MCP Observatory
3m ago Tracked 60,021 Last 3m ago 24h 2,474
github TypeScript analyzed 551676a

Konuktor/rigorrun

github

Acceptance testing for AI agents that take real actions. Show it a job once; it verifies your agent against the state of the system it changed.

maintainer
Konuktor
licence
MIT
first seen
2026-09-09
last seen
2026-09-11
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 551676a · analyzer v33 · 1d ago

danger signals2

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 333

filesystem 71

  • fs (weak) Konuktor-rigorrun-551676a/apps/app/vite.config.ts :1 import { readFileSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/apps/demo-ops/test/renderer.test.ts :2 import { readFile, readdir } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/apps/extension/build.mjs :8 import { cp, mkdir, readdir, rm, stat, writeFile } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/apps/site/astro.config.mjs :4 import { readFileSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/extension.spec.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/external-user.spec.ts :18 import { mkdtemp, rm } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.a11y.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.external.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.perf.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.public.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.restart.config.ts :2 import { existsSync } from 'node:fs';
show 28 more
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.smoke.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/playwright.visual.config.ts :2 import { existsSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/e2e/restart.spec.ts :19 import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/fixtures/external/mcp-attested-lookup-next/src/server.js :28 import { appendFileSync, writeFileSync } from 'node:fs';
  • fs (weak) Konuktor-rigorrun-551676a/fixtures/external/mcp-attested-lookup/src/server.js :21 import { appendFileSync } from 'node:fs';
  • fs Konuktor-rigorrun-551676a/packages/cli/build.mjs :21 import { chmod, cp, mkdir, readFile, rm, stat, writeFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/cli/src/backup.ts :18 import { cp, mkdir, readdir, readFile, stat, writeFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/cli/src/feedback.ts :11 import { writeFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/cli/src/io.ts :8 import { mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/cli/src/serve.ts :10 import { existsSync } from 'node:fs';
  • fs Konuktor-rigorrun-551676a/packages/cli/src/verify.ts :17 import { writeFile, mkdir } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/cli/test/backup.test.ts :12 import { mkdtemp, readFile, rm } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/cli/test/cli.test.ts :2 import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/cli/test/doctor.test.ts :9 import { mkdtemp, rm } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/cli/test/package.test.ts :12 import { readFile } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/cli/test/project.test.ts :13 import { mkdtemp, rm } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/cli/test/security.test.ts :2 import { readFile, readdir, stat } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/activation.ts :24 import { appendFile, mkdir, readFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/atomic.ts :27 import { chmod, open, mkdir, rename, rm, readdir } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/feedback.ts :24 import { readFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/orphans.ts :21 import { readFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/secrets.ts :29 import { readFile } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/server.ts :23 import { readFile, stat } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/store.ts :35 import { readFile, readdir, rm } from 'node:fs/promises';
  • fs Konuktor-rigorrun-551676a/packages/daemon/src/workspaceVersion.ts :17 import { cp, readFile, readdir, rm, mkdir } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/daemon/test/activation.test.ts :11 import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/daemon/test/browserProject.test.ts :11 import { mkdtemp, rm } from 'node:fs/promises';
  • fs (weak) Konuktor-rigorrun-551676a/packages/daemon/test/csrf.test.ts :12 import { mkdtemp, rm } from 'node:fs/promises';

31 more not shown — this panel samples each group; the count above is the real total.

shell / exec 15

  • shell Konuktor-rigorrun-551676a/apps/extension/build.mjs :10 import { execFile } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/e2e/external-user.spec.ts :17 import { spawn, type ChildProcess } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/e2e/playwright.cross.config.ts :2 import { execSync } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/e2e/restart.spec.ts :22 import { type ChildProcess } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/e2e/support/runner.ts :9 import { spawn, type ChildProcess } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/packages/daemon/test/orphans.test.ts :16 import { spawn, type ChildProcess } from 'node:child_process';
  • shell Konuktor-rigorrun-551676a/packages/exec/src/exec.ts :27 import { spawn, type ChildProcess } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/packages/mcp/test/connectHttp.test.ts :17 import { spawn, type ChildProcess } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/packages/mcp/test/oauth.test.ts :17 import { spawn, type ChildProcess } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/scripts/build-evidence.mjs :24 import { execFileSync, spawnSync } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/scripts/build-proof.mjs :13 import { execFileSync } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/scripts/demo.mjs :9 import { spawn } from 'node:child_process';
show 3 more
  • shell (weak) Konuktor-rigorrun-551676a/scripts/gate1.mjs :20 import { execFileSync, spawnSync } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/scripts/release-verify.mjs :13 import { spawn } from 'node:child_process';
  • shell (weak) Konuktor-rigorrun-551676a/scripts/verify-package.mjs :16 import { execFileSync, spawn } from 'node:child_process';

