Audit the hooks, skills, permissions, MCP servers, and configuration your AI coding agents trust.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 73d8c81 · analyzer v33 · 3d ago
skills & prompt files 2
danger signals1
- committed secret Anthropic key Desouki27-blastradius-73d8c81/src/blastradius.test.ts :147
sk-ant…(39 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 15
filesystem 1
- fs Desouki27-blastradius-73d8c81/src/discover/fs.ts :3
import { readFile, readdir, stat } from "node:fs/promises";
install hooks 1
- prepublishOnly Desouki27-blastradius-73d8c81/package.json :36
npm run build
declared dependencies 2
- @types/node@^22.10.2
- typescript@^5.7.2