MongLong0214/commitlore
Git-native decision memory for Claude Code, Codex, Cursor and other coding agents. Preserve constraints and rejected alternatives; surface only the decisions still in force.
- capability exposure inferred + 35
- tool safety inferred + 12
- trust mitigators mixed − 11
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1w ago · see ecosystem CVEs →
- C · 44 → C · 36
- B · 32 → C · 44
- A · 0 → B · 32
No known CVEs for this server.
- high dangerous code
committed secret: AWS access key id, GitHub token, GitHub fine-grained PAT, OpenAI key, Anthropic key, Slack token · dynamic exec: new Function() · obfuscated payload: dynamic req…
analyzed commit 25d9828 · analyzer v33 · 6h ago
skills & prompt files 8
- agent-rules MongLong0214-commitlore-25d9828/AGENTS.md
- skill MongLong0214-commitlore-25d9828/hermes/skills/commitlore/commits/SKILL.md
- skill MongLong0214-commitlore-25d9828/hermes/skills/commitlore/query/SKILL.md
- skill MongLong0214-commitlore-25d9828/hermes/skills/commitlore/setup/SKILL.md
- skill MongLong0214-commitlore-25d9828/skills/commitlore-codex/SKILL.md
- skill MongLong0214-commitlore-25d9828/skills/commitlore-commits/SKILL.md
- skill MongLong0214-commitlore-25d9828/skills/commitlore-query/SKILL.md
- skill MongLong0214-commitlore-25d9828/skills/commitlore-setup/SKILL.md
danger signals19
- dynamic code execution new Function() MongLong0214-commitlore-25d9828/dist/commitlore.mjs :2946
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - committed secret AWS access key id MongLong0214-commitlore-25d9828/spec/fixtures/secrets/negative/08-commit-verbose-diff.txt :19
AKIA7C…(20 chars, redacted) - committed secret AWS access key id MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/01-aws-access-key-id.expected.json :8
AKIA7C…(20 chars, redacted) - committed secret AWS access key id MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/01-aws-access-key-id.txt :4
AKIA7C…(20 chars, redacted) - committed secret GitHub token MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/03-github-token.expected.json :8
ghp_wo…(40 chars, redacted) - committed secret GitHub token MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/03-github-token.txt :3
ghp_wo…(40 chars, redacted) - committed secret GitHub fine-grained PAT MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/04-github-fine-grained-pat.expected.json :8
github…(93 chars, redacted) - committed secret GitHub fine-grained PAT MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/04-github-fine-grained-pat.txt :3
github…(93 chars, redacted) - committed secret OpenAI key MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/05-openai-api-key.expected.json :8
sk-Bkk…(51 chars, redacted) - committed secret OpenAI key MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/05-openai-api-key.txt :3
sk-Bkk…(51 chars, redacted) - committed secret Anthropic key MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/06-anthropic-api-key.expected.json :8
sk-ant…(108 chars, redacted) - committed secret Anthropic key MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/06-anthropic-api-key.txt :3
sk-ant…(108 chars, redacted) - committed secret Slack token MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/08-slack-token.expected.json :8
xoxb-Q…(53 chars, redacted) - committed secret Slack token MongLong0214-commitlore-25d9828/spec/fixtures/secrets/positive/08-slack-token.txt :3
xoxb-Q…(53 chars, redacted) - committed secret GitHub token MongLong0214-commitlore-25d9828/test/capture-shadow.test.ts :105
ghp_a1…(40 chars, redacted) - committed secret AWS access key id MongLong0214-commitlore-25d9828/test/reader-redacts-secrets.test.ts :62
AKIA29…(20 chars, redacted) - committed secret GitHub token MongLong0214-commitlore-25d9828/test/reader-redacts-secrets.test.ts :63
ghp_u8…(40 chars, redacted) - committed secret AWS access key id MongLong0214-commitlore-25d9828/test/secret-guard.test.ts :206
AKIA7C…(20 chars, redacted) - committed secret GitHub token MongLong0214-commitlore-25d9828/test/secret-guard.test.ts :265
ghp_wo…(40 chars, redacted)
[](https://mcpobservatory.com/servers/github:MongLong0214/commitlore/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of MongLong0214.