MCP Observatory
8m ago Tracked 59,479 Last 8m ago 24h 2,575
github TypeScript analyzed 6c5d85e

Lilac-Labs/gini-agent

github

The agent that remembers and learns.

maintainer
Lilac-Labs
licence
MIT
first seen
2026-06-05
last seen
2026-06-26
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret, dynamic code execution in Lilac-Labs/gini-agent
  2. HIGH code analysis flagged committed secret, dynamic code execution in Lilac-Labs/gini-agent
  3. HIGH code analysis flagged committed secret, dynamic code execution in Lilac-Labs/gini-agent
  4. HIGH code analysis flagged committed secret, dynamic code execution in Lilac-Labs/gini-agent
  5. HIGH code analysis flagged committed secret, dynamic code execution in Lilac-Labs/gini-agent
  6. HIGH code analysis flagged committed secret, dynamic code execution in Lilac-Labs/gini-agent
capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 6c5d85e · analyzer v33 · 2w ago

skills & prompt files 29

danger signals23

code evidence vv0.3.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 806

filesystem 255

  • fs Open-Curiosity-gini-agent-6c5d85e/packages/mobile/plugins/with-approval-notification-service.js :56 const fs = require("fs");
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/mobile/plugins/with-approval-notification-service.test.js :12 const fs = require("fs");
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/agent-reconcile.test.ts :7 import { rmSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/agent.ts :11 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/atomic-write.ts :1 import { closeSync, fsyncSync, openSync, renameSync, writeSync, unlinkSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/agents.test.ts :7 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/attachment-extract.test.ts :2 import { readFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/attachments-materialize-core.test.ts :2 import { mkdirSync, readFileSync, rmSync, statSync, symlinkSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/attachments-materialize-core.ts :11 import { existsSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/attachments-materialize.test.ts :2 import { existsSync, mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/browser-connect.test.ts :2 import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/browser-connect.ts :31 import { mkdirSync } from "node:fs";
show 28 more
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skill-loader.test.ts :13 import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skill-loader.ts :30 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skill-script-hook.test.ts :11 import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skill-scripts.test.ts :2 import { mkdirSync, rmSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skill-scripts.ts :22 import { existsSync, readdirSync, statSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skills.test.ts :2 import { rmSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skills.ts :1 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/subagents.test.ts :6 import { mkdtempSync, rmSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/vision-query.test.ts :2 import { rmSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/workspace-write.test.ts :2 import { mkdirSync, readFileSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/workspace-write.ts :19 import { lstatSync, mkdirSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/autostart.test.ts :10 import { mkdirSync, rmSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/autostart.ts :36 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/admin.test.ts :16 import { existsSync, mkdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/admin.ts :4 import { existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/autostart-enable.test.ts :9 import { mkdirSync, rmSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/autostart.test.ts :12 import { existsSync, mkdirSync, rmSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/autostart.ts :14 import { existsSync, rmSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/chat.ts :1 import { writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/provider.test.ts :11 import { mkdirSync, readFileSync, rmSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/setup.ts :7 import { existsSync, readFileSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/skills.ts :1 import { readFileSync, existsSync, statSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/watchdog.test.ts :24 import { existsSync, mkdirSync, readFileSync, rmSync, utimesSync, writeFileSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/watchdog.ts :52 import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/install-sh-preflight.test.ts :28 import { chmodSync, existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/process.test.ts :10 import { existsSync, readFileSync, rmSync } from "node:fs";
  • fs Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/process.ts :9 import { createWriteStream, existsSync, openSync, readFileSync, rmSync, writeFileSync, type WriteStream } from "node:fs";
  • fs (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/run.test.ts :10 import { existsSync, readFileSync, rmSync } from "node:fs";

215 more not shown — this panel samples each group; the count above is the real total.

