// Code Health Audit

IntentMesh SSD — Scanned 2026-03-15 — 82 repositories
82
Repos Scanned
7
Critical Issues
28
Warnings
47
Healthy
63
Repos w/ Uncommitted
4
Public Repos
C+
Overall Health: Needs Attention
No secrets exposed in public repos (good). But hardcoded Firebase API keys in multiple PullSheet repos, a Stripe LIVE key in a local config file, committed .env files with test keys, and 63 of 82 repos have uncommitted work. The private repo status is saving you, but these patterns need cleanup before any repo goes public or a VC reviews your GitHub.

Urgent: Fix Now

web/Assclownelevators.com Stripe LIVE Key
Stripe live secret key sk_live_51Rzfw...5Vlt is hardcoded in .claude/settings.local.json (permission allow list). File is not git-tracked and not in .gitignore — one accidental git add . pushes it to GitHub.
FIX: Add .claude/ to .gitignore immediately. Rotate this Stripe key in your Stripe dashboard. Even though the repo is private, this key should never be in a file.
web/pullsheet-mobile, web/pullsheetintent, web/pullsheetapp Hardcoded Firebase Key
Firebase API key AIzaSyDP-PRRyxepJpbvv8hhh2ZGuNbaTHuZfc4 hardcoded directly in src/lib/firebase.ts across 3 PullSheet repos. Project: pullsheetlive. These repos are private but the key is in git history permanently.
FIX: Move Firebase config to .env files. Firebase client keys are designed to be public (with security rules), but hardcoding them prevents key rotation and is bad practice. Ensure Firestore security rules are locked down.
web/SaaS-Boilerplate Committed .env Files
Both .env and .env.production are tracked by git. Contains Clerk publishable key pk_test_b3Blbi... and Stripe publishable key pk_test_51PNk4f.... Secret keys have placeholder values but the pattern invites accidental real key commits.
FIX: Remove .env and .env.production from git tracking (git rm --cached). Add to .gitignore. Use .env.example with placeholder values instead.
mobile/305ismine Hardcoded Firebase Key
Firebase API key AIzaSyCIE13bUts-gmwLTlCYCkRzgWuUstlyvZY hardcoded in src/scripts/seed-content.ts. This seed script has direct Firebase credentials rather than reading from environment.
FIX: Refactor seed-content.ts to read from .env. The main firebase.ts in this repo correctly uses env vars — match that pattern.
web/pullsheetintent Massive Uncommitted Changes
597 uncommitted files (494 modified, 54 untracked). This is an active production codebase with nearly 600 files of untracked work at risk of being lost.
FIX: Commit and push this work immediately. If a drive failure hits, this code is gone.
mobile/239isMine Massive Uncommitted Changes
8,370 uncommitted files (25 modified, 36 untracked + bulk). Likely includes node_modules or build artifacts in the count, but still represents significant untracked work.
FIX: Review .gitignore (ensure node_modules is excluded), then commit meaningful changes.
python/AutoGPT Firebase Key in Fork
Google API key AIzaSyBvYLAK_A0uhFuVPQbTxUdVWbb_Lsur9cg found in classic/frontend/web/index.html. This is from the upstream AutoGPT fork — likely their demo key.
LOW RISK: This is an upstream fork artifact, not your key. No action needed unless you deploy this code.

Warnings

6 repos missing .gitignore: web/minimal-square, web/random-thoughts-site, web/elevator-educators-redesign, web/huffman-construction-redesign, web/licks, cx-mcp. Any of these could accidentally commit sensitive files.
Test passwords in test files: openclaw and web/openclaw-mobile have password: "secret" and password: "test-password" in test files. These are test fixtures, not real credentials — acceptable but worth noting.
Bearer token in test files: web/youride and web/codex-zero (both VS Code forks) contain a long Bearer token in cursor.test.ts. This is upstream test data, not a real token.
63 of 82 repos have uncommitted changes. Top offenders: web/pullsheetintent (597), mobile/239isMine (8370), web/pullsheetfire-2 (61), web/website-refresh (49), llm-council (47), web/pullsheet-mobile (45), web/openclaw-mobile (45), web/estimations (44).
7 repos have no lockfile (package.json exists but no package-lock.json/yarn.lock): web/diagnostics-template and several Python-only projects. Non-deterministic installs.
Public repos clean: The 4 public repos (elevator-educators-redesign, biblical-alignment, companionfork, hoistwaywatch) have no detected secrets. This is good for VC review.

