github Python analyzed a99f5fc

CSOAI-ORG/sovereign-temple

maintainer: CSOAI-ORG
licence: MIT
first seen: 2026-06-21
last seen: 2026-06-21
releases · 30d: 0
short id

risk 45/100 · heuristic grade

C elevated inferred analyzer v33 (current)

capability exposure inferred + 35
tool safety inferred + 10

inferred

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 1w ago · see ecosystem CVEs →

risk trajectory 3 movements

5w ago C · 40 → C · 45
7w ago C · 52 → C · 40
12w ago A · 4 → C · 52

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 17 findings · grade factor +10

medium dangerous code

dynamic exec: eval()/exec(), __import__()
medium toxic flow (lethal trifecta)

lethal trifecta reachable across this server's tool + source surface: private-data access + untrusted-content ingestion + network exfil (a leg is proven only in the analyzed source)
low dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
low dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
low dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
low dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
low dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
low dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit a99f5fc · analyzer v33 · 2w ago

danger signals16

dynamic code execution eval()/exec() CSOAI-ORG-sovereign-temple-a99f5fc/code_executor.py :93 result = eval(expression)
dynamic code execution __import__() CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/scripts/legion_master.py :32 __import__(pkg)
suspicious endpoint api.telegram.org CSOAI-ORG-sovereign-temple-a99f5fc/guardian/telegram_notifications.py :49 self.api_url = f"https://api.telegram.org/bot{bot_token}"
suspicious endpoint xxxx.ngrok.io CSOAI-ORG-sovereign-temple-a99f5fc/kaggle_gpu_brain.py :151 print(" KAGGLE_GPU_URL=https://xxxx.ngrok.io")
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/deploy.py :36 with urllib.request.urlopen("http://50.217.254.165:40408/api/tags", timeout=5) as r:
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/dragon-council/idle_watchdog.py :20 ("forge", "http://50.217.254.165:40408"),
suspicious endpoint 50.217.254.173 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/dragon-council/idle_watchdog.py :22 ("dragon-council", "http://50.217.254.173:41021"),
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/dragon-council/revenue/dragon_economist.py :149 HEAVY_ENDPOINT = "http://50.217.254.165:40408" # Forge (primary heavy)
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/jarvis/core/hybrid_brain.py :74 vast_ollama_url: str = "http://50.217.254.165:40408",
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/heartbeat.py :17 FORGE_OLLAMA = "http://50.217.254.165:40408"
suspicious endpoint 120.238.149.205 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/m4_command_center.py :20 SPEED_4080S = os.environ.get("SPEED_4080S_URL", "http://120.238.149.205") # RTX 5090 port TBD
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/m4_command_center.py :21 FORGE_URL = "http://50.217.254.165:40408"
suspicious endpoint 50.217.254.173 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/m4_command_center.py :23 DRAGON_COUNCIL_URL = "http://50.217.254.173:41021"
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/node_config.py :109 API_GATEWAY = "http://50.217.254.165:41422"
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/orchestrator.py :10 GPU_FORGE = "http://50.217.254.165:40408" # RTX 8000 #1 — JARVIS/SOV3
suspicious endpoint 50.217.254.165 CSOAI-ORG-sovereign-temple-a99f5fc/legion-omega/trinity/test_penta.py :34 API_GW = "http://50.217.254.165:41422" # Archive port 6006 → external 41422

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:CSOAI-ORG/sovereign-temple/badge.svg)](https://mcpobservatory.com/servers/github:CSOAI-ORG/sovereign-temple/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of CSOAI-ORG.

CSOAI-ORG/sovereign-temple

danger signals16

Navigate

Stream

Features

Display