Declarative runtime, operations, and evaluation platform for multi-channel AI agents
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution ×2 in Ling-ye/AgentStrata
- HIGH code analysis flagged dynamic code execution in Ling-ye/AgentStrata
- HIGH code analysis flagged committed secret, dynamic code execution in Ling-ye/AgentStrata
- HIGH code analysis flagged committed secret, dynamic code execution in Ling-ye/AgentStrata
transport stdio · streamable-http · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit a602346 · analyzer v33 · 1d ago
skills & prompt files 18
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/00-global.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/10-architecture.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/20-botspec.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/30-middleware.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/40-agent.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/50-external-tools.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/60-deploy-and-tests.mdc
- agent-rules Ling-ye-AgentStrata-a602346/.cursor/rules/70-frontend-design.mdc
- skill Ling-ye-AgentStrata-a602346/.cursor/skills/debug-chatcopilot-bot/SKILL.md
- agent-rules Ling-ye-AgentStrata-a602346/AGENTS.md
- prompt-file Ling-ye-AgentStrata-a602346/bots/_template/prompts/identity.md
- prompt-file Ling-ye-AgentStrata-a602346/bots/_template/prompts/refusal-style.md
- prompt-file Ling-ye-AgentStrata-a602346/bots/_template/prompts/response-style.md
- prompt-file Ling-ye-AgentStrata-a602346/bots/lingye-copilot-qq/prompts/identity.md
- prompt-file Ling-ye-AgentStrata-a602346/bots/lingye-copilot-qq/prompts/refusal-style.md
- prompt-file Ling-ye-AgentStrata-a602346/bots/lingye-copilot-qq/prompts/response-style.md
- skill Ling-ye-AgentStrata-a602346/bots/lingye-copilot-qq/skills/ai-career-intelligence/SKILL.md
- skill Ling-ye-AgentStrata-a602346/bots/lingye-copilot-qq/skills/ai-jd-analysis/SKILL.md
danger signals4
- dynamic code execution unsafe yaml.load() Ling-ye-AgentStrata-a602346/src/chatcopilot/core/wiki/store.py :474
metadata = yaml.load(normalized[4:end]) or {} - dynamic code execution unsafe yaml.load() Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/manifest.py :740
raw = yaml.load(text) - dynamic code execution unsafe yaml.load() Ling-ye-AgentStrata-a602346/tests/unit/test_agentstrata_capability_suite_data.py :71
value = yaml.load(text) - committed secret GitHub fine-grained PAT Ling-ye-AgentStrata-a602346/tests/unit/test_code_task_delivery.py :61
github…(33 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 870
filesystem 341
- fs Ling-ye-AgentStrata-a602346/console/backend/app.py :3
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/backend/routes/bots.py :4
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/bootstrap.py :6
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/catalog.py :10
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/cli.py :18
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/diagnostics.py :9
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/discovery.py :10
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/gateway_observability.py :4
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/instances.py :10
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/inventory.py :10
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/observability.py :13
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/console/control/operations.py :19
from pathlib import Path
show 28 more
- fs Ling-ye-AgentStrata-a602346/console/control/yaml_editor.py :8
import shutil - fs Ling-ye-AgentStrata-a602346/console/control/yaml_io.py :4
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/deploy/docker/desired_state.py :11
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/deploy/wsl/_smoke_mcp.py :7
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/build_smoke.py :9
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/check_architecture.py :9
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/check_component_catalog.py :10
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/check_public_repo.py :16
from pathlib import Path, PurePosixPath - fs (weak) Ling-ye-AgentStrata-a602346/scripts/check_release.py :10
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/check_repo.py :9
import shutil - fs (weak) Ling-ye-AgentStrata-a602346/scripts/check_sdd_specs.py :6
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/normalize_utf8.py :7
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/sync_requirements.py :7
from pathlib import Path - fs (weak) Ling-ye-AgentStrata-a602346/scripts/verify_release_artifacts.py :24
from pathlib import Path, PurePosixPath - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/backends/codex.py :8
import shutil - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/mcp/concurrency.py :9
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/mcp/runner.py :13
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/memory/markdown.py :10
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/rag/provider.py :8
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/runtime.py :19
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/search/providers.py :170
with opener.open(request, timeout=timeout_seconds) as response: - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/subagents/cache.py :110
with open(text, "rb") as fh: - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/tools/builtin/workspace/common.py :5
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/tools/builtin/workspace/files.py :4
import shutil - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/tools/builtin/workspace/images.py :12
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/tools/builtin/workspace/owner.py :125
with target.open("rb") as fp: - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/application/actor_runtime.py :9
from pathlib import Path - fs Ling-ye-AgentStrata-a602346/src/chatcopilot/application/conversation_journal.py :13
from pathlib import Path
301 more not shown — this panel samples each group; the count above is the real total.