Secrets Scan Summary

Stripe live keys exposed 1 (local file, not in git)
Firebase keys hardcoded 4 repos (3 PullSheet + 1 seed script)
Committed .env files 1 repo (SaaS-Boilerplate)
Test credentials (acceptable) 3 repos
Secrets in public repos 0 detected

Repository Hygiene

Repos with .gitignore 76 / 82 (93%)
Repos with .env.example 16 / 82 (20%)
Repos with lockfile 58 / 62 JS projects
Clean working tree 19 / 82 (23%)
Active (2026 commits) 42 repos

All Projects — Detailed Breakdown

Health Project Category Last Commit Uncommitted Issues
Critical Assclownelevators.com web 2026-01-16 15 Stripe LIVE Key 15 uncommitted details
Stripe live secret key in .claude/settings.local.json File not in .gitignore .gitignore exists Repo is private Remote: joshuaworth/assclownelevators.com
The Stripe live key sk_live_51Rzfw... appears in a Claude settings permission allow-list. Not tracked by git currently, but one git add -A would expose it.
Critical pullsheetintent web 2026-03-14 597 Firebase Key 597 uncommitted details
Firebase API key hardcoded in src/lib/firebase.ts 597 uncommitted files (494 modified, 54 untracked) .gitignore exists Lockfile present Repo is private pkg modified: 2026-03-09
Active PullSheet codebase. Huge volume of uncommitted work at risk. Firebase key should be in .env.
Critical pullsheet-mobile web 2026-03-08 45 Firebase Key 45 uncommitted details
Firebase API key hardcoded in src/lib/firebase.ts 45 uncommitted files .gitignore exists Lockfile present Repo is private
Critical pullsheetapp web 2026-01-16 5 Firebase Key 5 uncommitted details
Firebase API key hardcoded in src/lib/firebase.ts .gitignore exists Lockfile present Repo is private
Critical SaaS-Boilerplate web 2025-04-07 5 .env in git Clerk + Stripe keys details
.env and .env.production tracked by git Clerk pk_test and Stripe pk_test keys committed Secret key placeholders invite accidental real key commits .gitignore exists Lockfile present
Forked boilerplate. The .env files are from the template but they're tracked in git.
Critical 239isMine mobile 2026-01-18 8,370 8370 uncommitted details
8,370 uncommitted files — likely includes unignored node_modules or build output Check .gitignore for completeness .gitignore exists .env.example present
Critical 305ismine mobile 2026-02-05 0 Firebase Key in seed script details
Firebase API key hardcoded in src/scripts/seed-content.ts Main firebase.ts uses env vars correctly .gitignore exists Repo is private
Warning pullsheetfire-2 web 2025-07-20 61 61 uncommitted details
61 uncommitted files (39 modified, 19 untracked) .gitignore Lockfile Last commit: 2025-07-20 (8 months stale)
Warning website-refresh web 2026-02-05 49 49 uncommitted details
49 uncommitted (18 modified, 31 untracked) .gitignore .env.example Lockfile
Warning llm-council root 2025-11-22 47 47 uncommitted details
47 uncommitted (20 modified, 21 untracked) .gitignore Fork of karpathy/llm-council
Warning openclaw-mobile web 2026-02-02 45 45 uncommitted details
45 uncommitted (14 modified, 30 untracked) .env.example .gitignore Lockfile
Warning estimations web 2025-08-23 44 44 uncommitted details
