MCP Observatory
3m ago Tracked 60,021 Last 3m ago 24h 2,474
github JavaScript analyzed 4fdbcf1

Mushkrot/Recallant

github

Self-hosted governed memory for Codex and MCP AI agents

maintainer
Mushkrot
licence
Apache-2.0
first seen
2026-06-04
last seen
2026-08-04
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  2. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  3. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  4. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  5. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  6. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  7. HIGH code analysis flagged committed secret in Mushkrot/Recallant
  8. HIGH code analysis flagged committed secret in Mushkrot/Recallant
capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 4fdbcf1 · analyzer v33 · 3h ago

skills & prompt files 3

code evidence vv0.1.0-dev.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 198

filesystem 109

  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/attach.ts :2 import { lstat, mkdir, readFile, readdir, stat, writeFile } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/cli-update.ts :2 import { existsSync } from "node:fs";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/detach.ts :1 import { readFile } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/discovery.ts :2 import { readdir, readFile, realpath, stat } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/documentation-posture.ts :1 import { readdir } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/index.ts :11 import { readFileSync } from "node:fs";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/local-cleanup.ts :1 import { readdir, readFile, rm, stat, writeFile } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/project-sanitize.ts :1 import { readFile } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/remote-cleanup.ts :1 import { mkdir, readFile, rm, stat, writeFile } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/remote-doctor.ts :2 import { readFileSync } from "node:fs";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/starter-docs.ts :1 import { lstat, mkdir, readFile, writeFile } from "node:fs/promises";
  • fs Mushkrot-Recallant-4fdbcf1/apps/cli/src/vault-bridge.ts :2 import { lstat, mkdir, readdir, readFile, realpath, stat, writeFile } from "node:fs/promises";
show 28 more
  • fs Mushkrot-Recallant-4fdbcf1/apps/server/src/index.ts :8 import { readFileSync } from "node:fs";
  • fs Mushkrot-Recallant-4fdbcf1/packages/contracts/src/remote-mcp.ts :2 import { chmodSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs Mushkrot-Recallant-4fdbcf1/packages/db/src/index.ts :2 import { existsSync, statSync } from "node:fs";
  • fs Mushkrot-Recallant-4fdbcf1/packages/mcp/src/tools.ts :2 import { readFile, realpath, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/lib/smoke-temp-root.mjs :1 import { rmSync } from "node:fs";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/recallant-production-backup.mjs :12 } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/remote-live-external-canary.mjs :3 import { access, mkdir, mkdtemp, readdir, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/remote-mcp-separate-machine-evidence.mjs :6 import { access, mkdir, readdir, readFile, realpath, rm, stat, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-agent-capture.mjs :3 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-agent-lifecycle-gate-cli.mjs :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-backup-alerts.mjs :2 import { access, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-capture-recall-acceptance-live-validate.mjs :3 import { mkdtemp, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-codex-hook-runtime.mjs :4 import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-connect-cli.mjs :2 import { chmod, mkdir, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-copyable-command-safety.mjs :2 import { mkdir, mkdtemp, readFile, rm } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-demo-capture.mjs :3 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-diagnostic-memory-conflicts.mjs :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-documentation-posture.mjs :1 import { access, mkdir, mkdtemp, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-fixture-isolation.mjs :2 import { existsSync, mkdirSync, readFileSync, symlinkSync, writeFileSync } from "node:fs";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-graph-promotion.mjs :2 import { mkdtemp } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-graph-retrieval-profiles.mjs :2 import { mkdtemp } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-installer.mjs :2 import { access, chmod, mkdir, mkdtemp, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-integration-embedding-route.mjs :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-local-cleanup.mjs :3 import { mkdtemp, mkdir, readFile, stat, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-non-owner-migration.mjs :3 import { cp, mkdir, mkdtemp, readdir, readFile, stat, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-onboard-contract.mjs :2 import { readFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-onboarding-cli.mjs :3 import { access, mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
  • fs (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-onboarding-temp-cleanup.mjs :3 import { readdirSync } from "node:fs";

69 more not shown — this panel samples each group; the count above is the real total.