shell / exec 73
- shell Ling-ye-AgentStrata-a602346/console/control/diagnostics.py :6
import subprocess - shell Ling-ye-AgentStrata-a602346/console/control/observability.py :10
import subprocess - shell Ling-ye-AgentStrata-a602346/console/control/operations.py :14
import subprocess - shell Ling-ye-AgentStrata-a602346/console/control/process_executor.py :5
import subprocess - shell Ling-ye-AgentStrata-a602346/console/control/services.py :18
import subprocess - shell Ling-ye-AgentStrata-a602346/console/control/systemd.py :10
import subprocess - shell Ling-ye-AgentStrata-a602346/deploy/wsl/_smoke_mcp.py :6
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/scripts/build_smoke.py :6
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/scripts/check_public_repo.py :13
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/scripts/check_repo.py :10
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/scripts/normalize_utf8.py :6
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/scripts/verify_release_artifacts.py :14
import subprocess
show 28 more
- shell Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/backends/codex.py :10
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/core/source_manifest.py :5
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/application/catalog.py :7
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/application/controller.py :11
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/application/insights.py :9
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/capability_executor.py :17
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/isolated_executor.py :7
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/codebase/index.py :14
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/codebase/tools.py :5
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/codex_cli/auth_cli.py :8
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/codex_cli/process_runner.py :7
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/code_task_delivery.py :11
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/code_task_runtime.py :12
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/file_tools.py :9
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/lifecycle_job.py :6
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/self_update_publisher.py :11
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/shell_tools.py :6
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/repository_tasks/runtime.py :9
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/shared/lark_cli.py :21
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/unity_codebase/_ripgrep.py :9
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/unity_codebase/skill_tools.py :15
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/windows_fs/tools.py :11
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/middleware/acp/instance_control.py :8
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/middleware/runtime/jobs/submitter.py :5
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/feishu/sender.py :23
import subprocess - shell Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/qq/webui_session.py :12
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/tests/integration/test_evaluation_service.py :5
import subprocess - shell (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_agent_cancellation.py :396
"child=subprocess.Popen([sys.executable,'-c',"
33 more not shown — this panel samples each group; the count above is the real total.
network 53
- net Ling-ye-AgentStrata-a602346/console/control/operations.py :17
import urllib.error - net (weak) Ling-ye-AgentStrata-a602346/scripts/check_public_repo.py :18
from urllib.parse import parse_qsl, unquote, urlsplit - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/backends/session_relay.py :7
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/mcp/client.py :6
import urllib - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/mcp/stateless.py :6
import urllib.error - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/persona/draft_agent.py :8
from urllib.parse import urlsplit, urlunsplit - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/search/providers.py :8
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/search/relevance.py :7
from urllib.parse import urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/search/reranker.py :16
from urllib.parse import parse_qsl, urlencode, urlsplit, urlunsplit - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/tools/builtin/workspace/images.py :7
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/agent/tools/builtin/workspace_tools.py :9
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/botspec/loader.py :9
from urllib.parse import urlparse
show 28 more
- net Ling-ye-AgentStrata-a602346/src/chatcopilot/botspec/provisioning.py :14
from urllib.parse import urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/channels/qq_onebot/codec.py :13
from urllib.parse import urlsplit - net Ling-ye-AgentStrata-a602346/src/chatcopilot/channels/qq_onebot/config.py :8
from urllib.parse import urlsplit - net Ling-ye-AgentStrata-a602346/src/chatcopilot/channels/qq_onebot/resources.py :9
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/contracts/adapter_approval.py :9
from urllib.parse import urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/core/mcp_probe.py :16
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/adapters/gaia.py :273
import requests - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/capability_executor.py :21
import urllib.request - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/fx_oracle.py :8
import urllib.request - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/official_data.py :131
import requests - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/service/client.py :8
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/service/protocol.py :7
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/service/server.py :8
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/career/providers/base.py :6
import urllib.parse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/career/providers/portal.py :4
from urllib.parse import urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/career/providers/tencent.py :6
from urllib.parse import parse_qs, urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/career/quality.py :4
from urllib.parse import urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/career/store.py :10
from urllib.parse import urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/codex_cli/session_gateway.py :13
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/dev/code_task_delivery.py :16
import requests - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/feishu/modules/urls.py :5
from urllib.parse import parse_qs, urlparse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/mcp_admin/tools.py :8
import urllib.parse - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/shared/lark_cli.py :25
from urllib.request import Request, urlopen - net Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/web_fetch/tools.py :11
import socket - net Ling-ye-AgentStrata-a602346/src/chatcopilot/middleware/acp/attachment_classifier.py :31
from urllib.parse import unquote - net Ling-ye-AgentStrata-a602346/src/chatcopilot/middleware/http/server.py :10
from urllib.parse import urlsplit - net Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/feishu/notifier.py :9
from urllib.error import HTTPError, URLError - net Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/feishu/profile.py :14
from urllib.error import HTTPError, URLError
13 more not shown — this panel samples each group; the count above is the real total.
