The first quantum-inspired keyring built specifically for AI coding agents. Secure secrets with superposition, entanglement, tunneling, and teleportation.
- capability exposure inferred + 35
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1d ago · see ecosystem CVEs →
- B · 32 → C · 44
- B · 24 → B · 32
- B · 29 → B · 24
- C · 41 → B · 29
- C · 45 → C · 41
- C · 40 → C · 45
- C · 43 → C · 40
- C · 49 → C · 43
No known CVEs for this server.
- high tool shadowing get_secret
tool "get_secret" shadows a verified server's tool
analyzed commit 152df34 · analyzer v33 · 3d ago
skills & prompt files 11
- agent-rules I4cTime-q-ring-152df34/claude-code-plugin/CLAUDE.md
- skill I4cTime-q-ring-152df34/claude-code-plugin/skills/exec-with-secrets/SKILL.md
- skill I4cTime-q-ring-152df34/claude-code-plugin/skills/project-onboarding/SKILL.md
- skill I4cTime-q-ring-152df34/claude-code-plugin/skills/secret-management/SKILL.md
- skill I4cTime-q-ring-152df34/claude-code-plugin/skills/secret-rotation/SKILL.md
- skill I4cTime-q-ring-152df34/claude-code-plugin/skills/secret-scanning/SKILL.md
- skill I4cTime-q-ring-152df34/cursor-plugin/skills/exec-with-secrets/SKILL.md
- skill I4cTime-q-ring-152df34/cursor-plugin/skills/project-onboarding/SKILL.md
- skill I4cTime-q-ring-152df34/cursor-plugin/skills/secret-management/SKILL.md
- skill I4cTime-q-ring-152df34/cursor-plugin/skills/secret-rotation/SKILL.md
- skill I4cTime-q-ring-152df34/cursor-plugin/skills/secret-scanning/SKILL.md
danger signals3
- suspicious endpoint 1.1.1.1 I4cTime-q-ring-152df34/src/__tests__/core/ssrf-jit.test.ts :44
expect(checkJitHttpProvisionUrl("https://1.1.1.1/path")).toBeNull(); - suspicious endpoint 8.8.8.8 I4cTime-q-ring-152df34/src/__tests__/core/ssrf.test.ts :73
const result = await checkSSRF("https://8.8.8.8/test"); - suspicious endpoint 1.1.1.1 I4cTime-q-ring-152df34/src/__tests__/core/ssrf.test.ts :97
expect(checkSSRFSync("https://1.1.1.1/path")).toBeNull();
[](https://mcpobservatory.com/servers/github:I4cTime/quantum_ring/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of I4cTime.