github TypeScript analyzed 6019bec unconfirmed MCP

ARKTechSolutions/mandate-os

github

Operational guardrails for AI agents

maintainer
ARKTechSolutions
licence
MIT
first seen
2026-06-23
last seen
2026-08-16
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  2. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  3. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  4. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  5. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  6. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  7. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  8. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  9. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
  10. HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 6019bec · analyzer v33 · 17h ago

danger signals2

code evidence vv0.1.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 102

filesystem 18

  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/scripts/copy-build-assets.mjs :1 import { cp, mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/claude-setup.ts :8 } from 'node:fs';
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/codex-setup.spec.ts :1 import { mkdtempSync, readFileSync } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/codex-setup.ts :7 } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/cursor-install.ts :3 import { existsSync } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/cursor-setup.ts :7 } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/entrypoint.ts :1 import { realpathSync } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/hook-gateway.ts :3 import { readFileSync } from 'node:fs';
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/host-gateway.spec.ts :1 import { readFileSync } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/host-gateway.ts :1 import { readFileSync } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/runtime-command.ts :1 import { existsSync } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :2 const fs = require('node:fs');
show 6 more
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/scripts/copy-build-assets.mjs :8 } from 'node:fs';
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-plugin.spec.ts :7 } from 'node:fs';
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.spec.ts :8 } from 'node:fs';
  • fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :8 } from 'node:fs';
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-sdk/scripts/copy-build-assets.mjs :1 import { cp, mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs (weak) ARKTechSolutions-mandate-os-6019bec/scripts/releases/publish-mandate-os-packages.mjs :4 import { mkdtemp, readFile } from 'node:fs/promises';

shell / exec 5

  • shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/hook-gateway.js :2 import { spawn } from 'node:child_process';
  • shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/index.js :2 import { spawn } from 'node:child_process';
  • shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :5 const { spawnSync } = require('node:child_process');
  • shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :9 import { spawnSync } from 'node:child_process';
  • shell (weak) ARKTechSolutions-mandate-os-6019bec/scripts/releases/publish-mandate-os-packages.mjs :3 import { execFile } from 'node:child_process';

network 1

  • net ARKTechSolutions-mandate-os-6019bec/apps/mandate-os-homepage/src/app/shared/demo-install.service.ts :90 const response = await fetch(DEMO_INSTALL_ENDPOINT, {

secrets 4

  • secrets ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :965 runtimeTokenAvailable: Boolean(process.env.MANDATE_OS_AGENT_TOKEN),
  • secrets (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-plugin.spec.ts :142 delete process.env.MANDATE_OS_AGENT_TOKEN;
  • secrets (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.spec.ts :64 delete process.env.MANDATE_OS_AGENT_TOKEN;
  • secrets ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :409 runtimeTokenAvailable: Boolean(process.env.MANDATE_OS_AGENT_TOKEN?.trim()),

declared dependencies 38

  • @angular/common@20.3.25
  • @angular/compiler@20.3.25
  • @angular/core@20.3.25
  • @angular/platform-browser@20.3.25
  • @angular/platform-browser-dynamic@20.3.25
  • @angular/platform-server@20.3.25
  • @angular/router@20.3.25
  • @angular/ssr@20.3.25
  • rxjs@~7.8.0
  • zone.js@~0.15.0
  • @angular/build@20.3.25
  • @angular/cli@20.3.25
show 26 more
  • @angular/compiler-cli@20.3.25
  • @eslint/js@^9.8.0
  • @nx/eslint@22.7.1
  • @nx/eslint-plugin@22.7.1
  • @nx/jest@22.7.1
  • @nx/js@22.7.1
  • @nx/vitest@22.7.1
  • @nx/web@22.7.1
  • @nx/workspace@22.7.1
  • @types/jest@^30.0.0
  • @types/node@^20.19.39
  • angular-eslint@^20.3.0
  • eslint@^9.8.0
  • eslint-config-prettier@^10.0.0
  • jest@^30.3.0
  • jest-environment-jsdom@^30.3.0
  • jest-preset-angular@~16.1.4
  • nx@22.7.1
  • prettier@~3.8.3
  • ts-jest@^29.4.9
  • ts-node@10.9.2
  • tslib@^2.3.0
  • typescript@~5.9.2
  • typescript-eslint@^8.59.2
  • vite@^7.3.2
  • vitest@^3.2.4