MCP Observatory
4m ago Tracked 20,398 Last 4m ago 24h 1,146
github analyzed 4eca514

Microck/opencode-studio

github

web GUI for securely managing local OpenCode configuration

maintainer
Microck
license
—
first seen
2026-05-22
last seen
2026-06-20
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 4eca514 · analyzer v19 · 1d ago

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 5

  • fs Microck-opencode-studio-4eca514/server/cli.js :6 const fs = require('fs');
  • fs Microck-opencode-studio-4eca514/server/index.js :4 const fs = require('fs');
  • fs Microck-opencode-studio-4eca514/server/lib/config-providers.js :1 const fs = require('fs');
  • fs Microck-opencode-studio-4eca514/server/profile-manager.js :1 const fs = require('fs');
  • fs Microck-opencode-studio-4eca514/server/register-protocol.js :4 const fs = require('fs');

shell / exec 4

  • shell Microck-opencode-studio-4eca514/client-next/dev-with-port.js :2 const { spawn } = require('child_process');
  • shell Microck-opencode-studio-4eca514/server/cli.js :4 const { exec } = require('child_process');
  • shell Microck-opencode-studio-4eca514/server/index.js :10 const { spawn, exec, execSync } = require('child_process');
  • shell Microck-opencode-studio-4eca514/server/register-protocol.js :1 const { exec } = require('child_process');

network 5

  • net Microck-opencode-studio-4eca514/client-next/dev-with-port.js :1 const net = require('net');
  • net Microck-opencode-studio-4eca514/client-next/src/app/profiles/page.tsx :5 import axios from "axios";
  • net Microck-opencode-studio-4eca514/client-next/src/lib/api.ts :1 import axios from 'axios';
  • net Microck-opencode-studio-4eca514/server/cli.js :7 const net = require('net');
  • net Microck-opencode-studio-4eca514/server/index.js :107 const net = require('net');

secrets 1

  • secrets Microck-opencode-studio-4eca514/server/index.js :5091 const GEMINI_CLIENT_SECRET = process.env.GEMINI_CLIENT_SECRET || "";

install hooks 2

  • postinstall Microck-opencode-studio-4eca514/package.json :10 cd server && npm install && cd ../client-next && npm install
  • postinstall Microck-opencode-studio-4eca514/server/package.json :12 node register-protocol.js

declared dependencies 1

  • concurrently@^8.2.2

clipboard 3

  • navigator.clipboard Microck-opencode-studio-4eca514/client-next/src/app/quickstart/page.tsx :65 await navigator.clipboard.writeText(code);
  • navigator.clipboard Microck-opencode-studio-4eca514/client-next/src/components/debug-menu.tsx :54 navigator.clipboard.writeText(JSON.stringify(debugInfo, null, 2));
  • navigator.clipboard Microck-opencode-studio-4eca514/client-next/src/components/update-required-modal.tsx :22 await navigator.clipboard.writeText(updateCommand);

obfuscation 1

  • dynamic require()/import() Microck-opencode-studio-4eca514/client-next/src/i18n/request.ts :10 messages: (await import(`../../messages/${locale}.json`)).default,