The autonomous OpenSIN-Code CLI
Insufficient evidence to grade. This server's source has not been statically analyzed, so a low grade would only mean "nothing found", not "nothing there". We don't show a reassuring grade we can't stand behind. Attested signals (CVEs, provenance) below still apply.
Once the source is analyzed (see the analysis flag in the header), a graded score appears here. How analysis works: methodology.
graded 14m ago · see ecosystem CVEs →
- A · 0 → B · 32
Inferred surface — each links to servers holding it:
No known CVEs for this server.
No tool-safety findings — heuristic detectors run on the compute-risk cadence; a finding appears when a tool trips a rule.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed analyzer v19 · 3h ago
skills & prompt files 23
- agent-rulesOpenSIN-Code-OpenSIN-Code-90b9d86/AGENTS.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-frontend-design/frontend-design/skills/frontend-design/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-frontend-design/skills/frontend-design/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-hookify/hookify/skills/writing-rules/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-hookify/skills/writing-rules/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-model-migration/claude-opus-4-5-migration/skills/claude-opus-4-5-migration/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-model-migration/skills/sin-opus-4-5-migration/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/agent-development/SKILL.md
- prompt-fileOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/agent-development/references/system-prompt-design.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/command-development/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/hook-development/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/mcp-integration/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/plugin-settings/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/plugin-structure/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/plugin-dev/skills/skill-development/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/agent-development/SKILL.md
- prompt-fileOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/agent-development/references/system-prompt-design.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/command-development/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/hook-development/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/mcp-integration/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/plugin-settings/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/plugin-structure/SKILL.md
- skillOpenSIN-Code-OpenSIN-Code-90b9d86/plugins/sin-plugin-dev/skills/skill-development/SKILL.md
danger signals8
- suspicious endpoint1.1.1.1OpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/archived/utils_v2/env.ts:31
await axiosClient.head('http://1.1.1.1', { - suspicious endpoint92.5.60.87OpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/src/api/providers/mod.ts:22
defaultBaseUrl: "http://92.5.60.87:4100/v1", - suspicious endpoint92.5.60.87OpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/src/api/providers/sin_provider.ts:13
export const DEFAULT_BASE_URL = "http://92.5.60.87:4100/v1"; - suspicious endpoint1.1.1.1OpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/src/core/utils/env.ts:31
await axiosClient.head('http://1.1.1.1', { - suspicious endpoint92.5.60.87OpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/src/model_routing/failover.ts:53
baseURL: 'http://92.5.60.87:4100/v1', - over-broad OAuth scopehttps://www.googleapis.com/auth/cloud-platformOpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/archived/utils_v2/auth.ts:852
scopes: ['https://www.googleapis.com/auth/cloud-platform'], - over-broad OAuth scopehttps://www.googleapis.com/auth/cloud-platformOpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/src/core/services/api/client.ts:274
scopes: ['https://www.googleapis.com/auth/cloud-platform'], - over-broad OAuth scopehttps://www.googleapis.com/auth/cloud-platformOpenSIN-Code-OpenSIN-Code-90b9d86/packages/opensin-sdk/src/core/utils/auth.ts:852
scopes: ['https://www.googleapis.com/auth/cloud-platform'],
[](https://mcpobservatory.com/servers/github:OpenSIN-Code/OpenSIN-Code/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of OpenSIN-Code.