Agentic skill-economy protocol for AI agents — identity, reputation, escrow, and governance, live on Casper Testnet (Odra) and Stellar Testnet (Soroban ZK).
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 12
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 1m ago · see ecosystem CVEs →
- C · 59 → D · 67
No known CVEs for this server.
- high dangerous code
dynamic exec: eval() · suspicious bundled script in 2 file(s) · obfuscated payload: dynamic require()/import()
analyzed commit 39b3872 · analyzer v28 · 3d ago
skills & prompt files 1
danger signals6
- dynamic code execution eval() Eilodon-KARMA-Eilodon-39b3872/src/__tests__/redis_backup.test.ts :18
async eval(_script: string, keyCount: number, ...args: unknown[]): Promise<unknown> { - dynamic code execution eval() Eilodon-KARMA-Eilodon-39b3872/src/__tests__/task_store.test.ts :45
async eval(_script: string, keyCount: number, ...args: unknown[]): Promise<unknown> { - dynamic code execution eval() Eilodon-KARMA-Eilodon-39b3872/src/core/task_store.ts :98
eval(script: string, keyCount: number, ...args: unknown[]): Promise<unknown>; - dynamic code execution eval() Eilodon-KARMA-Eilodon-39b3872/src/storage/redis.ts :10
eval(script: string, keyCount: number, ...args: unknown[]): Promise<unknown>; - suspicious bundled script suspicious bundled script Eilodon-KARMA-Eilodon-39b3872/.claude/hooks/session-start.sh :93
curl -fsSL https://raw.githubusercontent.com/Eilodon/CALM/main/scripts/install.sh | sh || true - suspicious bundled script suspicious bundled script Eilodon-KARMA-Eilodon-39b3872/script/calm-mcp-launcher.sh :40
curl -fsSL https://raw.githubusercontent.com/Eilodon/CALM/main/scripts/install.sh | sh 1>&2
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:Eilodon/KARMA-Eilodon/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of Eilodon.