MCP Observatory
4m ago Tracked 60,021 Last 4m ago 24h 2,474
github TypeScript analyzed 337a8cf

Iron-Mark/Hackathon-HireProof

github

Proof-backed AI agent for checking suspicious job posts, recruiter messages, and apply links, now live with case study and pilot intake.

maintainer
Iron-Mark
licence
—
first seen
2026-06-10
last seen
2026-09-18
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 337a8cf · analyzer v33 · 3h ago

skills & prompt files 12

danger signals14

code evidence vv1.1.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 356

filesystem 68

  • fs Iron-Mark-Hackathon-HireProof-337a8cf/app/api/downloads/[file]/route.ts :1 import { readFile } from 'node:fs/promises'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/lib/db.ts :1 import fs from 'fs/promises'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/lib/json-record-store.ts :1 import fs from 'fs/promises'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/lib/research-agent.mjs :2 import fs from 'node:fs'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/lib/seo.ts :1 import { statSync } from 'node:fs'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-cli/bin/hireproof.mjs :2 import { mkdir, readFile, rm, writeFile } from 'node:fs/promises'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-cli/lib/report-history.mjs :1 import { chmod, mkdir, readFile, writeFile } from 'node:fs/promises'
  • fs Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-cli/lib/tui-app.mjs :1 import { readFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/check-live-chat-proof.mjs :1 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/check-web-vitals.mjs :1 import { mkdir, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/cleanup-local-data.mjs :1 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/eval-real-text.mjs :24 import fs from 'node:fs/promises'
show 28 more
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/eval-scenarios.mjs :20 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/generate-chrome-store-assets.mjs :1 import { mkdir } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/generate-extension-icons.mjs :1 import { mkdir, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/orchestrate-cursor-phases.mjs :9 import { existsSync } from 'node:fs'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/package-extension.mjs :1 import { mkdir, rm, readFile, readdir, stat, copyFile, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/package-integrations.mjs :1 import { mkdir, readFile, readdir, stat, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/patch-middleware-swc-trace.mjs :5 import fs from 'node:fs'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/prepare-github-package.mjs :1 import { cp, mkdir, readFile, rm, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/research-agent.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/score-accuracy.mjs :22 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/train-risk-weights.mjs :29 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/validate-integrations.mjs :2 import { readFile, readdir, stat } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/verify-crawl-social-preview.mjs :1 import { mkdir, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/sdk/scripts/write-esm-wrapper.mjs :1 import { mkdir, writeFile } from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/alternative-jobs.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/api-v1-audit-e2e.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/audit-client-no-engine-import.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/auth-rate-limit.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/body-limit-hardening.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/byok-credentials.test.mjs :31 fs.readFile(new URL('../app/developer/developer-client.tsx', import.meta.url), 'utf8')
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/cost-safety.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/cursor-pretool-guard.test.mjs :4 import fs from 'node:fs'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/cursor-routes.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/demo-auth-gate.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/deployment-metadata-redaction.test.mjs :2 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/distribution-artifacts.test.mjs :3 import fs from 'node:fs'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/download-hardening.test.mjs :3 import fs from 'node:fs/promises'
  • fs (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/e2e-server-helper.test.mjs :3 import fs from 'node:fs/promises'

28 more not shown — this panel samples each group; the count above is the real total.

shell / exec 7

  • shell Iron-Mark-Hackathon-HireProof-337a8cf/lib/research-agent.mjs :1 import { spawn } from 'node:child_process'
  • shell (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/orchestrate-cursor-phases.mjs :8 import { spawnSync } from 'node:child_process'
  • shell (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/package-extension.mjs :4 import { execFile } from 'node:child_process'
  • shell (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/validate-integrations.mjs :4 import { execFileSync } from 'node:child_process'
  • shell (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/cursor-pretool-guard.test.mjs :3 import { spawn, spawnSync } from 'node:child_process'
  • shell (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/helpers/e2e-server.mjs :1 import { spawn, spawnSync } from 'node:child_process'
  • shell (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/hireproof-cli.test.mjs :3 import { spawn } from 'node:child_process'