44 uncommitted (27 modified, 10 untracked, 6 staged) .gitignore Lockfile Last commit: 2025-08-23 (7 months stale)
Warning TheBadManApp_backup archive 2025-05-07 41 41 uncommitted details
41 uncommitted (5 modified, 29 untracked, 5 staged) Archive backup — 10 months stale
Warning 239isMine web 2026-02-05 40 40 uncommitted details
40 untracked files .gitignore Lockfile
Warning openclaw root 2026-02-21 35 35 uncommitted details
35 uncommitted (27 modified, 8 untracked) .env.example .gitignore Lockfile Test credentials in test files (acceptable)
Warning testreee web 2026-01-02 33 33 uncommitted details
33 uncommitted (25 modified, 8 untracked) .env.example .gitignore Lockfile
Warning titosmmatraininghub web 2026-01-25 30 30 uncommitted details
30 uncommitted (24 modified, 6 untracked) .gitignore No package.json — static site
Warning perceptual-memory-os mobile 2025-11-30 28 28 uncommitted details
28 uncommitted (11 modified, 16 untracked) .env.example .gitignore Lockfile
Warning pullsheet web 2026-02-05 27 27 uncommitted details
27 uncommitted (20 modified, 7 untracked) .gitignore Lockfile
Warning Steel-Horse-Outlaw games 2026-01-26 23 23 uncommitted details
23 uncommitted (7 modified, 16 untracked) .gitignore Lockfile
Warning prompt-fiend web 2025-05-04 18 18 uncommitted details
18 uncommitted .gitignore Lockfile 10 months stale
Warning mesh-agent web 2025-08-24 17 17 uncommitted details
17 uncommitted (13 modified, 4 untracked) .gitignore Lockfile
Warning returnself web 2026-01-17 17 17 uncommitted details
17 uncommitted (4 modified, 12 untracked) .gitignore Lockfile
Warning Tradesman Showdown mobile 2026-03-03 14 14 uncommitted details
14 uncommitted (7 modified, 2 untracked) .gitignore Lockfile
Warning NeonGalaxyOverdrive mobile 2026-01-04 13 13 uncommitted details
13 uncommitted (4 modified, 7 untracked) .gitignore Lockfile
Warning pullsheetintent mobile 2025-08-24 13 13 uncommitted details
13 uncommitted (11 modified, 2 untracked) .gitignore Lockfile 7 months stale
Warning intentmesh-www web 2025-12-02 12 12 uncommitted details
12 uncommitted (5 modified, 7 untracked) .gitignore Lockfile
Warning openlift root 2025-12-28 11 11 uncommitted details
11 uncommitted (2 modified, 9 untracked) .gitignore intentmesh/Openlift on GitHub
Warning TheBadManApp mobile 2025-05-07 10 10 uncommitted details
10 uncommitted .gitignore Lockfile 10 months stale
Warning Neon-Swarm mobile 2026-01-05 10 10 uncommitted details
10 uncommitted (5 modified, 5 untracked) .gitignore Lockfile
Warning octoscura web 2026-02-05 9 9 uncommitted details
9 uncommitted (2 modified, 7 untracked) .env.example .gitignore Lockfile
Warning BadManWebsite web 2026-01-23 9 9 uncommitted details
9 uncommitted (9 modified) .env.example .gitignore Lockfile
Warning minimal-square web 2025-07-14 1 No .gitignore Stripe placeholder details
No .gitignore file Stripe fallback: sk_test_placeholder in backend/index.js Placeholder, not a real key — but bad pattern
Healthy silent-killer-the-night-shift mobile 2026-03-06 3 details
.gitignore Lockfile Live on App Store + Play Store 3 untracked files
Healthy elevator-educators-redesign web 2026-03-14 0 No .gitignore details
