github JavaScript analyzed 066d530

Brainrot-Creations/socials

Claude Code plugin + MCP server: connect Claude to the Socials browser extension for X, LinkedIn & Reddit (Agent Mode, local WebSocket bridge).

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 066d530 · analyzer v33 · 5d ago

suspicious endpoint us.i.posthog.com (telemetry) expected for this server's purpose Brainrot-Creations-socials-066d530/src/analytics.ts :11 const POSTHOG_HOST = "https://us.i.posthog.com";

code evidence vv2.0.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 9

fs (weak) Brainrot-Creations-socials-066d530/scripts/release.mjs :16 import { readFileSync, writeFileSync } from 'node:fs';
fs Brainrot-Creations-socials-066d530/src/index.ts :10 import * as fs from "fs";
fs Brainrot-Creations-socials-066d530/src/install-native-host.ts :12 import * as fs from "fs";

shell (weak) Brainrot-Creations-socials-066d530/scripts/release.mjs :15 import { execSync } from 'node:child_process';
shell Brainrot-Creations-socials-066d530/src/extension-bridge.ts :1 import { execFileSync } from "child_process";

net Brainrot-Creations-socials-066d530/src/extension-bridge.ts :70 const net = require("net");
net Brainrot-Creations-socials-066d530/src/fetch-image.ts :120 const res = await fetch(url.toString(), {
net Brainrot-Creations-socials-066d530/src/index.ts :93 .describe("Number of posts to fetch (default: 10)"),