Winnowbeta
Preview mode. Showing top 3 of 24 findings. 21 locked.
Scan report

Angriff36/Capsule-Pro

Suspiciously shallow implementation. 24 finding(s) across 19 file(s). 517 feature claim(s) extracted; 30 appear unimplemented or mocked.

5/8/2026, 8:28:07 AM·993 files analyzed·24 findings·517 claims
67
Integrity
Shallow
Feature auditAll findingsGenerate Ralph loop Export PDF Export Markdown
Placeholder
78
Claim mismatch
44
Skeleton CRUD
100
Fake integration
100
Tests
60
Security theater
10
Dashboard illusion
100
File tree
Files color-coded by finding density. Click a file to see its findings.
24 findings across 19 files (993 total scanned)
High risk Some findings Clean
  • apps21
  • api18
  • app3
  • e2e3
  • workflows3
Language breakdown
File count, lines of code, and finding density per language. Density = findings per 100 lines.
FilesDistributionLinesDens.
TypeScript
192
17 findings
52.0K
0.0
Markdown
3
186
0.0
Other
2
618
1.1
YAML
2
12
0.0
JavaScript
1
26
0.0
Weakest feature claims
Claims with the least implementation evidence.
  • organization",
    apps/app/app/(authenticated)/analytics/activity-feed/page.tsx:15
    Missing
    Verdict explanation locked.
  • organization
    apps/app/app/(authenticated)/analytics/activity-feed/page.tsx:38
    Missing
    Verdict explanation locked.
  • organization to view the multi-location
    apps/app/app/(authenticated)/analytics/multi-location/page.tsx:122
    Missing
    Verdict explanation locked.
  • workspace
    apps/app/app/(authenticated)/command-board/page.tsx:107
    Missing
    Verdict explanation locked.
  • workspace to get into the work
    apps/app/app/(authenticated)/inventory/page.tsx:87
    Missing
    Verdict explanation locked.
  • organization ID found</p>
    apps/app/app/(authenticated)/kitchen/page.tsx:14
    Missing
    Verdict explanation locked.
  • organization found</p>
    apps/app/app/(authenticated)/scheduling/requests/page.tsx:54
    Missing
    Verdict explanation locked.
  • Organization ID{" "}
    apps/app/app/(authenticated)/settings/integrations/page.tsx:1211
    Missing
    Verdict explanation locked.
  • workspace and their roles
    apps/app/app/(authenticated)/settings/team/page.tsx:55
    Missing
    Verdict explanation locked.
  • organization={tenant?
    apps/app/app/(unauthenticated)/sign/contract/[token]/page.tsx:183
    Missing
    Verdict explanation locked.
Top risk files
Files with the most findings.
  • apps/api/middleware/api-key-auth.ts4 findings
  • e2e/workflows/authentication.workflow.spec.ts3 findings
  • apps/app/app/(authenticated)/kitchen/recipes/page.tsx1 finding
  • apps/app/app/(authenticated)/tools/battleboards/page.tsx1 finding
  • apps/app/app/(authenticated)/tools/battleboards/battleboards-client.tsx1 finding
  • apps/api/__tests__/sales-reporting/generate.test.ts1 finding
  • apps/api/app/api/integrations/webhooks/[id]/route.ts1 finding
  • apps/api/app/api/cron/webhook-retry/route.ts1 finding
  • apps/api/app/api/integrations/webhooks/delivery-logs/route.ts1 finding
  • apps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts1 finding
Security theater
Claimed protections without enforcement.
  • highapps/api/middleware/api-key-auth.ts:300security_theater.api_key_scopes_never_enforced
    Snippet and explanation locked. Unlock to view.
  • highapps/api/middleware/api-key-auth.ts:311security_theater.api_key_scopes_never_enforced
    Snippet and explanation locked. Unlock to view.
  • highapps/api/middleware/api-key-auth.ts:322security_theater.api_key_scopes_never_enforced
    Snippet and explanation locked. Unlock to view.
  • highapps/api/app/api/integrations/webhooks/[id]/route.ts:1webhook.no_signature_verification
    Snippet and explanation locked. Unlock to view.
  • highapps/api/app/api/cron/webhook-retry/route.ts:1webhook.no_signature_verification
    Snippet and explanation locked. Unlock to view.
  • highapps/api/middleware/api-key-auth.ts:266security_theater.api_key_scopes_never_enforced
    Snippet and explanation locked. Unlock to view.
  • highapps/api/app/api/integrations/webhooks/delivery-logs/route.ts:1webhook.no_signature_verification
    Snippet and explanation locked. Unlock to view.
  • highapps/api/app/api/integrations/webhooks/dlq/[id]/resolve/route.ts:1webhook.no_signature_verification
    Snippet and explanation locked. Unlock to view.
Dashboard illusion
UI that looks live but uses fabricated values.
Nothing flagged in this category.
AI slop residue
Agent-style comments in production source.
  • highapps/app/app/(authenticated)/kitchen/recipes/page.tsx:548ai.production_should_phrase
    Snippet and explanation locked. Unlock to view.
  • highapps/app/app/(authenticated)/tools/battleboards/page.tsx:9ai.production_should_phrase
    Snippet and explanation locked. Unlock to view.
  • highapps/app/app/(authenticated)/tools/battleboards/battleboards-client.tsx:275ai.production_should_phrase
    Snippet and explanation locked. Unlock to view.
Finding distribution
security theater
17
test credibility
4
ai slop
3
Unlock the full report

21 of 24 findings are locked. Unlock to see every finding, snippet, feature-claim verdict, the AI narrative, and the PDF export.(public-preview)

Trial scans expire after 7 days unless unlocked. Need a different plan? See pricing.