network 24

  • net Konuktor-rigorrun-551676a/apps/app/src/product/api.ts :279 const response = await fetch(path, {
  • net Konuktor-rigorrun-551676a/apps/extension/src/background.ts :194 const response = await fetch(`http://127.0.0.1:${message.port}/trace`, {
  • net (weak) Konuktor-rigorrun-551676a/e2e/restart.spec.ts :139 const response = await fetch('/api/projects');
  • net (weak) Konuktor-rigorrun-551676a/fixtures/external/mcp-venue-desk/src/http.ts :20 import { createServer, type IncomingMessage } from 'node:http';
  • net Konuktor-rigorrun-551676a/packages/agents/src/http.ts :138 const response = await fetch(url, {
  • net (weak) Konuktor-rigorrun-551676a/packages/agents/test/http.test.ts :2 import { createServer, type Server } from 'node:http';
  • net Konuktor-rigorrun-551676a/packages/cli/src/record.ts :8 import { createServer } from 'node:http';
  • net Konuktor-rigorrun-551676a/packages/daemon/src/httpAgent.ts :95 const response = await fetch(url, {
  • net (weak) Konuktor-rigorrun-551676a/packages/daemon/test/browserProject.test.ts :10 import { createServer, type Server } from 'node:http';
  • net (weak) Konuktor-rigorrun-551676a/packages/daemon/test/csrf.test.ts :42 fetch(`${origin}/api/projects`, {
  • net (weak) Konuktor-rigorrun-551676a/packages/daemon/test/drivenAgent.test.ts :105 const answer = await fetch(`${base}/api/drive/${agentId}`, {
  • net (weak) Konuktor-rigorrun-551676a/packages/daemon/test/openapiProject.test.ts :15 import { createServer, type Server } from 'node:http';
show 12 more
  • net (weak) Konuktor-rigorrun-551676a/packages/daemon/test/runner.test.ts :12 import { connect } from 'node:net';
  • net (weak) Konuktor-rigorrun-551676a/packages/env-browser/test/browser.test.ts :16 import { createServer, type Server } from 'node:http';
  • net Konuktor-rigorrun-551676a/packages/env-openapi/src/connection.ts :133 fetch(url, {
  • net Konuktor-rigorrun-551676a/packages/env-openapi/src/oauth.ts :96 const response = await fetch(this.config.tokenUrl, {
  • net (weak) Konuktor-rigorrun-551676a/packages/env-openapi/test/oauth.test.ts :11 import { createServer, type Server } from 'node:http';
  • net (weak) Konuktor-rigorrun-551676a/packages/env-openapi/test/openapi.test.ts :12 import { createServer, type Server } from 'node:http';
  • net Konuktor-rigorrun-551676a/packages/mcp/src/oauth.ts :27 import { createServer, type Server } from 'node:http';
  • net (weak) Konuktor-rigorrun-551676a/packages/mcp/test/oauth.test.ts :16 import { createServer, request as proxyRequest, type Server } from 'node:http';
  • net Konuktor-rigorrun-551676a/packages/providers/src/gemini.ts :34 const response = await fetch(`${ENDPOINT}/${model}:generateContent`, {
  • net Konuktor-rigorrun-551676a/packages/providers/src/openai.ts :40 const response = await fetch(`${config.baseUrl.replace(/\/$/, '')}/chat/completions`, {
  • net (weak) Konuktor-rigorrun-551676a/packages/proxy/test/proxy.test.ts :14 import { connect } from 'node:net';
  • net (weak) Konuktor-rigorrun-551676a/packages/sandbox/src/registry.ts :44 const response = await fetch(url, { headers: { accept: 'application/json' } });

declared dependencies 25

  • @modelcontextprotocol/server-filesystem@2026.8.31
  • @modelcontextprotocol/server-memory@2026.8.31
  • @axe-core/playwright@^4.13.0
  • @eslint/js@^10.0.1
  • @playwright/test@^1.62.1
  • @tailwindcss/vite@^4.3.3
  • @types/chrome@^0.2.8
  • @types/node@^26.4.1
  • @types/react@^19.2.18
  • @types/react-dom@^19.2.5
  • @vitejs/plugin-react@^6.1.1
  • axe-core@^4.13.0
show 13 more
  • concurrently@^10.0.5
  • esbuild@^0.28.2
  • eslint@^10.9.1
  • eslint-config-prettier@^10.1.8
  • globals@^17.12.0
  • prettier@^3.9.6
  • tailwindcss@^4.3.3
  • tsx@^4.23.13
  • typescript@^6.0.3
  • typescript-eslint@^8.69.0
  • vite@^8.2.2
  • vitest@^4.1.11
  • wrangler@^4.128.0

perm:untrusted 1

  • untrusted (weak) Konuktor-rigorrun-551676a/packages/mcp/test/oauth.test.ts :418 await expect(fetch(provider.redirectUrl).then(() => 'answered')).rejects.toThrow();