11 KiB
11 KiB
InsightFlow 代码审查报告
扫描时间: Sat Feb 28 03:03:08 AM CST 2026 扫描文件数: 40
扫描的文件列表
/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py/root/.openclaw/workspace/projects/insightflow/backend/ai_manager.py/root/.openclaw/workspace/projects/insightflow/backend/api_key_manager.py/root/.openclaw/workspace/projects/insightflow/backend/collaboration_manager.py/root/.openclaw/workspace/projects/insightflow/backend/db_manager.py/root/.openclaw/workspace/projects/insightflow/backend/developer_ecosystem_manager.py/root/.openclaw/workspace/projects/insightflow/backend/document_processor.py/root/.openclaw/workspace/projects/insightflow/backend/enterprise_manager.py/root/.openclaw/workspace/projects/insightflow/backend/entity_aligner.py/root/.openclaw/workspace/projects/insightflow/backend/export_manager.py/root/.openclaw/workspace/projects/insightflow/backend/growth_manager.py/root/.openclaw/workspace/projects/insightflow/backend/image_processor.py/root/.openclaw/workspace/projects/insightflow/backend/init_db.py/root/.openclaw/workspace/projects/insightflow/backend/knowledge_reasoner.py/root/.openclaw/workspace/projects/insightflow/backend/llm_client.py/root/.openclaw/workspace/projects/insightflow/backend/localization_manager.py/root/.openclaw/workspace/projects/insightflow/backend/main.py/root/.openclaw/workspace/projects/insightflow/backend/multimodal_entity_linker.py/root/.openclaw/workspace/projects/insightflow/backend/multimodal_processor.py/root/.openclaw/workspace/projects/insightflow/backend/neo4j_manager.py/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py/root/.openclaw/workspace/projects/insightflow/backend/oss_uploader.py/root/.openclaw/workspace/projects/insightflow/backend/performance_manager.py/root/.openclaw/workspace/projects/insightflow/backend/plugin_manager.py/root/.openclaw/workspace/projects/insightflow/backend/rate_limiter.py/root/.openclaw/workspace/projects/insightflow/backend/search_manager.py/root/.openclaw/workspace/projects/insightflow/backend/security_manager.py/root/.openclaw/workspace/projects/insightflow/backend/subscription_manager.py/root/.openclaw/workspace/projects/insightflow/backend/tenant_manager.py/root/.openclaw/workspace/projects/insightflow/backend/test_multimodal.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase7_task6_8.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task1.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task2.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task4.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task5.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task6.py/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task8.py/root/.openclaw/workspace/projects/insightflow/backend/tingwu_client.py/root/.openclaw/workspace/projects/insightflow/backend/workflow_manager.py/root/.openclaw/workspace/projects/insightflow/code_reviewer.py
问题分类统计
- 🔴 Critical: 8
- 🟠 Error: 0
- 🟡 Warning: 31
- 🔵 Info: 3349
- 总计: 3388
✅ 已自动修复的问题
无
⚠️ 需要人工确认的问题
/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:245[warning] CORS 配置允许所有来源 (*),生产环境应限制具体域名/root/.openclaw/workspace/projects/insightflow/code_reviewer.py:211[warning] CORS 配置允许所有来源 (*),生产环境应限制具体域名/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:608[critical] 潜在的 SQL 注入风险,使用参数化查询/root/.openclaw/workspace/projects/insightflow/backend/main.py:339[warning] CORS 配置允许所有来源 (*),生产环境应限制具体域名/root/.openclaw/workspace/projects/insightflow/backend/developer_ecosystem_manager.py:496[critical] 潜在的 SQL 注入风险,使用参数化查询/root/.openclaw/workspace/projects/insightflow/backend/security_manager.py:58[critical] 硬编码密钥,应使用环境变量/root/.openclaw/workspace/projects/insightflow/backend/localization_manager.py:1435[critical] 潜在的 SQL 注入风险,使用参数化查询/root/.openclaw/workspace/projects/insightflow/backend/plugin_manager.py:238[critical] 潜在的 SQL 注入风险,使用参数化查询/root/.openclaw/workspace/projects/insightflow/backend/test_multimodal.py:136[critical] 潜在的 SQL 注入风险,使用参数化查询/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task6.py:531[critical] 硬编码 API Key,应使用环境变量/root/.openclaw/workspace/projects/insightflow/backend/search_manager.py:2097[critical] 潜在的 SQL 注入风险,使用参数化查询
📋 其他发现的问题
duplicate_import
