One brain. Every AI agent. Nothing forgotten. — Self-hosted memory layer via MCP + Postgres + pgvector
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 2m ago · see ecosystem CVEs →
- C · 56 → D · 64
- B · 32 → C · 56
- A · 0 → B · 32
No known CVEs for this server.
- high dangerous code
dynamic exec: vm exec · obfuscated payload: dynamic require()/import()
- medium dangerous code
env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (BaiGanio-aperio-bf4c801/bootstrap.
analyzed commit f5578c7 · analyzer v28 · 2d ago
skills & prompt files 35
- agent-rules BaiGanio-aperio-f5578c7/AGENTS.md
- skill BaiGanio-aperio-f5578c7/integrations/agent-rules/claude-code/aperio-memory/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/agent-conduct/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/autotune/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/canvas-design/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/code-minimalism/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/code-review-and-quality/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/code-simplification/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/codegraph/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/coding-standards/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/conversation-lifecycle/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/debugging-and-error-recovery/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/design-randomizer/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/doc-coauthoring/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/docgraph/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/docx-advanced/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/docx/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/frontend-design/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/handoff/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/memory-protocol/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/pdf/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/pptx/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/preprocess-image/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/preprocess-pdf/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/prompt-optimizer/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/reasoning-planning/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/security-and-hardening/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/skill-creator/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/test-driven-development/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/theme-factory/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/tool-integration/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/webapp-testing/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/wiki/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/working-with-files/SKILL.md
- skill BaiGanio-aperio-f5578c7/skills/xlsx/SKILL.md
danger signals4
- dynamic code execution vm exec BaiGanio-aperio-f5578c7/scripts/diff-locales.js :33
vm.runInNewContext( - suspicious endpoint 169.254.169.254 (cloud metadata) BaiGanio-aperio-f5578c7/tests/unit/helpers/ssrfGuard.test.js :37
test("rejects cloud metadata endpoint", () => rejects("http://169.254.169.254/latest/meta-data/")); - suspicious endpoint 8.8.8.8 BaiGanio-aperio-f5578c7/tests/unit/helpers/ssrfGuard.test.js :44
await assert.doesNotReject(() => assertPublicUrl("http://8.8.8.8/"))); - suspicious endpoint 169.254.169.254 (cloud metadata) BaiGanio-aperio-f5578c7/tests/unit/tools/web.test.js :125
const result = await fetchUrlHandler({ url: "http://169.254.169.254/latest/meta-data/" });
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:BaiGanio/aperio/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of BaiGanio.