github JavaScript analyzed 4db5701

AlexeyPlaton/VibeUs

github

Visual feedback and runtime errors → AI-ready engineering tasks, verified DoD, human acceptance

maintainer
AlexeyPlaton
licence
AGPL-3.0
first seen
2026-09-03
last seen
2026-09-03
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 5 tools
transport stdio counts 5 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • vibus_create_ticket
  • vibus_get_ticket_details
  • vibus_list_tickets
  • vibus_sync_github
  • vibus_update_ticket_status
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 4db5701 · analyzer v33 · 2w ago

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 157

filesystem 13

  • fs AlexeyPlaton-VibeUs-4db5701/openspec-cli/criteria-verifier.js :1 import fs from 'node:fs';
  • fs AlexeyPlaton-VibeUs-4db5701/openspec-cli/index.js :4 import fs from 'fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-cli/test/cloud-mutation-queue.test.js :3 import fs from 'node:fs';
  • fs AlexeyPlaton-VibeUs-4db5701/openspec-cli/tunnel.js :9 import fs from 'fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/check-case-sensitive-imports.mjs :1 import fs from 'node:fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/fix_import_cases.mjs :1 import fs from 'node:fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/match_git_casing.mjs :1 import fs from 'node:fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/sync-widget-to-core.mjs :1 import fs from 'node:fs';
  • fs AlexeyPlaton-VibeUs-4db5701/openspec-web/test_release_contracts.mjs :3 import fs from 'node:fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v3.3.2-final-semantics/tests-js/runtime_semantics_v332.test.mjs :3 import fs from 'node:fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v6.1-evidence-closure/tests-js/evidence_closure.test.mjs :3 import fs from 'node:fs';
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v6.2-trusted-evidence/tests-js/trusted_evidence.test.mjs :4 import fs from 'node:fs';
show 1 more
  • fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v7-i18n-global-launch/tests-js/i18n_contract.test.mjs :3 import fs from 'node:fs';

shell / exec 2

  • shell AlexeyPlaton-VibeUs-4db5701/openspec-cli/criteria-verifier.js :3 import { spawn, spawnSync } from 'node:child_process';
  • shell (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/match_git_casing.mjs :3 import { execSync } from 'node:child_process';

network 14

  • net AlexeyPlaton-VibeUs-4db5701/openspec-cli/index.js :476 const res = await fetch(restUrl, { headers });
  • net AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :121 const resp = await fetch(url, {
  • net AlexeyPlaton-VibeUs-4db5701/openspec-cli/tunnel.js :7 import http from 'http';
  • net AlexeyPlaton-VibeUs-4db5701/openspec-core/static/vibus-widget.umd.cjs :102 Bearer ${e.apiKey.trim()}`);let r=await fetch(t,{method:`POST`,headers:n,body:JSON.stringify({model:e.model||`gpt-4o-mini`,messages:[{role:`user`,content:`Reply with OK.`}],max_tokens:10})});if(r.ok)r
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/RuntimeErrorsModal.tsx :104 const res = await fetch(
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/TicketDetailModal.tsx :123 const res = await fetch(`/api/projects/${projectId}/tickets/${ticket.id}/github/sync`, {
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/api/client.ts :32 const res = await fetch(`${base}/api/projects/${encodeURIComponent(projectId)}/nodes/${encodeURIComponent(nodeId)}/tickets`, {
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/hooks/useWidgetState.ts :334 const res = await fetch(`${cleanServer}/api/projects/${encodeURIComponent(projectId)}/board`, { headers });
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/ui/SettingsPanel.tsx :175 fetch(`/api/projects/${projectId}/github`, {
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/pages/CreateProjectPage.tsx :136 const res = await fetch(`${getApiUrl()}/api/workspaces/${wsId}/redeem-promo`, {
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/pages/DashboardPage.tsx :110 const wsRes = await fetch(`${base}/api/workspaces`, { credentials: 'include' });
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/utils/accessTokens.ts :68 const res = await fetch(`${apiBase}/api/projects/${projectId}/access-links`, {
show 2 more
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/utils/aiDoDMatcher.ts :223 const response = await fetch(url, {
  • net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/utils/pricing.ts :26 const res = await fetch(`${baseUrl}/api/public/pricing`, { credentials: 'omit' });

secrets 2

  • secrets AlexeyPlaton-VibeUs-4db5701/openspec-cli/index.js :70 const token = getArg('--token', rc.apiToken || process.env.VIBUS_TOKEN || '');
  • secrets AlexeyPlaton-VibeUs-4db5701/openspec-cli/tunnel.js :24 const apiToken = options.token || process.env.VIBUS_TOKEN || '';

tool registrations 5

  • vibus_list_tickets AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :5
  • vibus_get_ticket_details AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :24
  • vibus_update_ticket_status AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :38
  • vibus_create_ticket AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :65
  • vibus_sync_github AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :92

declared dependencies 3

  • @clack/prompts@^1.7.0
  • picocolors@^1.1.1
  • ws@^8.18.0