Local-first embedding server (ONNX on-device or API) — the reference /embed server for CPersona. MIT.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http counts 1 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
handle_remove_tool
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 8589c15 · analyzer v33 · 1d ago
skills & prompt files 1
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 23
filesystem 4
- fs Cloto-dev-CEmbedding-8589c15/cembedding/download_model.py :26
import shutil - fs Cloto-dev-CEmbedding-8589c15/cembedding/sidecar.py :156
with open(tmp_path, "wb") as handle: - fs (weak) Cloto-dev-CEmbedding-8589c15/tests/test_sidecar.py :22
import pathlib - fs (weak) Cloto-dev-CEmbedding-8589c15/tests/test_version_surface.py :16
from pathlib import Path
shell / exec 1
- shell (weak) Cloto-dev-CEmbedding-8589c15/scripts/bench_sidecar_startup.py :24
import subprocess
network 5
- net Cloto-dev-CEmbedding-8589c15/cembedding/auth.py :158
from aiohttp import web - net Cloto-dev-CEmbedding-8589c15/cembedding/download_model.py :6
import urllib.request - net Cloto-dev-CEmbedding-8589c15/cembedding/server.py :20
import httpx - net (weak) Cloto-dev-CEmbedding-8589c15/tests/test_auth.py :12
from aiohttp import web - net (weak) Cloto-dev-CEmbedding-8589c15/tests/test_http_bind.py :21
import socket
secrets 1
- secrets Cloto-dev-CEmbedding-8589c15/cembedding/server.py :66
EMBEDDING_API_KEY = os.environ.get("EMBEDDING_API_KEY", "")
database 6
- db Cloto-dev-CEmbedding-8589c15/cembedding/sidecar.py :38
import sqlite3 - db (weak) Cloto-dev-CEmbedding-8589c15/scripts/backfill_embedding_index.py :27
import sqlite3 - db (weak) Cloto-dev-CEmbedding-8589c15/scripts/bench_sidecar_startup.py :23
import sqlite3 - db (weak) Cloto-dev-CEmbedding-8589c15/tests/test_backfill.py :10
import sqlite3 - db (weak) Cloto-dev-CEmbedding-8589c15/tests/test_sidecar.py :24
import sqlite3 - db (weak) Cloto-dev-CEmbedding-8589c15/tests/test_vector_index.py :8
import sqlite3
tool registrations 1
- handle_remove_tool Cloto-dev-CEmbedding-8589c15/cembedding/server.py :1892
declared dependencies 13
- mcp@>=1.0.0,<1.27.0
- httpx@>=0.27.0
- aiohttp@>=3.9.0
- numpy@>=1.24.0
- aiosqlite@>=0.20.0
- onnxruntime@>=1.17.0
- tokenizers@>=0.15.0
- onnxruntime-gpu@>=1.17.0
- mlx@>=0.18.0
- mlx-embeddings@>=0.1.0
- pytest@>=8.0.0
- pytest-asyncio@>=0.23.0
show 1 more
- ruff@>=0.4.0