Visual feedback and runtime errors → AI-ready engineering tasks, verified DoD, human acceptance
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 5 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
vibus_create_ticket
-
vibus_get_ticket_details
-
vibus_list_tickets
-
vibus_sync_github
-
vibus_update_ticket_status
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 4db5701 · analyzer v33 · 2w ago
danger signals1
- suspicious endpoint t.me AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/ui/SettingsPanel.tsx :995
href={`https://t.me/Vibe_us_Bot?start=proj_${projectId}`}
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 157
filesystem 13
- fs AlexeyPlaton-VibeUs-4db5701/openspec-cli/criteria-verifier.js :1
import fs from 'node:fs'; - fs AlexeyPlaton-VibeUs-4db5701/openspec-cli/index.js :4
import fs from 'fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-cli/test/cloud-mutation-queue.test.js :3
import fs from 'node:fs'; - fs AlexeyPlaton-VibeUs-4db5701/openspec-cli/tunnel.js :9
import fs from 'fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/check-case-sensitive-imports.mjs :1
import fs from 'node:fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/fix_import_cases.mjs :1
import fs from 'node:fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/match_git_casing.mjs :1
import fs from 'node:fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/sync-widget-to-core.mjs :1
import fs from 'node:fs'; - fs AlexeyPlaton-VibeUs-4db5701/openspec-web/test_release_contracts.mjs :3
import fs from 'node:fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v3.3.2-final-semantics/tests-js/runtime_semantics_v332.test.mjs :3
import fs from 'node:fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v6.1-evidence-closure/tests-js/evidence_closure.test.mjs :3
import fs from 'node:fs'; - fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v6.2-trusted-evidence/tests-js/trusted_evidence.test.mjs :4
import fs from 'node:fs';
show 1 more
- fs (weak) AlexeyPlaton-VibeUs-4db5701/quality-gates/v7-i18n-global-launch/tests-js/i18n_contract.test.mjs :3
import fs from 'node:fs';
shell / exec 2
- shell AlexeyPlaton-VibeUs-4db5701/openspec-cli/criteria-verifier.js :3
import { spawn, spawnSync } from 'node:child_process'; - shell (weak) AlexeyPlaton-VibeUs-4db5701/openspec-web/scripts/match_git_casing.mjs :3
import { execSync } from 'node:child_process';
network 14
- net AlexeyPlaton-VibeUs-4db5701/openspec-cli/index.js :476
const res = await fetch(restUrl, { headers }); - net AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :121
const resp = await fetch(url, { - net AlexeyPlaton-VibeUs-4db5701/openspec-cli/tunnel.js :7
import http from 'http'; - net AlexeyPlaton-VibeUs-4db5701/openspec-core/static/vibus-widget.umd.cjs :102
Bearer ${e.apiKey.trim()}`);let r=await fetch(t,{method:`POST`,headers:n,body:JSON.stringify({model:e.model||`gpt-4o-mini`,messages:[{role:`user`,content:`Reply with OK.`}],max_tokens:10})});if(r.ok)r - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/RuntimeErrorsModal.tsx :104
const res = await fetch( - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/TicketDetailModal.tsx :123
const res = await fetch(`/api/projects/${projectId}/tickets/${ticket.id}/github/sync`, { - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/api/client.ts :32
const res = await fetch(`${base}/api/projects/${encodeURIComponent(projectId)}/nodes/${encodeURIComponent(nodeId)}/tickets`, { - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/hooks/useWidgetState.ts :334
const res = await fetch(`${cleanServer}/api/projects/${encodeURIComponent(projectId)}/board`, { headers }); - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/components/widget/ui/SettingsPanel.tsx :175
fetch(`/api/projects/${projectId}/github`, { - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/pages/CreateProjectPage.tsx :136
const res = await fetch(`${getApiUrl()}/api/workspaces/${wsId}/redeem-promo`, { - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/pages/DashboardPage.tsx :110
const wsRes = await fetch(`${base}/api/workspaces`, { credentials: 'include' }); - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/utils/accessTokens.ts :68
const res = await fetch(`${apiBase}/api/projects/${projectId}/access-links`, {
show 2 more
- net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/utils/aiDoDMatcher.ts :223
const response = await fetch(url, { - net AlexeyPlaton-VibeUs-4db5701/openspec-web/src/utils/pricing.ts :26
const res = await fetch(`${baseUrl}/api/public/pricing`, { credentials: 'omit' });
secrets 2
- secrets AlexeyPlaton-VibeUs-4db5701/openspec-cli/index.js :70
const token = getArg('--token', rc.apiToken || process.env.VIBUS_TOKEN || ''); - secrets AlexeyPlaton-VibeUs-4db5701/openspec-cli/tunnel.js :24
const apiToken = options.token || process.env.VIBUS_TOKEN || '';
tool registrations 5
- vibus_list_tickets AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :5
- vibus_get_ticket_details AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :24
- vibus_update_ticket_status AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :38
- vibus_create_ticket AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :65
- vibus_sync_github AlexeyPlaton-VibeUs-4db5701/openspec-cli/mcp.js :92
declared dependencies 3
- @clack/prompts@^1.7.0
- picocolors@^1.1.1
- ws@^8.18.0