low Tool '${toolName}' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_quality_gate' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_observe_screen' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_execute_ui_action' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_computer_use_loop' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_plan_change' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_ship_feature_flow' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_rag_upsert' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_rag_search' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_convert_react_shadcn' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_make_react_page' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_apply_files' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_review_uiux' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_repo_workflow_summary' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_ship_react_page' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_next_smoke' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_build_acceptance_pack' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_embed_content' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_generate_ui' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_build_review_bundle' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_refine_ui' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_detect_shadcn_paths' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_list_models' has no annotations annotation_checker · 100%
low Tool 'shadcn_brief_scan_workspace_profile' has no annotations annotation_checker · 100%
medium OAuth implementation without PKCE auth_checker · 75%
info Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium Suspicious package name: react-dom dependency_analyzer · 60%
medium Vulnerable dependency: vitest@4.1.2 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-2xp9-vwfh-vxw4) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-4633-3j49-mh5q) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-4c39-4ccg-62r3) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-68g3-v927-f742) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-6gpp-xcg3-4w24) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-89xv-2m56-2m9x) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-955p-x3mx-jcvp) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-m99w-x7hq-7vfj) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-p293-qw3h-jr36) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-p9j2-gv94-2wf4) dependency_analyzer · 95%
medium Vulnerable dependency: next@16.2.6 (GHSA-q8wf-6r8g-63ch) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5.10 (GHSA-6g55-p6wh-862q) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5.10 (GHSA-fxqj-rqcc-2cmp) dependency_analyzer · 95%
medium Vulnerable dependency: postcss@8.5.10 (GHSA-r28c-9q8g-f849) dependency_analyzer · 95%
medium High-entropy string (5.77 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:611 entropy_analyzer · 51%
medium High-entropy string (5.73 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:615 entropy_analyzer · 50%
medium High-entropy string (5.92 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:704 entropy_analyzer · 53%
medium High-entropy string (5.82 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:738 entropy_analyzer · 52%
medium High-entropy string (5.71 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/app/workbench-data.ts:743 entropy_analyzer · 50%
medium High-entropy string (5.87 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:878 entropy_analyzer · 53%
medium High-entropy string (6.53 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:903 entropy_analyzer · 63%
medium High-entropy string (5.81 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:920 entropy_analyzer · 52%
medium High-entropy string (5.77 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:954 entropy_analyzer · 51%
medium High-entropy string (5.79 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1020 entropy_analyzer · 51%
medium High-entropy string (5.94 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1090 entropy_analyzer · 54%
medium High-entropy string (5.80 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1315 entropy_analyzer · 51%
medium High-entropy string (6.11 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1504 entropy_analyzer · 56%
medium High-entropy string (5.72 bits/char) in xiaojiou176-open-shadcn-brief-590711f/apps/web/lib/i18n/messages.ts:1539 entropy_analyzer · 50%
info package.json metadata manifest_parser · 100%
info Tool: ${toolName} manifest_parser · 85%
info Tool: shadcn_brief_quality_gate manifest_parser · 85%
info Tool: shadcn_brief_observe_screen manifest_parser · 85%
info Tool: shadcn_brief_execute_ui_action manifest_parser · 85%
info Tool: shadcn_brief_computer_use_loop manifest_parser · 85%
info Tool: shadcn_brief_plan_change manifest_parser · 85%
info Tool: shadcn_brief_ship_feature_flow manifest_parser · 85%
info Tool: shadcn_brief_rag_upsert manifest_parser · 85%
info Tool: shadcn_brief_rag_search manifest_parser · 85%
info Tool: shadcn_brief_convert_react_shadcn manifest_parser · 85%
info Tool: shadcn_brief_make_react_page manifest_parser · 85%
info Tool: shadcn_brief_apply_files manifest_parser · 85%
info Tool: shadcn_brief_review_uiux manifest_parser · 85%
info Tool: shadcn_brief_repo_workflow_summary manifest_parser · 85%
info Tool: shadcn_brief_ship_react_page manifest_parser · 85%
info Tool: shadcn_brief_next_smoke manifest_parser · 85%
info Tool: shadcn_brief_build_acceptance_pack manifest_parser · 85%
info Tool: shadcn_brief_embed_content manifest_parser · 85%
info Tool: shadcn_brief_generate_ui manifest_parser · 85%
info Tool: shadcn_brief_build_review_bundle manifest_parser · 85%
info Tool: shadcn_brief_refine_ui manifest_parser · 85%
info Tool: shadcn_brief_detect_shadcn_paths manifest_parser · 85%
info Tool: shadcn_brief_list_models manifest_parser · 85%
info Tool: shadcn_brief_scan_workspace_profile manifest_parser · 85%
info Transport: stdio manifest_parser · 90%
info Required env vars (100) manifest_parser · 80%
info Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium Permission: network access detected permission_analyzer · 80%
low Permission: filesystem access detected permission_analyzer · 90%
high Permission: shell access detected permission_analyzer · 95%
low Permission: env_vars access detected permission_analyzer · 90%
info SBOM generated: 712 components sbom_generator · 100%
medium No build provenance detected (SLSA L0) slsa_assessor · 90%