MCP server giving AI agents a persistent, PTY-backed shell environment — real interactive sessions, deterministic prompt detection, and secret-safe input
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×27 in Sertelegger/holdfast
- HIGH code analysis flagged committed secret ×26 in Sertelegger/holdfast
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 759f015 · analyzer v33 · 54m ago
skills & prompt files 3
danger signals35
- committed secret Anthropic key Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :31
sk-ant…(41 chars, redacted) - committed secret OpenAI key Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :49
sk-AAA…(31 chars, redacted) - committed secret Google API key Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :65
AIzaSy…(39 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :133
ghp_01…(40 chars, redacted) - committed secret GitHub fine-grained PAT Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :143
github…(71 chars, redacted) - committed secret GitLab token Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :151
glpat-…(26 chars, redacted) - committed secret npm token Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :158
npm_01…(40 chars, redacted) - committed secret Slack token Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :313
xoxb-0…(40 chars, redacted) - committed secret Stripe live key Sertelegger-holdfast-759f015/crates/holdfast-core/data/redaction_default.toml :371
sk_liv…(32 chars, redacted) - committed secret private key Sertelegger-holdfast-759f015/crates/holdfast-core/src/attach/redact_stream.rs :73
PEM private key block (redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/attach/redact_stream.rs :417
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/audit.rs :418
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/config.rs :3186
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/diag.rs :216
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/mcp/detection.rs :365
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/mcp/tools.rs :5815
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/output/mod.rs :759
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/output/normalise.rs :530
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/output/prefix_index.rs :978
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/output/redact.rs :134
ghp_01…(40 chars, redacted) - committed secret Anthropic key Sertelegger-holdfast-759f015/crates/holdfast-core/src/output/redact.rs :406
sk-ant…(41 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/output/rules.rs :414
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/screen/mod.rs :2273
ghp_01…(40 chars, redacted) - committed secret private key Sertelegger-holdfast-759f015/crates/holdfast-core/src/screen/mod.rs :2489
PEM private key block (redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/secret/binding.rs :2377
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/src/session/mod.rs :2872
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/tests/attach_protocol.rs :1131
ghp_01…(40 chars, redacted) - committed secret private key Sertelegger-holdfast-759f015/crates/holdfast-core/tests/attach_protocol.rs :1181
PEM private key block (redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/tests/integration.rs :2963
ghp_01…(42 chars, redacted) - committed secret Anthropic key Sertelegger-holdfast-759f015/crates/holdfast-core/tests/integration.rs :2964
sk-ant…(41 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/tests/redaction_sweep.rs :661
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/tests/screen.rs :834
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast-core/tests/secrets.rs :4101
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/crates/holdfast/tests/attach_cli.rs :871
ghp_01…(40 chars, redacted) - committed secret GitHub token Sertelegger-holdfast-759f015/scripts/mcp-smoke.sh :293
ghp_01…(40 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 101
declared dependencies 22
- rmcp@3.1.2
- anyhow@1.0.104
- base64@0.23.1
- chrono@0.4.45
- ciborium@0.2.2
- libc@0.2.189
- parking_lot@0.12
- jsonschema@0.55.0
- portable-pty@0.9.0
- regex@1.13.1
- regex-automata@0.4.18
- schemars@1.2.2
show 10 more
- serde@1.0.229
- serde_bytes@0.11.19
- serde_json@1.0.151
- tempfile@3.27.0
- thiserror@2
- tokio@1.53.1
- toml@1.1.4
- unicode-width@0.2.2
- uuid@1
- vt100@0.16.2