MCP Observatory
4m ago Tracked 59,479 Last 4m ago 24h 2,575
github TypeScript re-analysis due

NVIDIA/elements

github

NVIDIA Design System and UI Agent Harness for AI/ML Factories, Robotics, and Autonomous Vehicles

maintainer
NVIDIA
licence
Apache-2.0
first seen
2026-07-02
last seen
2026-09-17
releases · 30d
27
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit d271642 · analyzer v33 · 3d ago

skills & prompt files 40

danger signals1

code evidence v@nvidia-elements/cli-v2.2.3 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1775

filesystem 104

  • fs (weak) NVIDIA-elements-d271642/.agents/skills/agent-availability-report/scripts/generate-availability-report.js :3 import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
  • fs (weak) NVIDIA-elements-d271642/.agents/skills/agent-dependencies/scripts/select-update.js :3 import { readdir, readFile } from 'node:fs/promises';
  • fs (weak) NVIDIA-elements-d271642/.agents/skills/agent-upkeep/scripts/select-task.js :3 import { readdir, readFile, stat } from 'node:fs/promises';
  • fs (weak) NVIDIA-elements-d271642/.agents/skills/authoring-projects/scripts/scaffold-project.mjs :4 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/cli/scripts/write-install-manifest.mjs :5 import { readFileSync, writeFileSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/cli/src/index.test.ts :5 import { mkdtemp, rm, writeFile } from 'node:fs/promises';
  • fs (weak) NVIDIA-elements-d271642/projects/cli/src/install.test.ts :6 import { chmod, lstat, mkdir, mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
  • fs NVIDIA-elements-d271642/projects/cli/src/install.ts :5 import { chmod, copyFile, mkdir, readFile, rm, symlink, writeFile } from 'node:fs/promises';
  • fs (weak) NVIDIA-elements-d271642/projects/cli/src/mcp/ui/index.test.ts :4 import { readdirSync, readFileSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/cli/vite.config.ts :1 import { readFileSync, writeFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/core/build/icons.js :1 import fs from 'fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/cache-validate.js :2 import { readFileSync, rmSync } from 'node:fs';
show 28 more
  • fs NVIDIA-elements-d271642/projects/internals/ci/ci-profile.js :8 import { mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/ci-summary.js :1 import { readFileSync } from 'fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/ci-validate.js :1 import { readFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/coverage.js :1 import { readFileSync } from 'fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/indexnow.js :2 import { appendFile, mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs NVIDIA-elements-d271642/projects/internals/ci/lighthouse-summary.js :1 import { readFileSync } from 'fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/metrics.lighthouse.js :1 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
  • fs NVIDIA-elements-d271642/projects/internals/ci/notice/index.js :1 import { existsSync, readFileSync, readdirSync, writeFileSync } from 'fs';
  • fs (weak) NVIDIA-elements-d271642/projects/internals/design/scripts/write-design-md.js :1 import { promises as fsp } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/internals/design/src/design-md.test.js :1 import { promises as fsp } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/eslint/src/local/no-missing-bundle-registration.js :1 import { existsSync, readdirSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/internals/eslint/src/local/no-missing-bundle-registration.test.js :1 import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
  • fs NVIDIA-elements-d271642/projects/internals/eslint/src/local/no-missing-bundle-test.js :3 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/internals/eslint/src/local/no-missing-bundle-test.test.js :1 import { mkdtemp, mkdir, writeFile } from 'node:fs/promises';
  • fs NVIDIA-elements-d271642/projects/internals/eslint/src/local/no-single-consumer-internal-base.js :1 import { existsSync, readdirSync, readFileSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/internals/eslint/src/local/no-single-consumer-internal-base.test.js :3 import { mkdtempSync, rmSync, mkdirSync, writeFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/eslint/src/local/require-test-completeness.js :20 import { existsSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/eslint/src/local/utils.js :1 import { existsSync, readFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/adoption.ts :4 import { writeFileSync } from 'node:fs';
  • fs (weak) NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/adoption.utils.test.ts :4 import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/adoption.utils.ts :4 import { readdir, readFile } from 'node:fs/promises';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/api.ts :4 import { writeFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/api.utils.ts :5 import { readFileSync, existsSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/examples.ts :4 import { writeFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/examples.utils.ts :4 import { globSync, readFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/lighthouse.ts :4 import { writeFileSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/lighthouse.utils.ts :4 import { readFileSync, existsSync } from 'node:fs';
  • fs NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/projects.ts :4 import { writeFileSync } from 'node:fs';

64 more not shown — this panel samples each group; the count above is the real total.