shell / exec 59

  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/agent.ts :797 // like `Bun.spawn(["sudo", "apt"])` doesn't slip past the
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/attachments-materialize.test.ts :58 const proc = Bun.spawn(["bun", "run", SCRIPT], {
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/skill-scripts.ts :237 const proc = spawn(cmd, {
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/subagents.test.ts :279 // One delayed child turn per spawn (claimed in dispatch order; the
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/admin.ts :2 import type { ChildProcess } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/autostart.test.ts :11 import { spawnSync } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/autostart.ts :280 // but never spawn (`state = not running`, last exit code
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/setup.ts :6 import { spawnSync } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/watchdog.test.ts :25 import { spawnSync } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/install-sh-preflight.test.ts :27 import { spawnSync } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/process.test.ts :9 import { spawn } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/process.ts :11 import { spawn, spawnSync, type ChildProcess } from "node:child_process";
show 28 more
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/run.test.ts :8 import { spawn, type ChildProcess } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/setup.test.ts :6 import { spawn } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/uninstall.test.ts :7 import { spawn } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/update.test.ts :8 import { spawn, spawnSync } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/dispatch-shape.ts :58 return /(^|\s)[./~][^\s]*|\s-[a-zA-Z]|[|<>;&$`]|[*?]/.test(rest);
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/approval-execution.test.ts :13 // accepts either the pre-spawn (`spawnSkipped: true`) or
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/approval-mode.part1.test.ts :464 { id: "call_c", type: "function", function: { name: "code_exec", arguments: JSON.stringify({ language: "js", code: `Bun.spawn(["sudo", "apt", "update"])` }) } }
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/approval-mode.part2.test.ts :198 { id: "call_c", type: "function", function: { name: "code_exec", arguments: JSON.stringify({ language: "js", code: `Bun.spawn(["sudo", "-n", "true"])` }) } }
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/auth-preflight.ts :15 import { execFile } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/auto-approve.test.ts :85 expect(matchDangerousTerminal(DEFAULT_DANGEROUS_TERMINAL_PATTERNS, `Bun.spawn(["sudo", "apt", "update"])`)).toBe("sudo");
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/auto-approve.ts :281 // `Bun.spawn(...)`, `child_process.{spawn,exec,execSync,
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/exec-processes.ts :101 const out = spawnSync(["ps", "-o", `${field}=`, "-p", String(pid)], { stdout: "pipe", stderr: "ignore" });
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/policy.test.ts :199 // The wrapper command `bun -e "Bun.spawn([\"sudo\", ...])"` does
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/policy.ts :41 // branches separately so the matcher sees the raw `Bun.spawn(["sudo",
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/tool-dispatch.ts :5867 // payload like `Bun.spawn(["sudo", "apt"])` is invisible to a
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.part1.test.ts :21 // shells out via spawnSync (`which`, `claude auth status`), which on a machine
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.part2.test.ts :21 // shells out via spawnSync (`which`, `claude auth status`), which on a machine
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.part3.test.ts :21 // shells out via spawnSync (`which`, `claude auth status`), which on a machine
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.part4.test.ts :21 // shells out via spawnSync (`which`, `claude auth status`), which on a machine
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/claude-code.ts :1 import { spawnSync } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/codex.ts :1 import { spawnSync } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/gmail-draft-send.ts :33 // The subprocess seam. Defaults to a real `zsh -lc` gws spawn (mirroring how
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/gws-session.ts :188 const proc = spawn(["zsh", "-lc", "gws auth status"], {
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/launchd.ts :17 import { spawnSync } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/mcp.ts :309 const proc = spawn([command, ...args], { cwd: config.workspaceRoot, stdout: "pipe", stderr: "pipe" });
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/openclaw-migrate.test.ts :13 import { execFileSync } from "node:child_process";
  • shell Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/openclaw-migrate.ts :86 import { spawnSync } from "node:child_process";
  • shell (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/tunnel.part2.test.ts :1610 // for the spawn (bounded; the assertion below fails loudly on timeout).