network 46

  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/api/audit/route.ts :281 const res = await fetch(`${baseUrl}/api/mcp`, {
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/api/developer/webhook-test/route.ts :88 const response = await fetch(url, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/api/v1/audit/route.ts :422 const res = await fetch(`${baseUrl}/api/mcp`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/audit/audit-client.tsx :221 fetch('/api/health')
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/developer/developer-client.tsx :120 const me = await fetch('/api/auth/me').then((res) => res.json())
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/discord-bot/page.tsx :61 code={`const response = await fetch('/api/webhooks/discord', {
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/slack-bot/page.tsx :61 code={`const response = await fetch('/api/webhooks/slack', {
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/streaming/page.tsx :58 code={`const response = await fetch('/api/audit', { method: 'POST', body })
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/telegram-bot/page.tsx :61 code={`const response = await fetch('/api/webhooks/telegram', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/explore/explore-client.tsx :39 const res = await fetch(`/api/intelligence/reports?${params.toString()}`)
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/lab/lab-client.tsx :215 const response = await fetch('/api/audit', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/pilot/admin/pilot-admin-client.tsx :39 fetch('/api/pilot/requests').then(async (response) => {
show 28 more
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/pilot/pilot-intake-client.tsx :69 fetch('/api/pilot/requests', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/app/trends/trends-client.tsx :10 // Rendered from server-provided stored-audit trends; no client fetch (keeps crawlable HTML and zero cost).
  • net Iron-Mark-Hackathon-HireProof-337a8cf/components/analytics/product-event-tracker.tsx :20 fetch('/api/analytics/events', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/components/audit/result-screen.tsx :675 const res = await fetch('/api/intelligence/feedback', {
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/components/docs/api-playground.tsx :36 const res = await fetch('/api/v1/audit', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/components/layout/site-footer.tsx :188 fetch("/api/health")
  • net Iron-Mark-Hackathon-HireProof-337a8cf/components/system/demo-login-snackbar.tsx :55 const res = await fetch('/api/auth/demo-login', { method: 'POST' })
  • net Iron-Mark-Hackathon-HireProof-337a8cf/extension/popup.js :118 const res = await fetch(config.serverUrl + '/api/v1/audit', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/evidence-broker.ts :370 const response = await fetch(url, { ...options, signal: controller.signal })
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/hireproof-bot.ts :427 const response = await fetch(`https://discord.com/api/v10/webhooks/${applicationId}/${token}/messages/@original`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/job-url-enrichment.mjs :3 import net from 'node:net'
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/provider-verification.ts :12 const res = await fetch('https://api.openai.com/v1/models', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/request-security.ts :1 import net from 'node:net'
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/serpapi.ts :738 const response = await fetch(`${API_BASE}?${queryParams.toString()}`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/lib/webhook-url-security.ts :2 import net from 'node:net'
  • net Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-cli/bin/hireproof.mjs :132 const response = await fetch(url, options)
  • net Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-cli/lib/tui-app.mjs :492 const response = await fetch(`${baseUrl.replace(/\/+$/, '')}/api/v1/audit`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-langchain/dist/index.js :97 const response = await fetch(`${baseUrl}/api/v1/audit`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-extension.zip!/popup.js :104 const res = await fetch(config.serverUrl + '/api/v1/audit', {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-langchain-tool.ts :75 const response = await fetch(`${baseUrl.replace(/\/$/, '')}/api/v1/audit`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-native-integrations.zip!/packages/hireproof-langchain/dist/index.js :36 const response = await fetch(`${baseUrl}/api/v1/audit`, {
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/check-live-chat-proof.mjs :65 const response = await withTimeout(`GET ${url}`, (signal) => fetch(url, { signal }))
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/cursor-smoke.mjs :54 await fetch(`${base}/api/internal/cursor/nightly-repo-health`, { method: 'POST', headers }),
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/register-discord-commands.mjs :36 const response = await fetch(url, {
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/smoke-docker.mjs :15 await assertOk('health check', () => fetch(`${base}/api/health`))
  • net (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/verify-crawl-social-preview.mjs :33 const response = await fetch(url, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/sdk/dist/index.js :216 const res = await fetch(`${this.baseUrl}${path}`, {
  • net Iron-Mark-Hackathon-HireProof-337a8cf/sdk/index.ts :329 const res = await fetch(`${this.baseUrl}${path}`, {

