Capability drift in ChronoAIProject/NyxID

github ChronoAIProject/NyxID D

Connect AI agents to any API, anywhere. Securely. Open-source gateway that proxies requests, injects credentials automatically, punches through NAT to reach localhost services, and wraps REST APIs as MCP tools. Per-agent isolation. Never expose a raw key.

maintainer: ChronoAIProject
tools: 0
CVEs: 0
releases: 29

advisory #769642

HIGH ChronoAIProject/NyxID 08-21 06:47

code analysis flagged committed secret ×4 in ChronoAIProject/NyxID

current permission surface (inferred):

drift timeline for ChronoAIProject/NyxID → security tab →

drift history for this server newest 8

HIGH 09-08 21:17 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-08 20:02 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-08 16:10 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-08 13:18 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-08 07:24 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-07 18:05 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-07 13:31 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID
HIGH 09-04 08:25 code analysis flagged committed secret ×4 in ChronoAIProject/NyxID

Each entry is one capability capture differing from the one before it — a review signal, not a verdict.