MCP Observatory
3m ago Tracked 59,936 Last 3m ago 24h 2,437
github Rust re-analysis due no deep scan

Rul1an/assay

github

Open evidence profile for MCP tool actions. Enforce configured tool-call policies and record decisions and observations in offline-verifiable bundles. Optional Linux kernel controls. No hosted backend required.

maintainer
Rul1an
licence
MIT
first seen
2026-06-04
last seen
2026-09-18
releases · 30d
18
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in Rul1an/assay
  2. HIGH code analysis flagged committed secret in Rul1an/assay
  3. HIGH code analysis flagged committed secret in Rul1an/assay
  4. HIGH code analysis flagged committed secret in Rul1an/assay
  5. HIGH code analysis flagged committed secret in Rul1an/assay
  6. HIGH code analysis flagged committed secret in Rul1an/assay
  7. HIGH code analysis flagged committed secret in Rul1an/assay
  8. HIGH code analysis flagged committed secret in Rul1an/assay
  9. HIGH code analysis flagged committed secret in Rul1an/assay
capabilities 0 tools
transport stdio verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit bddfc81 · analyzer v33 · 1h ago

skills & prompt files 8

danger signals2

code evidence vv6.6.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1999

filesystem 16

  • fs (weak) Rul1an-assay-bddfc81/crates/assay-core/tests/fixtures/otel-mcp-ingest-v0/generator/check-runtime.cjs :6 const fs = require('fs');
  • fs (weak) Rul1an-assay-bddfc81/crates/assay-core/tests/fixtures/otel-mcp-ingest-v0/generator/generate.js :29 import * as fs from 'fs/promises';
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/cross-runtime-drift-2026-05/workload-gemini/src/sdk-events.ts :29 import { appendFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/cross-runtime-drift-2026-05/workload-gemini/src/workload.ts :19 } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/cross-runtime-drift-2026-05/workload-openai/src/sdk-events.ts :29 import { appendFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/cross-runtime-drift-2026-05/workload-openai/src/workload.ts :12 import { mkdirSync, readFileSync, writeFileSync, appendFileSync, statSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/runner-vs-otel-2026-05/workload/src/manifest-binding.ts :24 import { readFileSync, existsSync, statSync, mkdtempSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/runner-vs-otel-2026-05/workload/src/otel-setup.ts :17 import { writeFileSync, mkdirSync, existsSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/runner-vs-otel-2026-05/workload/src/sdk-events.ts :32 import { appendFileSync, existsSync, mkdirSync, writeFileSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/docs/experiments/runner-vs-otel-2026-05/workload/src/workload.ts :23 import { writeFileSync, mkdirSync, readFileSync, existsSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/examples/promptfoo-assertion-grading-result-evidence/capture_probe.mjs :2 import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/runner-fixtures/openai-agents/fixture-agent.js :4 const fs = require('node:fs');
show 4 more
  • fs (weak) Rul1an-assay-bddfc81/scripts/ci/codex_host_proof.mjs :13 import fs from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/scripts/ci/codex_host_proof_validator.mjs :7 import fs from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/scripts/ci/fixtures/codex-host-proof/fake-app-server.mjs :6 import fs from "node:fs";
  • fs (weak) Rul1an-assay-bddfc81/scripts/ci/test_codex_host_proof.mjs :10 import fs from "node:fs";

shell / exec 4

  • shell (weak) Rul1an-assay-bddfc81/docs/experiments/runner-vs-otel-2026-05/workload/src/manifest-binding.ts :27 import { execFileSync } from "node:child_process";
  • shell (weak) Rul1an-assay-bddfc81/examples/promptfoo-assertion-grading-result-evidence/capture_probe.mjs :1 import { spawnSync } from "node:child_process";
  • shell (weak) Rul1an-assay-bddfc81/scripts/ci/codex_host_proof.mjs :11 import { execFileSync, spawn } from "node:child_process";
  • shell (weak) Rul1an-assay-bddfc81/scripts/ci/test_codex_host_proof.mjs :9 import { spawn, spawnSync } from "node:child_process";

network 1

  • net (weak) Rul1an-assay-bddfc81/crates/assay-core/tests/fixtures/otel-mcp-ingest-v0/generator/generate.js :28 import * as http from 'http';

secrets 1

  • secrets (weak) Rul1an-assay-bddfc81/docs/experiments/cross-runtime-drift-2026-05/workload-gemini/src/workload.ts :44 const apiKey = process.env.GOOGLE_API_KEY;

install hooks 1

  • preinstall Rul1an-assay-bddfc81/crates/assay-core/tests/fixtures/otel-mcp-ingest-v0/generator/package.json :8 node check-runtime.cjs

declared dependencies 40

  • @modelcontextprotocol/sdk@^1.27.0
  • zod@^3.23.0
  • tsx@^4.19.0
  • assay-core@6.6.1
  • assay-common@6.6.1
  • assay-monitor@6.6.1
  • assay-metrics@6.6.1
  • assay-policy@6.6.1
  • assay-mcp-server@6.6.1
  • assay-canonical@6.6.1
  • assay-evidence@6.6.1
  • assay-sim@6.6.1
show 28 more
  • assay-registry@6.6.1
  • assay-runner-schema@6.6.1
  • assay-runner-core@6.6.1
  • assay-runner-linux@6.6.1
  • anyhow@1
  • thiserror@2
  • serde@1.0
  • serde_json@1.0
  • serde_yaml@0.9
  • tracing@0.1
  • tokio@1
  • clap@4
  • uuid@1.23
  • chrono@0.4
  • tempfile@3
  • process-wrap@9.1
  • regex@1
  • async-trait@0.1
  • sha2@0.11
  • hex@0.4
  • flate2@1.1
  • tar@0.4
  • aya@0.13.0
  • aya-log@0.2
  • object@=0.36.7
  • ratatui@0.30
  • crossterm@0.29
  • jsonschema@0.55

cursor-plugin 3

  • opaque (low) Rul1an-assay-bddfc81/.cursor/BUGBOT.md bundled .cursor/ plugin descriptor (Rul1an-assay-bddfc81/.cursor/BUGBOT.md) — presence-detected; review the descriptor
  • opaque (low) Rul1an-assay-bddfc81/.cursor/environment.json bundled .cursor/ plugin descriptor (Rul1an-assay-bddfc81/.cursor/environment.json) — presence-detected; review the descriptor
  • opaque (low) Rul1an-assay-bddfc81/.cursor/mcp.json bundled .cursor/ plugin descriptor (Rul1an-assay-bddfc81/.cursor/mcp.json) — presence-detected; review the descriptor

obfuscation 1

  • dynamic require()/import() Rul1an-assay-bddfc81/scripts/ci/test_codex_host_proof.mjs :379 void import(${JSON.stringify(`data:text/javascript,${encodeURIComponent(body)}`)});