6 more not shown — this panel samples each group; the count above is the real total.

secrets 34

  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/app/api/audit/route.ts :283 headers: { 'Content-Type': 'application/json', 'x-api-key': process.env.AGENT_API_KEY?.trim() || '' },
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/email-forwarding/page.tsx :60 const hireproof = new HireProof({ apiKey: process.env.HIREPROOF_API_KEY });
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/langchain/page.tsx :39 apiKey: process.env.HIREPROOF_API_KEY,
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/sdk-quickstart/page.tsx :49 apiKey: process.env.HIREPROOF_API_KEY!,
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/app/docs/sdk/page.tsx :65 apiKey: process.env.HIREPROOF_API_KEY,
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/ai-model.ts :5 apiKey: process.env.MODEL_PROVIDER_KEY || '',
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/auth-core.mjs :11 process.env.SESSION_SECRET ||
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/auth-store.ts :175 const configured = process.env.SESSION_SECRET?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/cursor/config.ts :14 return trimEnv(process.env.CURSOR_API_KEY)
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/db.ts :38 const token = process.env.UPSTASH_REDIS_REST_TOKEN?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/evidence-broker.ts :472 const key = process.env.GOOGLE_SAFE_BROWSING_API_KEY?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/hireproof-bot.ts :62 return present(process.env.SLACK_BOT_TOKEN) && present(process.env.SLACK_SIGNING_SECRET) && hasChatState()
show 22 more
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/json-record-store.ts :11 const token = process.env.UPSTASH_REDIS_REST_TOKEN?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/live-audit-guardrails.ts :27 const token = process.env.UPSTASH_REDIS_REST_TOKEN?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/ocr.mjs :147 const apiKey = process.env.GOOGLE_CLOUD_VISION_API_KEY?.trim() || process.env.GOOGLE_VISION_API_KEY?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/platform-readiness.ts :13 state: (present(process.env.SLACK_BOT_TOKEN) && present(process.env.SLACK_SIGNING_SECRET) && present(process.env.REDIS_URL)
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/provider-cost-guard.mjs :22 const token = process.env.UPSTASH_REDIS_REST_TOKEN?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/provider-cost-guard.ts :32 const token = process.env.UPSTASH_REDIS_REST_TOKEN?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/rate-limit.ts :38 const token = process.env.UPSTASH_REDIS_REST_TOKEN?.trim()
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/serpapi.ts :4 const SERPAPI_KEY = process.env.SERPAPI_API_KEY
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/lib/workflow-secret.ts :26 return process.env.WORKFLOW_SECRET?.trim() || ''
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-cli/bin/hireproof.mjs :114 apiKey: String(flags.apiKey || process.env.HIREPROOF_API_KEY || config.apiKey || ''),
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-langchain/dist/index.js :85 const apiKey = options.apiKey || process.env.HIREPROOF_API_KEY
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-langchain/examples/basic-agent.mjs :4 apiKey: process.env.HIREPROOF_API_KEY,
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-langchain-tool.ts :72 const apiKey = process.env.HIREPROOF_API_KEY
  • secrets Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-native-integrations.zip!/packages/hireproof-langchain/dist/index.js :24 const apiKey = options.apiKey || process.env.HIREPROOF_API_KEY
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-native-integrations.zip!/packages/hireproof-langchain/examples/basic-agent.mjs :4 apiKey: process.env.HIREPROOF_API_KEY,
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/cursor-smoke.mjs :10 const apiKey = process.env.CURSOR_API_KEY?.trim()
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/register-discord-commands.mjs :4 const botToken = process.env.DISCORD_BOT_TOKEN?.trim()
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/smoke-docker.mjs :4 const agentApiKey = process.env.AGENT_API_KEY || 'local-dev-agent-key-32-char-minimum-value'
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/scripts/validate-integrations.mjs :111 if (process.env.HIREPROOF_API_KEY) {
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/api-v1-audit-e2e.test.mjs :14 if (process.env.AGENT_API_KEY?.trim()) return process.env.AGENT_API_KEY.trim()
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/helpers/e2e-server.mjs :21 const agentApiKey = process.env.AGENT_API_KEY || readLocalEnvValue('AGENT_API_KEY') || LOCAL_TEST_AGENT_KEY
  • secrets (weak) Iron-Mark-Hackathon-HireProof-337a8cf/test/ocr.test.mjs :13 const previous = process.env.GOOGLE_CLOUD_VISION_API_KEY

