tests/unit/channel-harness-self-test.ts auth_checker · 85%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/unit/github-app-provider.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/unit/boot-di-wiring.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/unit/google-provider.test.ts auth_checker · 95%
high Hardcoded OAuth client secret in swoofer-mcp-coordinator-b341906/tests/e2e/helpers/coordinator-fixture.ts auth_checker · 95%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Vulnerable dependency: tar@7.5.19 (GHSA-r292-9mhp-454m) dependency_analyzer · 95%
medium Vulnerable dependency: @modelcontextprotocol/client@2.0.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@4.1.10 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: vitest@4.1.0 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: github.com/eclipse/paho.mqtt.golang@1.5.0 (GHSA-32fw-gq77-f2f2) dependency_analyzer · 95%
medium Vulnerable dependency: github.com/eclipse/paho.mqtt.golang@1.5.0 (GO-2025-4173) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GHSA-qxp5-gwg8-xv66) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GHSA-vvgc-356p-c3xw) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2024-3333) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2025-3503) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2025-3595) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-4440) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-4441) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-4918) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5025) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5026) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5027) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5028) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5029) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5030) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-5942) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-6603) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-6610) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-6611) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-6612) dependency_analyzer · 95%
medium Vulnerable dependency: golang.org/x/net@0.27.0 (GO-2026-6617) dependency_analyzer · 95%
medium Hex string literal (>50 chars) in swoofer-mcp-coordinator-b341906/tests/unit/master-key.test.ts:268 entropy_analyzer · 70%
medium Buffer.from base64 in swoofer-mcp-coordinator-b341906/tests/unit/rotate-jwt-secret.test.ts:31 entropy_analyzer · 75%
medium Buffer.from base64 in swoofer-mcp-coordinator-b341906/tests/unit/rotate-jwt-secret.test.ts:130 entropy_analyzer · 75%
info package.json metadata manifest_parser · 100%
info Tool: test manifest_parser · 75%
info Tool: announce_work manifest_parser · 85%
info Tool: post_to_thread manifest_parser · 85%
info Tool: propose_resolution manifest_parser · 85%
info Tool: approve_resolution manifest_parser · 85%
info Tool: contest_resolution manifest_parser · 85%
info Tool: close_thread manifest_parser · 85%
info Tool: cancel_thread manifest_parser · 85%
info Tool: get_thread manifest_parser · 85%
info Tool: get_thread_updates manifest_parser · 85%
info Tool: list_threads manifest_parser · 85%
info Tool: log_action_summary manifest_parser · 85%
info Tool: wait_for_message manifest_parser · 85%
info Tool: get_queued_messages manifest_parser · 85%
info Tool: mqtt_publish manifest_parser · 85%
info Tool: set_dependency_map manifest_parser · 85%
info Tool: get_blast_radius manifest_parser · 85%
info Tool: get_module_info manifest_parser · 85%
info Tool: hot_files manifest_parser · 85%
info Tool: get_session_files manifest_parser · 85%
info Tool: check_file_conflict manifest_parser · 85%
info Tool: coordinator_status manifest_parser · 85%
info Tool: wait_for_peers manifest_parser · 85%
info Tool: register_agent manifest_parser · 85%
info Tool: list_agents manifest_parser · 85%
info Tool: heartbeat manifest_parser · 85%
info Tool: agent_activity manifest_parser · 85%
info Transport: stdio manifest_parser · 90%
info Required env vars (95) manifest_parser · 80%
medium Hardcoded OAuth client ID in swoofer-mcp-coordinator-b341906/tests/unit/channel-harness-self-test.ts oauth_scope_analyzer · 80%
high High-risk OAuth scope: admin oauth_scope_analyzer · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium Permission: network access detected permission_analyzer · 90%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
medium Permission: database access detected permission_analyzer · 90%
low Permission: env_vars access detected permission_analyzer · 90%
info SBOM generated: 111 components sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%