github TypeScript analyzed 243f577

Dipeshtripathi13/claude-shorts

github

A "Find shorts" button for whatever you just asked Claude or ChatGPT. Local-first, opt-in, zero dependencies.

maintainer: Dipeshtripathi13
licence: MIT
first seen: 2026-09-02
last seen: 2026-09-03
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-09-08 code analysis flagged committed secret in Dipeshtripathi13/claude-shorts
HIGH 2026-09-04 code analysis flagged committed secret in Dipeshtripathi13/claude-shorts
HIGH 2026-09-03 code analysis flagged committed secret in Dipeshtripathi13/claude-shorts
HIGH 2026-09-02 code analysis flagged committed secret in Dipeshtripathi13/claude-shorts

capabilities 2 tools

transport stdio · http counts 2 tools · 0 res · 0 prompts permission surface via code analysis

tools

open_shorts_panel
suggest_shorts

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 243f577 · analyzer v33 · 1w ago

danger signals4

committed secret Anthropic key Dipeshtripathi13-tangent-243f577/src/test/core.test.ts :27 sk-ant…(39 chars, redacted)
committed secret GitHub token Dipeshtripathi13-tangent-243f577/src/test/core.test.ts :28 ghp_AA…(40 chars, redacted)
committed secret Anthropic key Dipeshtripathi13-tangent-243f577/store-extension/tools/selftest.mjs :144 sk-ant…(37 chars, redacted)
credential in logs credential in log Dipeshtripathi13-tangent-243f577/src/cli.ts :88 log.info(`panel: ${url}/panel?token=${authToken()}`);

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 46

filesystem 9

fs (weak) Dipeshtripathi13-tangent-243f577/scripts/run-tests.mjs :21 import { readdirSync, existsSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/src/config.ts :3 import { mkdirSync, readFileSync, writeFileSync, existsSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/src/core/cache.ts :1 import { readFileSync, writeFileSync, existsSync, renameSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/src/core/quota.ts :1 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/src/surfaces/setup.ts :1 import { readFileSync, writeFileSync, existsSync, copyFileSync, mkdirSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/src/surfaces/watch.ts :1 import { watch, readdirSync, statSync, createReadStream, existsSync } from 'node:fs';
fs (weak) Dipeshtripathi13-tangent-243f577/src/test/core.test.ts :3 import { mkdtempSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/store-extension/tools/make-icons.mjs :13 import { writeFileSync, mkdirSync } from 'node:fs';
fs Dipeshtripathi13-tangent-243f577/store-extension/tools/package.mjs :9 import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, cpSync, readdirSync } from 'node:fs';

shell / exec 8

shell (weak) Dipeshtripathi13-tangent-243f577/scripts/run-tests.mjs :23 import { spawnSync } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/src/client.ts :1 import { spawn } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/src/providers/ytdlp.ts :1 import { execFile } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/src/surfaces/setup.ts :5 import { execFileSync } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/src/surfaces/tui.ts :1 import { spawn } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/store-extension/tools/lint.mjs :13 import { spawnSync } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/store-extension/tools/package.mjs :12 import { execFileSync, spawnSync } from 'node:child_process';
shell Dipeshtripathi13-tangent-243f577/vscode/src/extension.ts :2 import { execFile, spawn } from 'node:child_process';

network 11

net Dipeshtripathi13-tangent-243f577/extension/background.js :43 await fetch(`${base(port)}/event`, {
net Dipeshtripathi13-tangent-243f577/src/client.ts :17 const res = await fetch(`${this.base}/health`, { signal: AbortSignal.timeout(timeoutMs) });
net Dipeshtripathi13-tangent-243f577/src/core/suggest.ts :100 async fetch(topic: Topic, input: Omit<SuggestInput, 'text'>): Promise<SuggestOutcome> {
net Dipeshtripathi13-tangent-243f577/src/daemon/panel.ts :240 fetch(base + '/accept', {
net Dipeshtripathi13-tangent-243f577/src/daemon/server.ts :1 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net Dipeshtripathi13-tangent-243f577/src/providers/piped.ts :21 const res = await fetch(`${this.instance}/healthcheck`, { signal: AbortSignal.timeout(4000) });
net Dipeshtripathi13-tangent-243f577/src/providers/youtube.ts :96 res = await fetch(url, { signal: AbortSignal.timeout(8000) });
net Dipeshtripathi13-tangent-243f577/src/surfaces/tui.ts :155 const res = await fetch(url, { headers: { accept: 'text/event-stream' } });
net (weak) Dipeshtripathi13-tangent-243f577/src/test/core.test.ts :296 const out = await s.fetch(offer.topic, { sessionId: 'sess', source: 'claude-code' });
net Dipeshtripathi13-tangent-243f577/store-extension/src/youtube.js :91 res = await fetch(url, { signal: AbortSignal.timeout(10_000) });
net Dipeshtripathi13-tangent-243f577/vscode/src/extension.ts :103 const res = await fetch(`http://127.0.0.1:${port}/health`, { signal: AbortSignal.timeout(800) });

tool registrations 2

suggest_shorts Dipeshtripathi13-tangent-243f577/src/mcp/server.ts :25
open_shorts_panel Dipeshtripathi13-tangent-243f577/src/mcp/server.ts :40

install hooks 1

prepublishOnly Dipeshtripathi13-tangent-243f577/package.json :24 npm run build

declared dependencies 2

@types/node@^22.10.0
typescript@^5.7.0