install hooks 6

  • prepublishOnly Iron-Mark-Hackathon-HireProof-337a8cf/integrations/n8n-nodes-hireproof/package.json :24 npm run test
  • prepublishOnly Iron-Mark-Hackathon-HireProof-337a8cf/package.json :21 node scripts/prevent-root-publish.mjs
  • prepublishOnly Iron-Mark-Hackathon-HireProof-337a8cf/packages/hireproof-langchain/package.json :17 npm run test
  • prepublishOnly Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-native-integrations.zip!/integrations/n8n-nodes-hireproof/package.json :24 npm run test
  • prepublishOnly Iron-Mark-Hackathon-HireProof-337a8cf/public/downloads/hireproof-native-integrations.zip!/packages/hireproof-langchain/package.json :17 npm run test
  • prepublishOnly Iron-Mark-Hackathon-HireProof-337a8cf/sdk/package.json :21 npm run build

declared dependencies 40

  • @modelcontextprotocol/sdk@^1.30.0
  • @ai-sdk/gateway@^4.0.78
  • @ai-sdk/openai@^4.0.65
  • @chat-adapter/discord@4.35.0
  • @chat-adapter/slack@4.35.0
  • @chat-adapter/state-redis@4.35.0
  • @chat-adapter/telegram@4.35.0
  • @cursor/sdk@^1.0.31
  • @swc/helpers@0.5.23
  • @upstash/ratelimit@^2.0.8
  • @upstash/redis@^1.38.4
  • @vercel/analytics@^2.0.1
show 28 more
  • @zernio/chat-sdk-adapter@^0.5.1
  • ai@^7.0.97
  • chat@4.35.0
  • class-variance-authority@^0.7.1
  • clsx@^2.1.1
  • framer-motion@^12.42.2
  • html2canvas@^1.4.1
  • jspdf@^4.2.1
  • lucide-react@^1.22.0
  • next@16.3.4
  • next-themes@^0.4.6
  • react@^19.2.8
  • react-dom@^19.2.8
  • recharts@^3.10.1
  • sharp@^0.35.4
  • tesseract.js@^7.0.0
  • typescript@6.0.3
  • workflow@5.0.0-beta.50
  • zod@^4.4.3
  • @openai/codex-sdk@^0.146.1
  • @tailwindcss/postcss@^4.3.3
  • @types/node@^26.2.0
  • @types/react@^19.2.18
  • @types/react-dom@^19.2.7
  • autoprefixer@^10.5.6
  • playwright@^1.60.0
  • postcss@^8.5.10
  • tailwindcss@^4.3.2

cursor-plugin 5

  • opaque (low) Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/BUGBOT.md bundled .cursor/ plugin descriptor (Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/BUGBOT.md) — presence-detected; review the descriptor
  • opaque (low) Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/environment.json bundled .cursor/ plugin descriptor (Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/environment.json) — presence-detected; review the descriptor
  • opaque (low) Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/hooks.json bundled .cursor/ plugin descriptor (Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/hooks.json) — presence-detected; review the descriptor
  • opaque (low) Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/rules/hireproof-architecture.mdc bundled .cursor/ plugin descriptor (Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/rules/hireproof-architecture.mdc) — presence-detected; review the descriptor
  • opaque (low) Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/skills/hireproof-architecture/SKILL.md bundled .cursor/ plugin descriptor (Iron-Mark-Hackathon-HireProof-337a8cf/.cursor/skills/hireproof-architecture/SKILL.md) — presence-detected; review the descriptor

obfuscation 2

  • dynamic require()/import() Iron-Mark-Hackathon-HireProof-337a8cf/test/cursor-routes.test.mjs :120 const { resolveCursorQaBaseUrl } = await import(`../lib/cursor/qa-target.mjs?case=${Date.now()}`)
  • dynamic require()/import() Iron-Mark-Hackathon-HireProof-337a8cf/test/provider-response-bounds.test.mjs :19 const { verifyProviderCredential } = await import(`../lib/provider-verification.ts?case=${Date.now()}`)