github TypeScript re-analysis due

PrimeUpYourLife/dynamic-telegram-bot-api-mcp

Dynamic MCP server for Telegram Bot API with latest API methods.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 5 tools

transport stdio · http counts 5 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit fd5e7ff · analyzer v33 · 1w ago

suspicious endpoint api.telegram.org PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/config.ts :11 TELEGRAM_API_BASE_URL: z.string().url().default("https://api.telegram.org"),
suspicious endpoint api.telegram.org PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/project-context.integration.test.ts :85 expect(requestedUrls).toEqual(["https://api.telegram.org/botproject-token/getMe"]);
suspicious endpoint api.telegram.org PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/telegram-client.test.ts :9 gramClient({ token: "secret", baseUrl: "https://api.telegram.org", timeoutMs: 1000, retries: 0, limiter: new RateLimiter(100, 100), logger: new Logger("error"), fetchImplementation: mockedFetch });

code evidence vv10.3.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 29

fs PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/config.ts :1 import { readFileSync } from "node:fs";
fs PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/project-context.ts :2 import { statSync } from "node:fs";
fs PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/schema-store.ts :1 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
fs PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/uploads.ts :1 import { readFile, realpath, stat } from "node:fs/promises";
fs (weak) PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/config.test.ts :1 import { mkdtemp, rm, writeFile } from "node:fs/promises";
fs (weak) PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/project-context.integration.test.ts :4 import { mkdtemp, rm, writeFile } from "node:fs/promises";
fs (weak) PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/project-context.test.ts :1 import { mkdtemp, rm, writeFile } from "node:fs/promises";
fs (weak) PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/uploads.test.ts :1 import { mkdtemp, writeFile } from "node:fs/promises";
fs (weak) PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/validation.test.ts :1 import { mkdtemp, writeFile } from "node:fs/promises";
fs (weak) PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/test/workflows.test.ts :1 import { readFile } from "node:fs/promises";

telegram_call_method PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/tools/call-method.ts :20
telegram_get_method PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/tools/get-method.ts :7
telegram_get_type PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/tools/get-type.ts :7
telegram_refresh_schema PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/tools/refresh-schema.ts :6
telegram_search_methods PrimeUpYourLife-dynamic-telegram-bot-api-mcp-fd5e7ff/src/tools/search-methods.ts :8