19 more not shown — this panel samples each group; the count above is the real total.

network 67

  • net Open-Curiosity-gini-agent-6c5d85e/packages/mobile/plugins/with-approval-notification-service.js :92 // on the NSE, the on-device preview fetch (NotificationService.swift)
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/agents-list-live-recovery.test.ts :50 fetch(req) {
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/agents-list-timeout.test.ts :82 async fetch(req) {
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/api-abort-ignored.test.ts :6 // aborting the AbortController actually REJECTS the awaited fetch() (and the
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/api.test.ts :73 // The shape Expo's winter fetch (the global on device) throws on abort: a
  • net Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/api.ts :145 // `await fetch(...)` / `await response.text()` would never settle, leaving
  • net Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/components/ImagePreview.tsx :111 const res = await fetch(source.uri, { headers: source.headers });
  • net Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/components/chat/AuthedImage.tsx :33 const res = await fetch(directUri, { headers: authHeader() });
  • net Open-Curiosity-gini-agent-6c5d85e/packages/mobile/src/queries.ts :307 // Chat-detail stream consumer. Combines a one-shot /blocks fetch (seeds
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/agent.ts :2998 // fetch(); this is the seam that hands it across.
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/capabilities/browser-connect.ts :80 const response = await fetch(`${httpUrl.replace(/\/$/, "")}/json/version`, {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/api.ts :22 const response = await fetch(`${url(config)}${path}`, {
show 28 more
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/browser.test.ts :6 // HTTP, so we stub globalThis.fetch (same pattern as the connector CLI tests).
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/chat.ts :60 const response = await fetch(`${url(config)}/api/uploads/${uploadId}`, { headers: auth(config) });
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/watchdog.ts :156 await fetch(`http://127.0.0.1:${port}/api/status`, {
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/process.test.ts :11 import { createServer, type Server } from "node:net";
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/process.ts :10 import { createServer } from "node:net";
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/run.test.ts :9 import { createServer } from "node:net";
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/embeddings.ts :337 const response = await fetch(`${baseUrl}/embeddings`, {
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/browser-screencast.test.ts :84 // `fetchBrowserWsUrl` default (a real `fetch("http://127.0.0.1:<port>/json/version")`)
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/browser-screencast.ts :101 fetchJson: async (url) => (await (await fetch(url)).json()) as CdpVersionTarget[],
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/tool-catalog.ts :532 description: "Read recent console messages from the current page, and/or evaluate a JavaScript expression in the page and return its result. Use the expression to read data the accessibility snapshot
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/tool-dispatch.ts :14 import { isIP } from "node:net";
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.part1.test.ts :1188 fetch(req) {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.ts :2803 const upstream = await fetch(target, init);
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integration.test.ts :307 test("propagates the caller AbortSignal to upstream fetch (so client disconnect closes the stream)", async () => {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/bland.ts :28 const response = await fetch(url, {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/brave-search.ts :29 const response = await fetch(url, {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/exa.ts :25 const response = await fetch(EXA_SEARCH_ENDPOINT, {
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/google-accounts.test.ts :364 test("the primary flag survives a rejecting status fetch (degraded row keeps it)", async () => {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/linear.ts :27 const response = await fetch(LINEAR_GRAPHQL_URL, {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/discord-poller.ts :15 // user who posts during the very first fetch (the previous "seed to
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/mcp-analytics.test.ts :75 async fetch(request) {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/mcp-http.ts :200 response = await fetch(url, {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/telegram.ts :134 // already inside fetch() and unobservable from the loop's signal
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/provider.integration.test.ts :240 const probe = await fetch(`${server.url}/models`);
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/provider.test.ts :6158 // The Bedrock leg never reached fetch (the creds throw is pre-network).
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/provider.ts :1378 const response = await fetch(chatCompletionsUrl(provider, baseUrl), {
  • net Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/runtime/health-probe.ts :10 const res = await fetch(`http://127.0.0.1:${port}/api/runtime/__healthz`, {
  • net (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/server-shutdown-drain.test.ts :49 async fetch() {

27 more not shown — this panel samples each group; the count above is the real total.

