Sync, rotate, and manage .env files across environments securely
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×3 in Coding-Dev-Tools/envault
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit ebe06a1 · analyzer v28 · 3h ago
skills & prompt files 1
- agent-rules Coding-Dev-Tools-envault-ebe06a1/AGENTS.md
danger signals3
- committed secret private key Coding-Dev-Tools-envault-ebe06a1/tests/test_encrypt_formats.py :17
PEM private key block (redacted) - committed secret Anthropic key Coding-Dev-Tools-envault-ebe06a1/tests/test_encrypt_formats.py :383
sk-ant…(70 chars, redacted) - committed secret private key Coding-Dev-Tools-envault-ebe06a1/tests/test_encrypt_secret_formats.py :16
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 30
filesystem 12
- fs Coding-Dev-Tools-envault-ebe06a1/src/envault/audit.py :7
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/backup.py :15
import shutil - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/cli.py :5
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/config.py :5
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/diff.py :7
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/encrypt.py :17
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/history.py :8
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/rotate.py :8
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/security_audit.py :8
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/serve.py :25
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/stores/__init__.py :7
from pathlib import Path - fs Coding-Dev-Tools-envault-ebe06a1/src/envault/sync.py :5
from pathlib import Path
shell / exec 1
- shell Coding-Dev-Tools-envault-ebe06a1/src/envault/history.py :6
import subprocess
network 3
- net Coding-Dev-Tools-envault-ebe06a1/src/envault/auth.py :18
from urllib.error import URLError - net Coding-Dev-Tools-envault-ebe06a1/src/envault/serve.py :27
from urllib.error import URLError - net Coding-Dev-Tools-envault-ebe06a1/src/envault/stores/__init__.py :269
import requests
secrets 4
- secrets Coding-Dev-Tools-envault-ebe06a1/src/envault/auth.py :257
bearer_token = os.environ.get("ENVAULT_API_TOKEN", "") - secrets Coding-Dev-Tools-envault-ebe06a1/src/envault/encrypt.py :15
import getpass - secrets Coding-Dev-Tools-envault-ebe06a1/src/envault/serve.py :437
import getpass - secrets Coding-Dev-Tools-envault-ebe06a1/src/envault/stores/__init__.py :186
self.token = token or os.environ.get("VAULT_TOKEN", "")
declared dependencies 15
- typer@>=0.25.1
- rich@>=13.0.0
- python-dotenv@>=1.2.2
- pyyaml@>=6.0.3
- cryptography@>=48.0.0
- pydantic@>=2.13.4
- hvac@>=2.0.0
- boto3@>=1.28.0
- requests@>=2.31.0
- onepasswordconnectsdk@>=1.1.0
- pytest@>=7.0.0
- pytest-cov@>=4.0.0
- responses@>=0.24.0
- ruff@>=0.4.0
- tomli@>=2.0.0; python_version <