shell / exec 80

  • shell Mushkrot-Recallant-4fdbcf1/apps/cli/src/cli-update.ts :1 import { spawnSync, type SpawnSyncReturns } from "node:child_process";
  • shell Mushkrot-Recallant-4fdbcf1/apps/cli/src/index.ts :3 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/generate-portfolio-screenshots.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/live-acceptance.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/recallant-production-backup.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/remote-live-external-canary.mjs :2 import { execFile } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/remote-mcp-separate-machine-evidence.mjs :4 import { execFile } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-agent-capture.mjs :2 import { execFile } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-backup-alerts.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-cli-version.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-codex-hook-runtime.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-connect-cli.mjs :1 import { execFileSync, spawnSync } from "node:child_process";
show 28 more
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-copyable-command-safety.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-cross-client.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-demo-capture.mjs :2 import { execFileSync, spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-fixture-isolation.mjs :3 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-graph-candidates.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-installer.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-live-acceptance.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-local-cleanup.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-mcp-stdio-lifecycle.mjs :2 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-memory-keeper.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-non-owner-migration.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-onboarding-cli.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-onboarding-temp-cleanup.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-pending-embedding-recovery.mjs :3 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase10-attach.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase10-detach.mjs :2 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase3-db.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase4-embeddings.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase5-retrieval.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase6-governed-memory.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase6-graph-context-forget.mjs :1 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase7-cli.mjs :4 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase8-backup.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase8-errors-rate-limit.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase8-size-limits.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase9-archive.mjs :1 import { spawn } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase9-cleanup.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase9-decay-supersedes.mjs :1 import { spawn } from "node:child_process";

40 more not shown — this panel samples each group; the count above is the real total.

network 38

  • net Mushkrot-Recallant-4fdbcf1/apps/cli/src/attach.ts :1291 const response = await fetch(new URL("/api/tags", url), { signal: controller.signal });
  • net Mushkrot-Recallant-4fdbcf1/apps/cli/src/index.ts :4276 const response = await fetch(new URL("/api/tags", url), { signal: controller.signal });
  • net Mushkrot-Recallant-4fdbcf1/apps/cli/src/remote-doctor.ts :349 const response = await fetch(endpointUrl, {
  • net Mushkrot-Recallant-4fdbcf1/apps/server/src/index.ts :9 import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
  • net Mushkrot-Recallant-4fdbcf1/apps/server/src/management-chat.ts :786 const response = await fetch(new URL("/api/chat", url), {
  • net Mushkrot-Recallant-4fdbcf1/packages/db/src/index.ts :1872 const response = await fetch(ollamaUrl("/api/embeddings"), {
  • net Mushkrot-Recallant-4fdbcf1/packages/mcp/src/remote-client.ts :166 response = await fetch(config.endpointUrl, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/fixtures/delayed-auth-origin.mjs :1 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-codex-otel-control.mjs :132 const unauthorized = await fetch(endpoint, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-cold-ollama-embeddings.mjs :1 import http from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-fixture-isolation.mjs :4 import { Socket } from "node:net";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-pending-embedding-recovery.mjs :1 import http from "node:http";
show 26 more
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-public-install-rollback.mjs :4 import { createServer } from "node:net";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-public-managed-install.mjs :4 import { createServer } from "node:net";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-public-quickstart.mjs :5 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-r2-remote-hook.mjs :4 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-r5-security-governance.mjs :1 import { request as httpRequest } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-real-project-pilots.mjs :386 const unauthenticated = await fetch(`${baseUrl}/review`);
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-agent-lifecycle.mjs :4 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-connect-cli.mjs :1 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-connect-external-rehearsal.mjs :1 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-connect-live-readiness.mjs :23 const response = await fetch(url, { ...init, redirect: "manual" });
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-connect-security.mjs :74 const response = await fetch(`${baseUrl}${path}`, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-connect-server.mjs :417 const response = await fetch(`${baseUrl}${path}`, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-authorization.mjs :59 const response = await fetch(endpoint, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-bridge.mjs :4 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-contract.mjs :477 const response = await fetch(`${baseUrl}${remoteMcpEndpointPath}`, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-credentials.mjs :311 const response = await fetch(`${baseUrl}${remoteMcpEndpointPath}`, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-doctor.mjs :1 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-external-rehearsal.mjs :5 import { createServer } from "node:https";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-provisioning.mjs :533 const response = await fetch(`${baseUrl}${path}`, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-separate-machine-evidence.mjs :3 import { createServer } from "node:https";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-review-ui-playwright.mjs :1225 const unauthenticated = await fetch(`${baseUrl}/review`);
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-review-ui.mjs :1146 const response = await fetch(
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-security-hardening.mjs :309 const connectResponse = await fetch(`http://127.0.0.1:${httpPort}/connect`, {
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-security-review.mjs :143 const health = await fetch(`${baseUrl}/health`);
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-service-env-profile.mjs :3 import { createServer } from "node:http";
  • net (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-system-audit-http.mjs :158 const health = await fetch(`${baseUrl}/health`, {

