Sample Audit Report — Demonstration Fixture Data

Target: shapigpt/vibecodedetector-worker (dc30f3a)

This report demonstrates evidence-backed findings, scanner coverage bounds, and verified coding-agent prompts generated from committed test fixtures in the worker analysis engine.

PRODUCEABLE SOFTWARE ASSURANCE

AI Software Assurance Report

Repository: shapigpt/vibecodedetector-worker • Commit: dc30f3a0937a

Launch Readiness Posture

Needs Review

Top Recommended Remediation Actions

Refactor Dynamic Eval Execution Sink: Replace eval() in fixtures/risky/app.js:5 with static dictionary lookup.
Handle Swallowed Exceptions: Add error logging or propagation in fixtures/risky/app.js:11 catch block.

Coverage & Limitations Notice

Static Analysis Completed: VCD AST Engine v1.0.0 evaluated 2 files (29 lines of code).
Deployed Public URL Scan: Currently unavailable / waitlist-only. Passive repository inspection only.
Scope Limitations: Dynamic runtime penetration testing and whole-repository execution are excluded in V1.

medium

Dynamic Eval Execution Sink

fixtures/risky/app.js:5

Collapse ▲

AST parser detected direct eval() call expression in application request handler.

Why It Matters

Dynamic code evaluation allows arbitrary code execution if inputs are untrusted.

Redacted Evidence Snippet

eval("console.log('Dynamic evaluation')");

Recommended Remediation

Refactor dynamic evaluation to safe static lookup functions or structured parsers.

Safe Coding-Agent Prompt

Replace eval() in fixtures/risky/app.js line 5 with a static configuration dictionary lookup.

medium

Swallowed Exception Catch Block

fixtures/risky/app.js:11

Expand ▼

Positive Controls & Passed Verification Checks

✓

VCD AST Parser Engine (v1.0.0): Static analysis parser successfully completed AST evaluation over 2 JavaScript files without syntax failure or unhandled exceptions.

Sample Rescan Comparison Engine Demonstration

Every Founding Full Project Review includes 1 rescan within 7 days. Findings are tracked by stable fingerprint across commit revisions:

✓ 1 Fixed

! 1 Still Open

0 New

Get Your AI App Launch Readiness Audit

Order a Founding Full Project Review for $5 one-time (first 50 projects only). Includes whole-repository evidence scanning, prioritized remediation, coding-agent prompts, and 1 rescan within 7 days.