Reviews repositories, pull requests, diffs, and agent-generated code for reward hacking, fake completion, defensive theater, architectural bypasses, weakened guarantees, hidden fallbacks, and misleading abstractions.
98
97%
Does it follow best practices?
Impact
100%
1.09xAverage score across 6 eval scenarios
Passed
No known issues
#!/usr/bin/env bash
set -u
status=0
run_scan() {
local label="$1"
local executable="$2"
shift 2
if ! command -v "$executable" >/dev/null 2>&1; then
printf 'SKIP %s: %s not found\n' "$label" "$executable" >&2
return 0
fi
printf 'RUN %s\n' "$label" >&2
"$executable" "$@" || status=1
}
run_scan "ruff" ruff check .
run_scan "semgrep" semgrep scan .
run_scan "basedpyright" basedpyright .
run_scan "vulture" vulture .
run_scan "import-linter" lint-imports
exit "$status"