github TypeScript analyzed 6c5d85e

Sheldenshi/gini-agent

The agent that remembers and learns.

maintainer: Sheldenshi
licence: MIT
first seen: 2026-06-26
last seen: 2026-06-27
releases · 30d: 0
short id

risk 47/100 · heuristic grade

C elevated inferred analyzer v33 (current)

capability exposure inferred + 35
tool safety inferred + 12

inferred

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 3d ago · see ecosystem CVEs →

risk trajectory 4 movements

3d ago C · 44 → C · 47
3w ago C · 56 → C · 44
4w ago D · 64 → C · 56
10w ago C · 56 → D · 64

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 1 findings · grade factor +12

high dangerous code

committed secret: Google OAuth client secret, GitHub fine-grained PAT, Anthropic key · dynamic exec: new Function()

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 6c5d85e · analyzer v33 · 1w ago

skills & prompt files 29

danger signals23

dynamic code execution new Function() Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/tools/browser.ts :3846 return new Function(`return (${expr});`)();
suspicious endpoint 169.254.169.254 (cloud metadata) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/execution/tool-dispatch.test.ts :888 "http://169.254.169.254/latest/meta-data/",
suspicious endpoint api.telegram.org Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/messaging-poller-helpers.test.ts :66 const raw = "fetch failed: https://api.telegram.org/bot123456:ABC-def_GHI/getMe";
suspicious endpoint us.i.posthog.com (telemetry) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/posthog.test.ts :160 expect(seenHost).toBe("https://us.i.posthog.com");
suspicious endpoint us.i.posthog.com (telemetry) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/posthog.ts :25 const DEFAULT_HOST = "https://us.i.posthog.com";
suspicious endpoint api.telegram.org Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/telegram.ts :10 const TELEGRAM_API_BASE = "https://api.telegram.org";
suspicious endpoint 169.254.169.254 (cloud metadata) Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/tools/browser.test.ts :161 expect(safetyCheck("http://169.254.169.254/", { allowLoopback: true })).toBeDefined();
suspicious endpoint us.i.posthog.com (telemetry) Open-Curiosity-gini-agent-6c5d85e/packages/web/src/instrumentation-client.ts :17 posthog.init(token, posthogInitOptions(process.env.NEXT_PUBLIC_POSTHOG_HOST ?? "https://us.i.posthog.com"));
suspicious endpoint us.i.posthog.com (telemetry) Open-Curiosity-gini-agent-6c5d85e/packages/web/src/lib/posthog.test.ts :9 const options = posthogInitOptions("https://us.i.posthog.com");
suspicious endpoint eu.i.posthog.com (telemetry) Open-Curiosity-gini-agent-6c5d85e/packages/web/src/lib/posthog.test.ts :21 const options = posthogInitOptions("https://eu.i.posthog.com");
over-broad OAuth scope gmail.modify Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/google-accounts.test.ts :277 "/tmp/gws-personal": signedIn("me@example.com", ["https://www.googleapis.com/auth/gmail.modify"]),
over-broad OAuth scope https://www.googleapis.com/auth/drive Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/google-login-web.ts :59 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/google-login-web.ts :60 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope gmail.modify Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/google-login-web.ts :61 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/documents Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/google-login-web.ts :63 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope gmail.modify Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/gws-session.test.ts :13 "https://www.googleapis.com/auth/gmail.modify"
over-broad OAuth scope https://www.googleapis.com/auth/documents Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/gws-session.test.ts :42 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/gws-session.test.ts :43 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/drive Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/gws-session.test.ts :85 const scopes = ["https://www.googleapis.com/auth/drive"];
over-broad OAuth scope https://www.googleapis.com/auth/drive Open-Curiosity-gini-agent-6c5d85e/skills/google/google-account-login/scripts/__tests__/account-login.test.ts :55 "https://www.googleapis.com/auth/drive"
committed secret Google OAuth client secret Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/integrations/connectors/relay-workspace-client.ts :22 GOCSPX…(35 chars, redacted)
committed secret GitHub fine-grained PAT Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/runtime/crash-report.test.ts :103 github…(38 chars, redacted)
committed secret Anthropic key Open-Curiosity-gini-agent-6c5d85e/packages/runtime/src/tools/browser.test.ts :90 sk-ant…(45 chars, redacted)

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:Sheldenshi/gini-agent/badge.svg)](https://mcpobservatory.com/servers/github:Sheldenshi/gini-agent/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of Sheldenshi.

Sheldenshi/gini-agent

skills & prompt files 29

danger signals23

Navigate

Stream

Features

Display