github TypeScript analyzed 4ac1f1a unconfirmed MCP

Arjia-Labs/sark

Slack → sandboxed coding agents. One ascii.dev Box per thread, on Cloudflare Workers.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 4ac1f1a · analyzer v28 · 1d ago

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 43

shell Arjia-Labs-sark-4ac1f1a/src/box/client.ts :137 async fork(templateId: string, opts: { env?: Record<string, string>; noEnv?: boolean } = {}) {
shell Arjia-Labs-sark-4ac1f1a/src/do/ThreadSession.ts :783 // fork() does not accept ttlSeconds; set it (and a useful name) after the fact.

net Arjia-Labs-sark-4ac1f1a/src/box/client.ts :113 const res = await fetch(url, {
net Arjia-Labs-sark-4ac1f1a/src/slack/api.ts :27 const res = await fetch(`https://slack.com/api/${method}`, {