secrets 13

  • secrets Mushkrot-Recallant-4fdbcf1/apps/server/src/index.ts :245 return process.env.RECALLANT_SESSION_SECRET ?? "";
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/remote-mcp-separate-machine-evidence.mjs :37 credential: process.env.RECALLANT_EXTERNAL_REHEARSAL_CREDENTIAL ?? "",
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-r5-security-governance.mjs :63 process.env.RECALLANT_SESSION_SECRET = "r5-security-governance-session-secret";
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-real-project-pilots.mjs :366 process.env.RECALLANT_AUTH_TOKEN = token;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-connect-server.mjs :433 process.env.RECALLANT_AUTH_TOKEN = "remote-connect-server-smoke-token";
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-contract.mjs :526 const originalAuthToken = process.env.RECALLANT_AUTH_TOKEN;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-external-rehearsal.mjs :758 const credential = process.env.RECALLANT_EXTERNAL_REHEARSAL_CREDENTIAL;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-provisioning.mjs :557 const originalAuthToken = process.env.RECALLANT_AUTH_TOKEN;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-review-ui-playwright.mjs :506 process.env.RECALLANT_AUTH_TOKEN = token;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-review-ui.mjs :22 process.env.RECALLANT_AUTH_TOKEN = token;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-security-hardening.mjs :303 process.env.RECALLANT_AUTH_TOKEN = authToken;
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-security-review.mjs :83 process.env.RECALLANT_AUTH_TOKEN = `security-review-${randomUUID()}`;
show 1 more
  • secrets (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-system-audit-http.mjs :110 process.env.RECALLANT_AUTH_TOKEN = token;

database 45

  • db Mushkrot-Recallant-4fdbcf1/apps/cli/src/index.ts :55 import pg from "pg";
  • db Mushkrot-Recallant-4fdbcf1/packages/db/src/agent-observability.ts :7 import type { PoolClient } from "pg";
  • db Mushkrot-Recallant-4fdbcf1/packages/db/src/agent-telemetry.ts :8 import type { PoolClient } from "pg";
  • db Mushkrot-Recallant-4fdbcf1/packages/db/src/index.ts :72 import { Pool, type PoolClient } from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/configure-integration-embedding-route.mjs :2 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/recallant-production-backup.mjs :16 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-agent-observability.mjs :2 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-codex-hook-runtime.mjs :7 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-codex-otel-control.mjs :3 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-cold-ollama-embeddings.mjs :7 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-connect-cli.mjs :4 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-integration-embedding-route.mjs :7 import pg from "pg";
show 28 more
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-non-owner-migration.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-onboarding-cli.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-pending-embedding-recovery.mjs :11 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase10-attach.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase10-cross-project.mjs :2 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase10-detach.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase3-db.mjs :8 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase4-embeddings.mjs :12 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase5-retrieval.mjs :12 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase6-governed-memory.mjs :10 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase6-graph-context-forget.mjs :10 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase7-cli.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase8-backup.mjs :8 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase8-search-p95.mjs :2 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase8-size-limits.mjs :8 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase9-archive.mjs :8 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase9-cleanup.mjs :3 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-phase9-decay-supersedes.mjs :5 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-pre-pilot-import.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-pre-pilot-sandbox.mjs :8 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-project-sanitize.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-real-project-pilots.mjs :9 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-remote-mcp-authorization.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-repo-contract.mjs :14 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-schema.mjs :1 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-security-hardening.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-spool.mjs :6 import pg from "pg";
  • db (weak) Mushkrot-Recallant-4fdbcf1/scripts/smoke-stage5-cleanup-matrix.mjs :7 import pg from "pg";

5 more not shown — this panel samples each group; the count above is the real total.

declared dependencies 7

  • @eslint/js@^9.39.5
  • @playwright/test@^1.62.1
  • @types/node@^20.19.43
  • eslint@^9.39.5
  • prettier@^3.9.6
  • typescript@^5.8.3
  • typescript-eslint@^8.67.0

obfuscation 1

  • dynamic require()/import() Mushkrot-Recallant-4fdbcf1/scripts/smoke-agent-lifecycle-gate-cli.mjs :72 await import(`${cliUrl}?agent_lifecycle_gate_smoke=${cliImportCounter++}`);

transport_posture 1

  • network-listening, binds all interfaces, no auth detected Mushkrot-Recallant-4fdbcf1/scripts/smoke-r5-security-governance.mjs :85 server.listen(0, "0.0.0.0");