shell / exec 26

  • shell (weak) NVIDIA-elements-d271642/.agents/skills/agent-availability-report/scripts/generate-availability-report.js :2 import { execFile } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/.agents/skills/agent-dependencies/scripts/select-update.js :2 import { execFile } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/.agents/skills/agent-dependencies/scripts/verify-update.js :2 import { execFile } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/.agents/skills/agent-upkeep/scripts/select-task.js :2 import { execFile } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/.agents/skills/authoring-projects/scripts/scaffold-project.mjs :3 import { execFileSync } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/.agents/skills/summarize-releases/scripts/collect-releases.js :3 import { execFile } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/projects/cli/src/index.test.ts :4 import { execFileSync, spawnSync } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/projects/cli/src/install.test.ts :5 import { spawnSync } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/cli/src/install.ts :4 import { spawnSync, type SpawnSyncReturns } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/create/src/index.ts :6 import { spawn } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/ci/cache-validate.js :1 import { exec } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/ci/ci-profile.js :7 import { spawn, spawnSync } from 'node:child_process';
show 14 more
  • shell (weak) NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/releases.utils.test.ts :5 import { execSync } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/releases.utils.ts :4 import { execSync } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/projects/internals/tools/src/cli/utils.test.ts :54 const { execSync } = await import('node:child_process');
  • shell NVIDIA-elements-d271642/projects/internals/tools/src/cli/utils.ts :4 import { spawn, execSync } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/projects/internals/tools/src/internal/node.test.ts :43 const { spawn } = await import('node:child_process');
  • shell NVIDIA-elements-d271642/projects/internals/tools/src/internal/node.ts :4 import { spawn } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/projects/internals/tools/src/project/starters.test.ts :4 import type * as childProcess from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/tools/src/project/starters.ts :5 import { execFile, execFileSync } from 'node:child_process';
  • shell (weak) NVIDIA-elements-d271642/projects/internals/tools/src/project/update.test.ts :380 const { execFileSync } = await import('node:child_process');
  • shell NVIDIA-elements-d271642/projects/internals/tools/src/project/update.ts :4 import { execFileSync } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/vite/src/playwright/index.js :1 import { exec } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/vite/src/plugins/bundle.js :1 import { execSync } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/vite/src/plugins/dts.js :1 import { execFileSync } from 'node:child_process';
  • shell NVIDIA-elements-d271642/projects/internals/vite/src/runners/webgpu.js :5 import { execFileSync } from 'node:child_process';

network 7

  • net (weak) NVIDIA-elements-d271642/.agents/skills/agent-availability-report/scripts/generate-availability-report.js :145 const response = await fetch(url, {
  • net NVIDIA-elements-d271642/projects/cli/src/update.ts :18 const res = await fetch(MANIFEST_URL, {
  • net NVIDIA-elements-d271642/projects/core/src/icon/icon.ts :187 ? fetch(iconName).then(res => res.text())
  • net NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/adoption.utils.ts :184 const response = await fetch(url, { headers });
  • net NVIDIA-elements-d271642/projects/internals/tools/src/api/utils.ts :209 return fetch(url, { signal: controller.signal })
  • net NVIDIA-elements-d271642/projects/internals/tools/src/project/starters.ts :321 const response = await fetch(starterPath);
  • net NVIDIA-elements-d271642/projects/site/src/index.test.lighthouse.ts :11 import type { AddressInfo } from 'net';

secrets 2

  • secrets NVIDIA-elements-d271642/projects/internals/ci/indexnow.js :232 const key = validateKey(process.env.INDEXNOW_KEY);
  • secrets NVIDIA-elements-d271642/projects/internals/metadata/src/tasks/adoption.utils.ts :420 const token = process.env.GITHUB_TOKEN;

install hooks 1

  • prepare NVIDIA-elements-d271642/package.json :29 wireit

declared dependencies 25

  • @commitlint/cli@21.2.2
  • @commitlint/config-conventional@21.2.2
  • @nvidia-elements/code@workspace:*
  • @nvidia-elements/core@workspace:*
  • @nvidia-elements/styles@workspace:*
  • @nvidia-elements/themes@workspace:*
  • @semantic-release/changelog@7.0.0
  • @semantic-release/commit-analyzer@13.0.1
  • @semantic-release/exec@7.1.0
  • @semantic-release/git@11.0.1
  • @semantic-release/github@12.0.9
  • @semantic-release/npm@13.1.5
show 13 more
  • @semantic-release/release-notes-generator@14.1.1
  • @weiran.zsd/multi-eslint-rule-config@0.0.6
  • commitlint@21.2.2
  • glob@catalog:
  • husky@9.1.7
  • knip@6.11.0
  • lint-staged@17.4.1
  • playwright@catalog:
  • prettier@3.4.2
  • proper-lockfile@4.1.2
  • semantic-release@25.0.9
  • semantic-release-replace-plugin@1.2.7
  • wireit@0.14.13

cursor-plugin 2

  • opaque (low) NVIDIA-elements-d271642/.cursor/hooks.json bundled .cursor/ plugin descriptor (NVIDIA-elements-d271642/.cursor/hooks.json) — presence-detected; review the descriptor
  • opaque (low) NVIDIA-elements-d271642/.cursor/sandbox.json bundled .cursor/ plugin descriptor (NVIDIA-elements-d271642/.cursor/sandbox.json) — presence-detected; review the descriptor

perm:untrusted 1

  • untrusted NVIDIA-elements-d271642/projects/core/src/icon/icon.ts :187 ? fetch(iconName).then(res => res.text())