syntaxsecure-group/slackbot

GuardAgent is an autonomous security scanning tool that monitors GitLab for code changes and analyzes code diffs for vulnerabilities using an AI model. Built with FastAPI and the Slack Bolt SDK, it operates as a ChatOps agent that integrates with Slack to fetch code diffs and search Slack history. The system is containerized and includes a Model Context Protocol server to expose its scanning capabilities.

The repository introduces GuardAgent, a ChatOps security tool that monitors GitLab for code changes and uses an AI model (Gemini 2.5 Flash) to analyze code diffs for vulnerabilities. The application is built with FastAPI and the Slack Bolt SDK, featuring a Model Context Protocol (MCP) server that exposes tools for fetching code diffs and searching Slack history. The release includes the core application logic, a Dockerfile for containerization, and a comprehensive README detailing the system architecture and setup instructions.

(repo-wide) · high confidence

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

• CAI 47 → 52 (+5.1)
• Rubric changed (rubric-2026.08.19 → rubric-2026.09.15) — scores are not directly comparable.

• Code Health 100 → 100 (+0.0)
• Architecture 69 → 69 (+0.0)
• Maturity 54 → 57 (+3.7)
• Readiness 26 → 33 (+7.7)
• Security 82 → 88 (+5.7)

• Coverage not included — suite not readable by the collector
• Dependency hygiene not measured — dependency manifest found but not parsed for hygiene
• Medium IaC: CKV_DOCKER_3 (Dockerfile)
• No exposed public API
• Test reliability not included
• early-stage repository — too little history to judge knowledge freshness
• single-maintainer — knowledge-concentration (bus factor) risk

• Dependency hygiene PARTLY measured — Python dependencies read, no exact pin to grade for currency
• Documentation: no installation or build instructions (README.md)
• Documentation: no usage examples (README.md)
• Medium IaC: WD-DOCKER-0003 (Dockerfile)
• Medium IaC: WD-DOCKER-0010 (Dockerfile)
• No ADRs found

Written by watchdog.canine.dev from the codebase's own history, inside the signed delivery this page is composed from.

syntaxsecure-group/slackbot was measured the same way every project in this corpus was: the same rubric, at a pinned commit, with the result published in full. Point a surveyor at a repository you know and see whether you agree with it.