Transparent sample output
AI App Pre-Launch Health Report
This report was generated from a small synthetic test project. It demonstrates the report structure and evidence language, not the likely number or severity of findings in another repository.
- Generated
- 2026-07-13
- Inspection mode
- Local read-only static inspection
- Project code executed
- No
01
Summary
Scope: 2 source files, approximately 8 source lines, and 1 test file from a deliberately small fixture. The sample is designed to show wording and traceability, not benchmark coverage.
02
Positive signals
- One GitHub Actions workflow file detected
- One JavaScript or TypeScript test file detected
- Build, lint, and test package scripts available
- Root dependency lockfile present
- TypeScript strict mode enabled in the parsed configuration
- Root README, license, and security policy present
03
Finding
Raw HTML injection path
- Location
src/main.ts:2- Why it matters
- Raw HTML insertion can create cross-site scripting risk when content is not trusted.
- Recommended next step
- Trace the data source and sanitize untrusted HTML with a maintained allowlist-based sanitizer.
04
Limitations
- This automated health check is not a security certification, compliance audit, or penetration test.
- The checker does not execute tests, builds, package managers, or project scripts.
- Pattern matches may include false positives and require contextual review.
- Absence of a finding does not prove absence of defects or vulnerabilities.
- Runtime behavior, infrastructure, production data, and files outside the selected folder are not inspected.
Try the free first step