secrets 35

  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/aws-sigv4.ts :136 const secretAccessKey = process.env.AWS_SECRET_ACCESS_KEY;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/setup.ts :404 process.env.AWS_SECRET_ACCESS_KEY = secretAccessKey;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/commands/smoke.ts :102 if (process.env.LINEAR_API_KEY) {
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/setup.test.ts :294 const old = process.env.OPENAI_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/embeddings.test.ts :168 process.env.OPENAI_API_KEY = "sk-openai-real";
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/chat-accept.test.ts :156 process.env.CHAT_ACCEPT_TEST_KEY = "test-key";
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/chat-task.part3.test.ts :395 const prevKey = process.env.OPENAI_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/effective-context.test.ts :339 process.env.DEEPSEEK_API_KEY = "ds-key";
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/self-registry.test.ts :231 const prevCanonical = process.env.ANTHROPIC_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http-edge-secret.test.ts :42 delete process.env.GINI_EDGE_SECRET;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.part1.test.ts :402 const prevOpenai = process.env.OPENAI_API_KEY;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/http.ts :2534 // process.env.OPENAI_API_KEY so the running gateway uses the new key
show 23 more
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/codex.test.ts :45 prevOpenAiKey = process.env.OPENAI_API_KEY;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/codex.ts :130 { OPENAI_API_KEY: process.env.OPENAI_API_KEY },
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/mcp-analytics.test.ts :69 savedKey = process.env.POSTHOG_PROJECT_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/mcp.test.ts :93 const saved = process.env.LINEAR_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/posthog.test.ts :50 savedKey = process.env.POSTHOG_PROJECT_API_KEY;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/posthog.ts :84 const key = process.env.POSTHOG_PROJECT_API_KEY?.trim();
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/tunnel.part2.test.ts :1552 const prevToken = process.env.NGROK_AUTHTOKEN;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/tunnel.ts :497 if ((process.env.NGROK_AUTHTOKEN ?? "").length > 0) return { enabled: true };
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/memory/retain.test.ts :110 process.env.OPENAI_API_KEY = "test-key";
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/provider.test.ts :59 const original = process.env.OPENAI_API_KEY;
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/provider.ts :1231 if (!process.env.ANTHROPIC_API_KEY || !mirrorModel) {
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/runtime/default-model.test.ts :36 OPENAI_API_KEY: process.env.OPENAI_API_KEY,
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/runtime/setup-api.test.ts :59 OPENAI_API_KEY: process.env.OPENAI_API_KEY,
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/runtime/setup-api.ts :394 process.env.AWS_SECRET_ACCESS_KEY = awsSecretAccessKey;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/packages/web/src/lib/runtime.test.ts :752 process.env.GINI_TOKEN = "env-token";
  • secrets Open-Curiosity-gini-agent-6c5d85e/packages/web/src/lib/runtime.ts :102 if (process.env.GINI_TOKEN) return process.env.GINI_TOKEN;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/scripts/e2e-browser-tools.ts :16 const TOKEN = process.env.GINI_RUNTIME_TOKEN ?? "";
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/scripts/e2e-model-picker.ts :35 const TOKEN = process.env.GINI_RUNTIME_TOKEN ?? "";
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/skills/integrations/phone-call/scripts/analyze-call.ts :66 const apiKey = process.env.BLAND_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/skills/integrations/phone-call/scripts/call-watch.ts :191 const apiKey = process.env.BLAND_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/skills/integrations/phone-call/scripts/check-call.ts :96 const apiKey = process.env.BLAND_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/skills/integrations/phone-call/scripts/place-call.ts :73 const apiKey = process.env.BLAND_API_KEY;
  • secrets (weak) Open-Curiosity-gini-agent-6c5d85e/skills/integrations/phone-call/scripts/stop-call.ts :41 const apiKey = process.env.BLAND_API_KEY;

declared dependencies 2

  • @types/bun@catalog:
  • typescript@catalog:

perm:untrusted 1

  • untrusted Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/browser-screencast.ts :101 fetchJson: async (url) => (await (await fetch(url)).json()) as CdpVersionTarget[],

transport_posture 1

  • network-listening, binds all interfaces, no auth detected Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/cli/run.test.ts :27 server.listen(0, "0.0.0.0", () => {