No .gitignore — PUBLIC repo, add one No secrets detected Clean working tree Static site, low risk
Healthy bible-study-app web 2026-02-21 2 details
.gitignore Lockfile PUBLIC repo (biblical-alignment) No secrets detected
Healthy ec-services web 2026-02-21 0 details
.gitignore Lockfile Clean working tree
Healthy Joshua Worth (portfolio) web 2026-02-05 3 details
.gitignore Lockfile joshuaworth.com portfolio site
Healthy launch-constellation web 2025-10-12 0 details
.gitignore .env.example Lockfile Clean
Healthy UpNdown web 2026-02-02 0 details
.gitignore .env.example Lockfile .env in .gitignore
Healthy collision-experts-platform web 2026-01-27 0 details
.gitignore Lockfile Clean
Healthy notes-app mobile 2026-01-01 0 details
.gitignore .env.example Lockfile
Healthy incubator/war-room-os incubator 2026-02-19 4 details
.gitignore Lockfile 4 uncommitted
Healthy cx-mcp root 2026-01-22 3 No .gitignore details
No .gitignore Lockfile present No secrets detected
Healthy intentmesh-site web 2026-02-05 0 details
.gitignore Lockfile Clean
Healthy epartss web 2026-02-05 0 details
.gitignore Lockfile Clean
Healthy frontier_eval_exchange root 2025-10-12 0 details
.gitignore Python requirements Clean
Healthy pullsheet mobile 2026-01-16 1 details
.gitignore Lockfile
Healthy dart-arcade mobile 2025-07-14 1 details
.gitignore Lockfile
Healthy Tapnesia mobile 2025-07-14 1 details
.gitignore Lockfile
Healthy ItsGivingApp mobile 2025-04-19 8 details
.gitignore Lockfile 8 uncommitted
Healthy perceptual-memory-os root 2026-01-22 1 details
.gitignore Lockfile
Healthy orbital-lift_-the-night-shift mobile 2026-01-05 2 details
.gitignore Lockfile
HealthyIntentInspectorweb2025-07-101
Healthyprompt-fiereactmobile2025-05-045
Healthycodex-zeroweb2025-04-241
Healthyrefine-vite-projectweb2025-07-076
Healthypullsheetfireweb2025-07-205
Healthypullsheet-hvacweb2025-08-263
Healthydiagnostics-templateweb2025-08-255
HealthyPullSheetWebsiteweb2026-01-160
Healthynumber-three-craft-beervideo2026-02-131
Healthypython/ai-assistantpython2025-08-312
Healthypython/AutoGPTpython2025-06-180
HealthyNotesAppmobile2025-05-221
HealthyTapnesiaAmnesiamobile2025-07-141
HealthyIntentHomemobile2025-09-020
Healthyreact-native-chatgpt-examplemobile2023-01-313
Healthylaunch-constellation-mission-controlweb2025-10-120
Healthylaunch-constellation-ground-crewweb2025-10-123
Healthylaunch-constellation-reasoning-copilotweb2025-10-120
Healthylaunch-constellation-creative-bayweb2025-10-120
Healthylaunch-constellation-mission-autopilotweb2025-10-122
Healthylaunch-constellation-qa-observatoryweb2025-10-120
Healthylaunch-constellation-suiteweb2025-10-120
Healthyplanetary_resilience_toolkitweb2025-10-122
Healthyfrontier_alignment_lab_osweb2025-10-120
Healthylicksweb2025-07-141No .gitignore
Healthyjjs-porta-johnsweb2025-07-144
Healthyrandom-thoughts-siteweb—2No .gitignore
Healthyhuffman-construction-redesignweb2026-03-140No .gitignore
Healthy_reference_repo (TitoOrtiz)reference2022-03-230
Healthyyouride (VS Code fork)web2025-04-254
IntentMesh Code Health Audit // Generated 2026-03-15 Scanned: /Volumes/IntentMesh/Code/Projects/ (82 git repos)