github TypeScript re-analysis due

Ecocitizenz/ecz-id-mcp-verifier

Resolver-posture checks for MCP hosts, agents, CLI and CI. Local-first, read-only and privacy-first.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 3 tools

transport stdio · http verified reported listed in the official MCP registry counts 3 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8bada9b · analyzer v29 · 4d ago

code evidence vv0.8.2 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 86

fs Ecocitizenz-ecz-id-mcp-verifier-8bada9b/dist/cli.js :8 import { writeFileSync, appendFileSync } from "node:fs";
fs Ecocitizenz-ecz-id-mcp-verifier-8bada9b/src/cli.ts :9 import { writeFileSync, appendFileSync } from "node:fs";

net Ecocitizenz-ecz-id-mcp-verifier-8bada9b/dist/resolver-client.js :215 const res = await fetch(urls.machine, {
net Ecocitizenz-ecz-id-mcp-verifier-8bada9b/src/resolver-client.ts :314 const res = await fetch(urls.machine, {

ecz_check_target Ecocitizenz-ecz-id-mcp-verifier-8bada9b/dist/mcp/tools.js :150
ecz_recheck_resolver Ecocitizenz-ecz-id-mcp-verifier-8bada9b/dist/mcp/tools.js :161
ecz_explain_result Ecocitizenz-ecz-id-mcp-verifier-8bada9b/dist/mcp/tools.js :172

prepublishOnly Ecocitizenz-ecz-id-mcp-verifier-8bada9b/package.json :50 npm run release:full