Audit candidate: tinyhumansai/openhuman

[xiaolai]

Manually queued from GitHub Trending (today) on 2026-05-21.

• Stars: 23659
• NL artifacts (path-pattern probe): 39
• Last push: 2026-05-21
• Vendor-default filter: OK

Source: trending-tab manual selection. The auditor-audit workflow fires when the audit-ready label is applied.

[github-actions]

Security Gate: BLOCKED

Critical security patterns detected in 11 file(s).
High-risk patterns in 3 file(s).

This repo will be audited for NL quality but will NOT receive automated PRs.
Manual security review required before any contributions.

[github-actions]

Audit Complete: tinyhumansai/openhuman

NL Score: 63/100 | Security: BLOCKED | Artifacts: 39 | Strategy: batched

NLPM Audit: tinyhumansai/openhuman

Date: 2026-04-06 | Artifacts: 39 | Strategy: batched
NL Score: 63/100
Security: BLOCKED
Bugs: 2 | Quality Issues: 30 | Security Findings: 8

NL Score Summary

File	Type	Score	Top Issue
src/openhuman/agent/agents/tools_agent/prompt.md	agent-prompt	16	No frontmatter + no examples + no output format
src/openhuman/agent/agents/archivist/prompt.md	agent-prompt	16	No frontmatter + no examples + no output format
src/openhuman/agent/agents/tool_maker/prompt.md	agent-prompt	18	No frontmatter + no examples + no output format
src/openhuman/agent/agents/researcher/prompt.md	agent-prompt	18	No frontmatter + no examples + no output format
src/openhuman/agent/agents/critic/prompt.md	agent-prompt	20	No frontmatter + no examples + no output format
src/openhuman/agent/agents/code_executor/prompt.md	agent-prompt	20	No frontmatter + no examples + no output format
src/openhuman/agent/agents/morning_briefing/prompt.md	agent-prompt	21	No frontmatter + no examples + partial output format
src/openhuman/agent/agents/integrations_agent/prompt.md	agent-prompt	25	No frontmatter + no examples
src/openhuman/agent/agents/skill_creator/prompt.md	agent-prompt	26	No frontmatter + no examples
src/openhuman/agent/agents/planner/prompt.md	agent-prompt	26	No frontmatter + no examples + agent ID table gap
src/openhuman/agent/agents/trigger_reactor/prompt.md	agent-prompt	28	No frontmatter + no examples
src/openhuman/agent/agents/summarizer/prompt.md	agent-prompt	30	No frontmatter + no examples
src/openhuman/agent/agents/orchestrator/prompt.md	agent-prompt	39	No frontmatter + vague quantifiers
src/openhuman/agent/agents/crypto_agent/prompt.md	agent-prompt	41	No frontmatter + vague quantifiers
src/openhuman/agent/agents/help/prompt.md	agent-prompt	43	No frontmatter
src/openhuman/agent/agents/trigger_triage/prompt.md	agent-prompt	43	No frontmatter
src/openhuman/agent/agents/welcome/prompt.md	agent-prompt	43	No frontmatter
.agents/agents/ship-and-babysit.md	agent	69	No examples + no output format
.agents/agents/pr-manager-lite.md	agent	81	No examples
.claude/agents/pr-manager-lite.md	agent	83	No examples
.claude/agents/qualityqueen.md	agent	86	Excessive vague quantifiers (-14)
.claude/agents/memory-keeper.md	agent	87	Vague quantifiers + limited examples
.claude/agents/build-agent.md	agent	90	No explicit output format
.claude/agents/test-agent.md	agent	90	No explicit output format
.claude/agents/dev-agent.md	agent	90	No explicit output format
.claude/agents/deploy-agent.md	agent	90	No explicit output format
.claude/agents/mobile-agent.md	agent	90	No explicit output format
.claude/agents/pr-manager.md	agent	91	Limited interaction examples
.claude/agents/designguru.md	agent	91	Stale model pin + limited examples
.agents/agents/pr-manager.md	agent	91	Limited examples
.codex/commands/ship-and-babysit.md	command	91	Missing allowed-tools
.claude/agents/codecrusher.md	agent	92	Vague quantifiers
.claude/agents/taskmaster.md	agent	94	Vague quantifiers
.claude/agents/architectobot.md	agent	96	Minor vague quantifiers
.claude/agents/pr-reviewer.md	agent	96	Minor vague quantifiers
.codex/skills/ship-and-babysit/SKILL.md	skill	96	Minor vague quantifiers
.claude/commands/ship-and-babysit.md	command	96	Minor vague quantifiers
CLAUDE.md	docs	90	No frontmatter (standard for project docs)
.claude/commands/ws-reset.md	command	100	None

Security Scan

---

Full report: https://github.com/xiaolai/nlpm-for-claude/blob/main/auditor/audits/tinyhumansai-openhuman.md

SECURITY BLOCKED: Critical/High security issues found. Do NOT submit automated PRs. Manual security review required.

[github-actions]

Security disclosure auto-filing failed (default GITHUB_TOKEN cannot create issues on third-party repos). Body queued at auditor/disclosures-pending/tinyhumansai-openhuman.md for manual filing.

[github-actions]

Vocab drift advisory: 10 candidate(s). Report: auditor/audits/tinyhumansai-openhuman.vocab-drift.md on the auditor branch.

This is advisory only — vocabulary discipline is project-specific and per-repo. No PR will be filed for these findings.