scan_code_smells
Scan code for deferred work and shortcuts: TODO/FIXME comments, empty functions, hardcoded values, and debug artifacts. Surfaces technical debt for code quality audits and pre-release checks.
Instructions
Find deferred work and shortcuts: TODO/FIXME/HACK/XXX comments, empty functions & stubs, hardcoded values (IPs, URLs, credentials, magic numbers, feature flags), debug artifacts (console.log, debugger, var_dump, dd, binding.pry, pdb.set_trace, dbg!, printStackTrace, and 20+ other per-language debug markers). Surfaces technical debt that grep alone misses by combining comment scanning, symbol body analysis, and context-aware false-positive filtering. Use for code quality audit / pre-release checks. For performance-specific antipatterns use detect_antipatterns; for security issues use scan_security. Read-only. Returns JSON: { findings: [{ category, priority, file, line, message }], total, summary }.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| category | No | Categories to scan (default: all) | |
| scope | Yes | Directory to scan (default: whole project) | |
| priority_threshold | No | Minimum priority to report (default: low) | |
| include_tests | No | Include test files in scan (default: false) | |
| tags | No | Filter TODO comments by tag (e.g. ["FIXME","HACK"]). Only applies to todo_comment category | |
| limit | No | Max findings to return (default: 200) |