X32-Bridge is a local, Model Context Protocol (MCP) and OSC bridge for MIDAS M32 and compatible X32-family console workflows to control via AI such as Claude IDE.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit b1dcc02 · analyzer v33 · 3w ago
skills & prompt files 10
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-analyze/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-checklist/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-clarify/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-constitution/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-converge/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-implement/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-plan/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-specify/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-tasks/SKILL.md
- skill DXBMARK-m32-bridge-b1dcc02/.agents/skills/speckit-taskstoissues/SKILL.md
danger signals1
- dynamic code execution __import__ sink DXBMARK-m32-bridge-b1dcc02/tests/unit/test_secure_standalone_bootstrap.py :572
completed = __import__("subprocess").run(
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 254
filesystem 104
- fs (weak) DXBMARK-m32-bridge-b1dcc02/scripts/build_release_manifest.py :7
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/scripts/release_resolver.py :9
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/scripts/secure_bootstrap.py :16
import shutil - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/audit/writer.py :8
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/cli.py :9
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/config/event_profile.py :8
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/config/runtime.py :8
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/config/schemas.py :6
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/diagnostics/mcp_guidance.py :6
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/diagnostics/runtime.py :10
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/application_version.py :16
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/dependency_failures.py :6
from pathlib import Path
show 28 more
- fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/first_run.py :6
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/ide_detector.py :5
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/install_metadata.py :11
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/lifecycle.py :5
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/mcp_guidance.py :9
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/paths.py :4
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/planner.py :3
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/release_download.py :8
import shutil - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/release_manifest.py :8
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/release_selection.py :12
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/runtime_faults.py :7
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/runtime_manager.py :5
import shutil - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/runtime_status.py :16
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/script_runtime.py :8
import shutil - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/service.py :3
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/state.py :4
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/tty_app.py :7
import shutil - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/verification.py :5
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/mcp/server.py :10
from pathlib import Path - fs DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/runtime_preconditions.py :7
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_installer_cross_platform_gate.py :40
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_posix_installer_dry_run.py :3
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_posix_launcher_contract.py :3
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_windows_cmd_launcher_contract.py :3
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_windows_installer_dry_run.py :3
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_windows_smoke.py :4
from pathlib import PureWindowsPath - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_claude_safe_write_conversation.py :4
from pathlib import Path - fs (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_m32_bridge_launcher_stdio.py :7
from pathlib import Path
64 more not shown — this panel samples each group; the count above is the real total.
shell / exec 29
- shell (weak) DXBMARK-m32-bridge-b1dcc02/specs/003-cross-platform-installers-and-first-run-setup/references/dxbmark_cli.py :39
os.system('') - shell DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/diagnostics/runtime.py :7
import subprocess - shell DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/runtime_manager.py :6
import subprocess - shell DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/script_runtime.py :9
import subprocess - shell DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/tty_app.py :170
os.system("") - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_macos_smoke.py :6
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/cross_platform/test_posix_installer_dry_run.py :6
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_claude_read_only_conversation.py :4
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_m32_bridge_launcher_stdio.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_mcp_protocol_resilience.py :4
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_mcp_runtime_startup_diagnostics.py :4
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_operator_controls.py :5
import subprocess
show 17 more
- shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_runtime_diagnostics.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_stdio_clean_output.py :4
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/integration_external_emulator/test_detect_device_read_only.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/integration_fake_m32/test_config_commands_no_write.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/integration_fake_m32/test_detect_device_no_write.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/integration_fake_m32/test_setup_no_write.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/dependency_artifact_gate.py :8
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_clean_host_bootstrap_remediation.py :10
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_cli_config_set.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_cli_config_show.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_cli_config_validate.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_cli_runtime_helpers.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_cli_setup.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_cli_setup_missing_host.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_dependency_artifact_resolution_gate.py :3
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_installer_tty_ux.py :5
import subprocess - shell (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_interactive_shell_non_tty.py :5
import subprocess
network 18
- net (weak) DXBMARK-m32-bridge-b1dcc02/scripts/secure_bootstrap.py :17
import socket - net (weak) DXBMARK-m32-bridge-b1dcc02/specs/003-cross-platform-installers-and-first-run-setup/references/dxbmark_cli.py :16
import urllib.request - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/diagnostics/runtime.py :6
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/fake_m32/server.py :5
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/first_run.py :4
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/install_metadata.py :13
from urllib.parse import urlsplit, urlunsplit - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/release_download.py :9
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/release_selection.py :7
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/runtime_manager.py :9
import urllib.error - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/runtime_status.py :10
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/installer/tty_app.py :8
import socket - net DXBMARK-m32-bridge-b1dcc02/src/m32_bridge/osc/transport.py :5
import socket
show 6 more
- net (weak) DXBMARK-m32-bridge-b1dcc02/tests/e2e_mcp/test_mcp_stdio_no_network_port.py :3
import socket - net (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/lockfile_artifact_audit.py :6
from urllib.parse import unquote, urlparse - net (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_installer_first_run_non_tty.py :4
import socket - net (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_runtime_final_closure.py :7
import urllib.error - net (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_secure_standalone_bootstrap.py :144
assert "import requests" not in text - net (weak) DXBMARK-m32-bridge-b1dcc02/tests/unit/test_unified_installer.py :128
monkeypatch.setattr("urllib.request.urlopen", lambda *_a, **_k: pytest.fail("network called"))
declared dependencies 6
- mcp@>=1.0,<2
- jsonschema@>=4.23,<5
- pyyaml@>=6.0,<7
- hypothesis@>=6.100,<7
- pytest@>=8.0,<9
- pytest-asyncio@>=0.23,<2