/root/.openclaw/workspace/projects/insightflow/backend/tingwu_client.py:73- 重复导入: from alibabacloud_tea_openapi import models as open_api_models/root/.openclaw/workspace/projects/insightflow/backend/tingwu_client.py:74- 重复导入: from alibabacloud_tingwu20230930 import models as tingwu_models/root/.openclaw/workspace/projects/insightflow/backend/tingwu_client.py:75- 重复导入: from alibabacloud_tingwu20230930.client import Client as TingwuSDKClient/root/.openclaw/workspace/projects/insightflow/backend/main.py:1177- 重复导入: import re/root/.openclaw/workspace/projects/insightflow/backend/knowledge_reasoner.py:122- 重复导入: import re/root/.openclaw/workspace/projects/insightflow/backend/ai_manager.py:446- 重复导入: import re/root/.openclaw/workspace/projects/insightflow/backend/llm_client.py:126- 重复导入: import re/root/.openclaw/workspace/projects/insightflow/backend/export_manager.py:282- 重复导入: import csv/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task8.py:325- 重复导入: import random
extra_blank_line
/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:14- 多余的空行/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:28- 多余的空行/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:408- 多余的空行/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:445- 多余的空行/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:488- 多余的空行/root/.openclaw/workspace/projects/insightflow/code_reviewer.py:11- 多余的空行/root/.openclaw/workspace/projects/insightflow/code_reviewer.py:24- 多余的空行/root/.openclaw/workspace/projects/insightflow/code_reviewer.py:315- 多余的空行/root/.openclaw/workspace/projects/insightflow/code_reviewer.py:340- 多余的空行/root/.openclaw/workspace/projects/insightflow/backend/test_phase8_task5.py:35- 多余的空行- ... 还有 1081 个类似问题
line_too_long
/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:960- 行长度 147 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/db_manager.py:168- 行长度 125 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/db_manager.py:704- 行长度 129 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/main.py:4571- 行长度 130 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/developer_ecosystem_manager.py:963- 行长度 122 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/llm_client.py:109- 行长度 131 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/localization_manager.py:783- 行长度 121 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/localization_manager.py:785- 行长度 122 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/localization_manager.py:897- 行长度 121 超过 120 字符/root/.openclaw/workspace/projects/insightflow/backend/localization_manager.py:975- 行长度 121 超过 120 字符- ... 还有 4 个类似问题
magic_number
/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:50- 魔法数字 8,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:94- 魔法数字 2,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:114- 魔法数字 120,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:116- 魔法数字 120,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:126- 魔法数字 2,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:299- 魔法数字 8,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:315- 魔法数字 8,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:400- 魔法数字 10,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:402- 魔法数字 10,建议提取为常量/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:403- 魔法数字 10,建议提取为常量- ... 还有 2178 个类似问题
missing_type_annotation
/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2736- 函数 '_row_to_alert_rule' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2758- 函数 '_row_to_alert_channel' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2774- 函数 '_row_to_alert' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2796- 函数 '_row_to_suppression_rule' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2808- 函数 '_row_to_resource_metric' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2821- 函数 '_row_to_capacity_plan' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2835- 函数 '_row_to_auto_scaling_policy' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2854- 函数 '_row_to_scaling_event' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2870- 函数 '_row_to_health_check' 的参数 'row' 缺少类型注解/root/.openclaw/workspace/projects/insightflow/backend/ops_manager.py:2889- 函数 '_row_to_health_check_result' 的参数 'row' 缺少类型注解- ... 还有 60 个类似问题
unused_import
/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:10- 未使用的导入: sys/root/.openclaw/workspace/projects/insightflow/auto_code_fixer.py:12- 未使用的导入: Any/root/.openclaw/workspace/projects/insightflow/code_reviewer.py:9- 未使用的导入: Any/root/.openclaw/workspace/projects/insightflow/backend/workflow_manager.py:16- 未使用的导入: urllib.request/root/.openclaw/workspace/projects/insightflow/backend/plugin_manager.py:14- 未使用的导入: urllib.request