github Python re-analysis due

Cloto-dev/CEmbedding

github

Local-first embedding server (ONNX on-device or API) — the reference /embed server for CPersona. MIT.

maintainer
Cloto-dev
licence
MIT
first seen
2026-07-19
last seen
2026-09-16
releases · 30d
1
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools
transport stdio · streamable-http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • handle_remove_tool
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8589c15 · analyzer v33 · 1d ago

skills & prompt files 1

code evidence vv0.7.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 23

filesystem 4

  • fs Cloto-dev-CEmbedding-8589c15/cembedding/download_model.py :26 import shutil
  • fs Cloto-dev-CEmbedding-8589c15/cembedding/sidecar.py :156 with open(tmp_path, "wb") as handle:
  • fs (weak) Cloto-dev-CEmbedding-8589c15/tests/test_sidecar.py :22 import pathlib
  • fs (weak) Cloto-dev-CEmbedding-8589c15/tests/test_version_surface.py :16 from pathlib import Path

shell / exec 1

  • shell (weak) Cloto-dev-CEmbedding-8589c15/scripts/bench_sidecar_startup.py :24 import subprocess

network 5

  • net Cloto-dev-CEmbedding-8589c15/cembedding/auth.py :158 from aiohttp import web
  • net Cloto-dev-CEmbedding-8589c15/cembedding/download_model.py :6 import urllib.request
  • net Cloto-dev-CEmbedding-8589c15/cembedding/server.py :20 import httpx
  • net (weak) Cloto-dev-CEmbedding-8589c15/tests/test_auth.py :12 from aiohttp import web
  • net (weak) Cloto-dev-CEmbedding-8589c15/tests/test_http_bind.py :21 import socket

secrets 1

  • secrets Cloto-dev-CEmbedding-8589c15/cembedding/server.py :66 EMBEDDING_API_KEY = os.environ.get("EMBEDDING_API_KEY", "")

database 6

  • db Cloto-dev-CEmbedding-8589c15/cembedding/sidecar.py :38 import sqlite3
  • db (weak) Cloto-dev-CEmbedding-8589c15/scripts/backfill_embedding_index.py :27 import sqlite3
  • db (weak) Cloto-dev-CEmbedding-8589c15/scripts/bench_sidecar_startup.py :23 import sqlite3
  • db (weak) Cloto-dev-CEmbedding-8589c15/tests/test_backfill.py :10 import sqlite3
  • db (weak) Cloto-dev-CEmbedding-8589c15/tests/test_sidecar.py :24 import sqlite3
  • db (weak) Cloto-dev-CEmbedding-8589c15/tests/test_vector_index.py :8 import sqlite3

tool registrations 1

  • handle_remove_tool Cloto-dev-CEmbedding-8589c15/cembedding/server.py :1892

declared dependencies 13

  • mcp@>=1.0.0,<1.27.0
  • httpx@>=0.27.0
  • aiohttp@>=3.9.0
  • numpy@>=1.24.0
  • aiosqlite@>=0.20.0
  • onnxruntime@>=1.17.0
  • tokenizers@>=0.15.0
  • onnxruntime-gpu@>=1.17.0
  • mlx@>=0.18.0
  • mlx-embeddings@>=0.1.0
  • pytest@>=8.0.0
  • pytest-asyncio@>=0.23.0
show 1 more
  • ruff@>=0.4.0