MCP Observatory
github analyzed fc5b9de

Jonnyton/Workflow

github

Create, browse, remix, collaborate on, and run durable AI workflow nodes from MCP hosts.

maintainer
Jonnyton
license
—
first seen
2026-06-03
last seen
2026-06-03
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged hidden prompt content ×2 in Jonnyton/Workflow
  2. HIGH code analysis flagged hidden prompt content ×2 in Jonnyton/Workflow
  3. HIGH code analysis flagged hidden prompt content ×2 in Jonnyton/Workflow
capabilities 0 tools
transport streamable-http · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit fc5b9de · analyzer v18 · 11h ago

skills & prompt files 77

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 2

  • fs Jonnyton-Workflow-fc5b9de/WebSite/site/scripts/snapshot-mcp.mjs :17 import { writeFileSync, readFileSync, existsSync, renameSync, unlinkSync } from 'node:fs';
  • fs Jonnyton-Workflow-fc5b9de/WebSite/site/scripts/snapshot-repo.mjs :2 import { existsSync, readFileSync, writeFileSync } from 'node:fs';

shell / exec 1

  • shell Jonnyton-Workflow-fc5b9de/WebSite/site/scripts/snapshot-repo.mjs :1 import { execFileSync } from 'node:child_process';

network 7

  • net Jonnyton-Workflow-fc5b9de/WebSite/site/src/lib/live/project.ts :180 fetch('https://api.github.com/repos/Jonnyton/Workflow'),
  • net Jonnyton-Workflow-fc5b9de/WebSite/site/src/lib/mcp/live.ts :38 const res = await fetch(MCP_PATH, {
  • net Jonnyton-Workflow-fc5b9de/WebSite/site/src/lib/mcp/playground.ts :60 const res = await fetch(MCP_PATH, {
  • net Jonnyton-Workflow-fc5b9de/WebSite/site/static/play/scorched-tanks/original.js :119 const response = await fetch(url, { cache: "no-store" });
  • net Jonnyton-Workflow-fc5b9de/WebSite/site/static/play/scorched-tanks/service-worker.js :49 fetch(event.request)
  • net Jonnyton-Workflow-fc5b9de/deploy/cloudflare-worker/worker.js :142 upstreamResponse = await fetch(upstreamRequest);
  • net Jonnyton-Workflow-fc5b9de/prototype/web-app-v0/src/routes/catalog/+page.server.ts :23 const res = await fetch(`${gatewayUrl}/discover_nodes`, {

declared dependencies 16

  • @modelcontextprotocol/sdk@^1.0.4
  • @playwright/test@^1.48.0
  • @sveltejs/adapter-static@^3.0.6
  • @sveltejs/kit@^2.8.0
  • @sveltejs/vite-plugin-svelte@^4.0.0
  • @typescript-eslint/eslint-plugin@^8.0.0
  • @typescript-eslint/parser@^8.0.0
  • eslint@^9.0.0
  • eslint-config-prettier@^9.1.0
  • eslint-plugin-svelte@^2.46.0
  • prettier@^3.3.0
  • prettier-plugin-svelte@^3.2.0
  • svelte@^5.1.0
  • svelte-check@^4.0.5
  • typescript@^5.5.0
  • vite@^5.4.10