Operational guardrails for AI agents
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
- HIGH code analysis flagged dynamic code execution ×2 in ARKTechSolutions/mandate-os
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 6019bec · analyzer v33 · 17h ago
danger signals2
- dynamic code execution vm exec ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :152
const parsed = vm.runInNewContext(`(${raw})`, Object.create(null), { - dynamic code execution vm exec ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :970
const parsed = vm.runInNewContext(`(${raw})`, Object.create(null), {
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 102
filesystem 18
- fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/scripts/copy-build-assets.mjs :1
import { cp, mkdir, readFile, writeFile } from 'node:fs/promises'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/claude-setup.ts :8
} from 'node:fs'; - fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/codex-setup.spec.ts :1
import { mkdtempSync, readFileSync } from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/codex-setup.ts :7
} from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/cursor-install.ts :3
import { existsSync } from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/cursor-setup.ts :7
} from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/entrypoint.ts :1
import { realpathSync } from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/hook-gateway.ts :3
import { readFileSync } from 'node:fs'; - fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/host-gateway.spec.ts :1
import { readFileSync } from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/host-gateway.ts :1
import { readFileSync } from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/src/runtime-command.ts :1
import { existsSync } from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :2
const fs = require('node:fs');
show 6 more
- fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/scripts/copy-build-assets.mjs :8
} from 'node:fs'; - fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-plugin.spec.ts :7
} from 'node:fs'; - fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.spec.ts :8
} from 'node:fs'; - fs ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :8
} from 'node:fs'; - fs (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-sdk/scripts/copy-build-assets.mjs :1
import { cp, mkdir, readFile, writeFile } from 'node:fs/promises'; - fs (weak) ARKTechSolutions-mandate-os-6019bec/scripts/releases/publish-mandate-os-packages.mjs :4
import { mkdtemp, readFile } from 'node:fs/promises';
shell / exec 5
- shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/hook-gateway.js :2
import { spawn } from 'node:child_process'; - shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-mcp/index.js :2
import { spawn } from 'node:child_process'; - shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :5
const { spawnSync } = require('node:child_process'); - shell ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :9
import { spawnSync } from 'node:child_process'; - shell (weak) ARKTechSolutions-mandate-os-6019bec/scripts/releases/publish-mandate-os-packages.mjs :3
import { execFile } from 'node:child_process';
network 1
- net ARKTechSolutions-mandate-os-6019bec/apps/mandate-os-homepage/src/app/shared/demo-install.service.ts :90
const response = await fetch(DEMO_INSTALL_ENDPOINT, {
secrets 4
- secrets ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/assets/plugin/index.cjs :965
runtimeTokenAvailable: Boolean(process.env.MANDATE_OS_AGENT_TOKEN), - secrets (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-plugin.spec.ts :142
delete process.env.MANDATE_OS_AGENT_TOKEN; - secrets (weak) ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.spec.ts :64
delete process.env.MANDATE_OS_AGENT_TOKEN; - secrets ARKTechSolutions-mandate-os-6019bec/packages/mandate-os-openclaw/src/openclaw-setup.ts :409
runtimeTokenAvailable: Boolean(process.env.MANDATE_OS_AGENT_TOKEN?.trim()),
declared dependencies 38
- @angular/common@20.3.25
- @angular/compiler@20.3.25
- @angular/core@20.3.25
- @angular/platform-browser@20.3.25
- @angular/platform-browser-dynamic@20.3.25
- @angular/platform-server@20.3.25
- @angular/router@20.3.25
- @angular/ssr@20.3.25
- rxjs@~7.8.0
- zone.js@~0.15.0
- @angular/build@20.3.25
- @angular/cli@20.3.25
show 26 more
- @angular/compiler-cli@20.3.25
- @eslint/js@^9.8.0
- @nx/eslint@22.7.1
- @nx/eslint-plugin@22.7.1
- @nx/jest@22.7.1
- @nx/js@22.7.1
- @nx/vitest@22.7.1
- @nx/web@22.7.1
- @nx/workspace@22.7.1
- @types/jest@^30.0.0
- @types/node@^20.19.39
- angular-eslint@^20.3.0
- eslint@^9.8.0
- eslint-config-prettier@^10.0.0
- jest@^30.3.0
- jest-environment-jsdom@^30.3.0
- jest-preset-angular@~16.1.4
- nx@22.7.1
- prettier@~3.8.3
- ts-jest@^29.4.9
- ts-node@10.9.2
- tslib@^2.3.0
- typescript@~5.9.2
- typescript-eslint@^8.59.2
- vite@^7.3.2
- vitest@^3.2.4