github JavaScript re-analysis due

Ryanabcraft/zeroreal

Use ChatGPT, DeepSeek, Gemini e outras IAs da web como agentes do executor Real — sem API key, sem terminal.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 02bf75a · analyzer v33 · 6d ago

dynamic code execution new Function() Ryanabcraft-zeroreal-02bf75a/extension/test-chatgpt.js :64 const P = new Function(
dynamic code execution new Function() Ryanabcraft-zeroreal-02bf75a/extension/test-parser.js :3 const ZSParse = new Function(fs.readFileSync(__dirname + "/core/parser.js", "utf8") + "; return ZSParse;")();

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 21

fs (weak) Ryanabcraft-zeroreal-02bf75a/extension/test-chatgpt.js :16 const fs = require("fs");
fs (weak) Ryanabcraft-zeroreal-02bf75a/extension/test-parser.js :2 const fs = require("fs");