github re-analysis due unconfirmed MCP

RoxyAPI/ui

github

UI component library for the RoxyAPI catalog. Drop-in charts, tables, cards, and forms for astrology, Vedic, Human Design, tarot, numerology, forecasts, and more. One key, beautiful in 30 minutes.

maintainer
RoxyAPI
license
MIT
first seen
2026-06-04
last seen
2026-06-19
releases · 30d
6
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 7e61646 · analyzer v18 · 2d ago

skills & prompt files 1

code evidence vv0.9.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 13

  • fs RoxyAPI-ui-7e61646/scripts/brand-grep.ts :16 import { existsSync, readFileSync } from 'node:fs';
  • fs RoxyAPI-ui-7e61646/scripts/build-react.ts :17 import { mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/build-registry.ts :18 import { mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/build-widgets.ts :16 import { mkdir, readFile, writeFile } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/build.ts :24 } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/generate.ts :7 import { existsSync } from 'node:fs';
  • fs RoxyAPI-ui-7e61646/scripts/preview.ts :8 import { existsSync } from 'node:fs';
  • fs RoxyAPI-ui-7e61646/scripts/refresh-samples.ts :12 import { existsSync, mkdirSync, writeFileSync } from 'node:fs';
  • fs RoxyAPI-ui-7e61646/scripts/screenshots.ts :13 } from 'node:fs';
  • fs RoxyAPI-ui-7e61646/scripts/sync-docs.ts :7 import { readFile, writeFile } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/sync-manifest.ts :6 import { writeFile } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/sync-tokens.ts :5 import { readFile, writeFile } from 'node:fs/promises';
  • fs RoxyAPI-ui-7e61646/scripts/sync-version.ts :7 import { readFile, writeFile } from 'node:fs/promises';

shell / exec 3

  • shell RoxyAPI-ui-7e61646/scripts/brand-grep.ts :15 import { execSync } from 'node:child_process';
  • shell RoxyAPI-ui-7e61646/scripts/build.ts :16 import { execSync } from 'node:child_process';
  • shell RoxyAPI-ui-7e61646/scripts/generate.ts :6 import { execSync } from 'node:child_process';

network 8

  • net RoxyAPI-ui-7e61646/packages/ui/src/components/endpoint-form.ts :45 pending = fetch(url)
  • net RoxyAPI-ui-7e61646/packages/ui/src/components/location-search.ts :237 const res = await fetch(url, { headers, signal: controller.signal });
  • net RoxyAPI-ui-7e61646/scripts/build-registry.ts :251 const res = await fetch('/api/natal-chart', {
  • net RoxyAPI-ui-7e61646/scripts/build-widgets.ts :115 fetch(url, init)
  • net RoxyAPI-ui-7e61646/scripts/generate.ts :18 const res = await fetch(SPEC_URL, {
  • net RoxyAPI-ui-7e61646/scripts/preview.ts :51 async fetch(req: Request): Promise<Response> {
  • net RoxyAPI-ui-7e61646/scripts/refresh-samples.ts :36 const res = await fetch(`${API_BASE}/${path}`, {
  • net RoxyAPI-ui-7e61646/scripts/screenshots.ts :69 const probe = await fetch(BASE_URL).catch(() => null);

secrets 2

  • secrets RoxyAPI-ui-7e61646/scripts/build-registry.ts :116 const roxy = createRoxy(process.env.ROXY_API_KEY!);
  • secrets RoxyAPI-ui-7e61646/scripts/refresh-samples.ts :16 const API_KEY = process.env.ROXY_API_KEY;

install hooks 1

  • postinstall RoxyAPI-ui-7e61646/package.json :31 bun run generate || true

declared dependencies 18

  • lit@^3.2.0
  • @axe-core/playwright@^4.10.0
  • @biomejs/biome@^2.4.9
  • @hey-api/client-fetch@0.13.1
  • @hey-api/openapi-ts@0.97.3
  • @lit-labs/rollup-plugin-minify-html-literals@^0.2.0
  • @playwright/test@^1.49.0
  • @roxyapi/sdk@^1.2.29
  • @types/bun@^1.2.0
  • @types/node@^24.0.0
  • @types/react@^19.0.0
  • esbuild@^0.28.0
  • happy-dom@^20.8.9
  • lefthook@^2.1.4
  • react@^19.0.0
  • react-dom@^19.0.0
  • sharp@^0.34.5
  • typescript@^5.7.0