secrets 9
- secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/botspec/cli.py :23
import getpass - secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/evals/application/catalog.py :150
os.environ.get("CHATCOPILOT_HF_TOKEN", "").strip() - secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/middleware/acp/server.py :292
os.environ.get("CC_SESSION_KEY") or os.environ.get("CC_HOOK_SESSION_KEY") or "" - secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/feishu/notifier.py :101
resolved_secret = (app_secret or os.environ.get("FEISHU_APP_SECRET") or "").strip() - secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/feishu/profile.py :93
resolved_secret = (app_secret or os.environ.get("FEISHU_APP_SECRET") or "").strip() - secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/qq/gateway_health.py :616
token = require_access_token(os.environ.get("QQ_ACCESS_TOKEN")) - secrets Ling-ye-AgentStrata-a602346/src/chatcopilot/platforms/qq/sender.py :183
token = require_access_token(os.environ.get("QQ_ACCESS_TOKEN")) - secrets (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_evals.py :139
old = os.environ.get("CHATCOPILOT_TEST_API_KEY") - secrets (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_mcp_config.py :84
os.environ["TEST_MCP_KEY"] = "secret-value"
database 11
- db Ling-ye-AgentStrata-a602346/console/backend/routes/architecture.py :3
import sqlite3 - db Ling-ye-AgentStrata-a602346/src/chatcopilot/core/wiki/store.py :8
import sqlite3 - db Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/career/store.py :5
import sqlite3 - db Ling-ye-AgentStrata-a602346/src/chatcopilot/external_tools/codebase/index.py :13
import sqlite3 - db Ling-ye-AgentStrata-a602346/src/chatcopilot/gateway/observation_store.py :10
import sqlite3 - db Ling-ye-AgentStrata-a602346/src/chatcopilot/gateway/read_model.py :8
import sqlite3 - db Ling-ye-AgentStrata-a602346/src/chatcopilot/gateway/state_store.py :14
import sqlite3 - db (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_career_intelligence.py :4
import sqlite3 - db (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_gateway_durable_approvals.py :5
import sqlite3 - db (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_gateway_observation.py :7
import sqlite3 - db (weak) Ling-ye-AgentStrata-a602346/tests/unit/test_gateway_state_store.py :6
import sqlite3
declared dependencies 23
- mcp@>=1.27,<2
- ruamel.yaml@>=0.18
- PyYAML@>=6.0
- jsonschema@>=4.26,<5
- Requests@>=2.32,<3
- mcp-server-git@>=0.6
- websockets@>=12
- openai@>=1.40.0
- langgraph@>=1.2,<2
- agent-client-protocol@>=0.10.0
- fastapi@>=0.110
- uvicorn@>=0.29
show 11 more
- numpy@>=2.2,<2.3
- pandas@==2.3.3
- PyInstaller@==6.17.0
- pytest@*
- httpx2@>=2.0.0,<3
- tomli@>=2; python_version <
- ruff@>=0.12,<1
- build@==1.5.0
- mypy@>=1.16,<2
- types-PyYAML@*
- types-requests@*
cursor-plugin 2
- opaque (low) Ling-ye-AgentStrata-a602346/.cursor/rules/00-global.mdc
bundled .cursor/ plugin descriptor (Ling-ye-AgentStrata-a602346/.cursor/rules/00-global.mdc) — presence-detected; review the descriptor - opaque (low) Ling-ye-AgentStrata-a602346/.cursor/skills/debug-chatcopilot-bot/SKILL.md
bundled .cursor/ plugin descriptor (Ling-ye-AgentStrata-a602346/.cursor/skills/debug-chatcopilot-bot/SKILL.md) — presence-detected; review the descriptor