Jakob Hedrich
Repo audits and sandbox-verified fixes for GitHub projects
New to Contra
Jakob is building their profile!
Code Health Check: a sample report. An automated audit of a made-up demo repository that shows what a real report looks like: 11 findings (2 high, 5 medium, 3 low, 1 info), each with the file, the line and how to fix it, plus a fix-first list. It checks GitHub Actions security (script injection, fork checkouts, token permissions, the 2026 pull_request_target changes), pinned dependencies against published advisories, committed secrets, Python lint and repository hygiene. Built with AI coding tools under my review.
Sample report: https://github.com/UniteAndCreateForLife/HAL_SUPREME/blob/main/docs/samples/code-health-check-sample.md
0
1
A verified fix for GENesis-AGI, an open-source agent framework: detect linked git worktrees with git itself instead of path matching (issue #2424). An AI coding agent (Google's Jules) wrote the change. My system re-ran the tests on a clean checkout in an offline sandbox after each of 5 revision rounds (262 tests passing) before I approved it, and the pull request discloses the AI. Status: open, under review.
0
4
prt-check: a free checker for GitHub's 2026 pull_request_target changes, built with AI coding tools under my review. I scanned the 1,000 most-starred public repositories: 269 run at least one workflow on pull_request_target (540 workflow files). It runs as a CLI, a pre-commit hook or a GitHub Action.
0
3