Marve10s/Better-Fullstack
Scaffold production-ready full-stack apps in TypeScript, Rust, Python, Go, and Java with a visual builder and CLI. Choose your frontend, backend, database, auth, AI, payments, and DevOps integrations, all wired together.
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 8
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- C · 50 → C · 59
- C · 55 → C · 50
- C · 47 → C · 55
No known CVEs for this server.
- high dangerous code
committed secret: Slack token · obfuscated payload: dynamic require()/import()
analyzed commit 90e0995 · analyzer v33 · 19h ago
skills & prompt files 14
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/better-fullstack/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/create-remotion-geist/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/frontend-design/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/modern-short-video/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/remotion-animation/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/remotion-best-practices/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/remotion-bits/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/remotion/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/video-production/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/.agents/skills/web-design-guidelines/SKILL.md
- agent-rules Marve10s-Better-Fullstack-90e0995/AGENTS.md
- agent-rules Marve10s-Better-Fullstack-90e0995/CLAUDE.md
- skill Marve10s-Better-Fullstack-90e0995/plugin/skills/add-to-project/SKILL.md
- skill Marve10s-Better-Fullstack-90e0995/plugin/skills/scaffold-project/SKILL.md
danger signals8
- suspicious endpoint docs.sentry.io (telemetry) Marve10s-Better-Fullstack-90e0995/apps/web/src/lib/stack/tech-resource-links.ts :871
docsUrl: "https://docs.sentry.io/", - suspicious endpoint docs.datadoghq.com (telemetry) Marve10s-Better-Fullstack-90e0995/apps/web/src/lib/stack/tech-resource-links.ts :880
"https://docs.datadoghq.com/tracing/trace_collection/automatic_instrumentation/dd_libraries/nodejs/", - suspicious endpoint posthog.com (telemetry) Marve10s-Better-Fullstack-90e0995/apps/web/src/lib/stack/tech-resource-links.ts :903
posthog: { docsUrl: "https://posthog.com/docs", githubUrl: "https://github.com/PostHog/posthog" }, - suspicious endpoint app.posthog.com (telemetry) Marve10s-Better-Fullstack-90e0995/packages/template-generator/src/processors/config/env-vars.ts :395
comment: "PostHog project API key - get it at https://app.posthog.com/project/settings", - suspicious endpoint us.i.posthog.com (telemetry) Marve10s-Better-Fullstack-90e0995/packages/template-generator/src/processors/config/env-vars.ts :399
value: "https://us.i.posthog.com", - suspicious endpoint eu.i.posthog.com (telemetry) Marve10s-Better-Fullstack-90e0995/packages/template-generator/src/processors/config/env-vars.ts :401
comment: "PostHog API host (use https://eu.i.posthog.com for EU region)", - committed secret Slack token Marve10s-Better-Fullstack-90e0995/packages/template-generator/src/processors/config/env-vars.ts :1444
xoxb-y…(19 chars, redacted) - committed secret Slack token Marve10s-Better-Fullstack-90e0995/packages/template-generator/test/processors/env-vars.test.ts :132
xoxb-y…(19 chars, redacted)
- recent drift +20 capability drift →
Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of Marve10s.