Retrieval engine with cryptographic receipts. Token-budgeted search, fact store, gap reporting. Single binary, runs anywhere.
C elevated
- capability exposure inferred + 14
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- C · 55 → C · 43
- C · 43 → C · 55
- B · 31 → C · 43
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
committed secret: GitHub token, OpenAI key, private key, Anthropic key, AWS access key id · dynamic exec: new Function()
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit c4fe4ae · analyzer v33 · 3d ago
skills & prompt files 40
- agent-rules CueCrux-Crux-c4fe4ae/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/CLAUDE.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-billing/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-frame/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-index/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-memory/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-projections/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-proto/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-providers/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-receipts/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-retrieval/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-secrets/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-segment/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-storage/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-types/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecrux-workspace-scan/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecruxctl/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecruxd/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/corecruxd/console/assets/crux.mcpb!/server/node_modules/undici/docs/docs/api/Agent.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-claude-hooks/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-config-wizard/AGENTS.md
- skill CueCrux-Crux-c4fe4ae/crates/crux-config-wizard/assets/skills/execplan-run/SKILL.md
- skill CueCrux-Crux-c4fe4ae/crates/crux-config-wizard/assets/skills/pre-deploy-gate/SKILL.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-contrib/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-cost/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-enterprise-shim/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-escrow/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-integration-tests/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-integrations/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-lens-features/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-mcp/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-observe-api/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-observe/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-router/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-session/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/crux-sync/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/rcx-capability-token/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/rcx-revocation/AGENTS.md
- agent-rules CueCrux-Crux-c4fe4ae/crates/vaultcrux-local/AGENTS.md
- skill CueCrux-Crux-c4fe4ae/integrations/openclaw/crux-memory-custody/SKILL.md
danger signals11
- dynamic code execution new Function() CueCrux-Crux-c4fe4ae/UI-prototype/console-smoke.cjs :27
try { new Function(code); } catch (e) { console.error('FAIL parse:', e.message); process.exit(1); } - committed secret GitHub token CueCrux-Crux-c4fe4ae/crates/corecruxctl/src/config_bundle.rs :440
ghp_01…(40 chars, redacted) - committed secret OpenAI key CueCrux-Crux-c4fe4ae/crates/corecruxctl/src/config_bundle.rs :489
sk-aaa…(27 chars, redacted) - committed secret OpenAI key CueCrux-Crux-c4fe4ae/crates/corecruxctl/src/redact_sweep.rs :217
sk-fix…(29 chars, redacted) - committed secret private key CueCrux-Crux-c4fe4ae/crates/corecruxd/src/auth.rs :2248
PEM private key block (redacted) - committed secret OpenAI key CueCrux-Crux-c4fe4ae/crates/corecruxd/src/redaction.rs :125
sk-fix…(29 chars, redacted) - committed secret Anthropic key CueCrux-Crux-c4fe4ae/crates/crux-claude-hooks/tests/cloud_witness_e2e.rs :29
sk-ant…(37 chars, redacted) - committed secret OpenAI key CueCrux-Crux-c4fe4ae/crates/crux-observe/src/redact.rs :482
sk-fix…(29 chars, redacted) - committed secret AWS access key id CueCrux-Crux-c4fe4ae/crates/crux-observe/src/redact.rs :484
AKIAFI…(20 chars, redacted) - committed secret OpenAI key CueCrux-Crux-c4fe4ae/crates/crux-observe/src/redact_writer.rs :135
sk-fix…(29 chars, redacted) - committed secret OpenAI key CueCrux-Crux-c4fe4ae/crates/crux-observe/tests/leak_canary.rs :25
sk-fix…(29 chars, redacted)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:CueCrux/Crux/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of CueCrux.