github Go re-analysis due deep scan · partial (309/2,383 files)

TykTechnologies/ai-studio

github

Tyk AI Studio provides an AI gateway and comprehensive suite of capabilities to manage, govern, and interact with AI across your organization

maintainer
TykTechnologies
licence
AGPL-3.0
first seen
2026-07-10
last seen
2026-09-18
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
  2. HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
  3. HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
  4. HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
  5. HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
  6. HIGH code analysis flagged committed secret ×3 in TykTechnologies/ai-studio
capabilities 0 tools
transport counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f5983e9 · analyzer v33 · 4d ago

skills & prompt files 7

danger signals3

code evidence vv1.0.6-rc7 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1802

filesystem 2

  • fs (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/global-setup.ts :4 import * as fs from 'fs';
  • fs (weak) TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/selectLabelAssociation.test.js :1 const fs = require("fs");

network 11

  • net (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/utils/openai.ts :28 const response = await fetch(customUrl, {
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/components/agents/AgentDetail.js :234 const response = await fetch(`${baseURL}/agents/${id}/message?session_id=${testSessionId}`, {
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/components/tools/ImportOpenAPIWizard/index.js :142 const response = await fetch(directSpec.spec);
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/context/EditionContext.js :2 import axios from 'axios';
  • net (weak) TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/context/EditionContext.test.js :3 import axios from 'axios';
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/services/agentService.js :245 const response = await fetch(`${baseURL}/agents/${agentId}/message`, {
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/apiClient.js :1 import axios from 'axios';
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/pubClient.js :1 import axios from "axios";
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/urlUtils.js :1 import axios from "axios";
  • net (weak) TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/admin/utils/urlUtils.test.js :1 import axios from 'axios';
  • net TykTechnologies-ai-studio-f5983e9/ui/admin-frontend/src/portal/pages/OAuthConsentPage.js :4 import axios from 'axios';

secrets 2

  • secrets (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/config.ts :18 bootstrap_admin_password: process.env.BOOTSTRAP_ADMIN_PASSWORD || 'Admin#2025',
  • secrets (weak) TykTechnologies-ai-studio-f5983e9/tests/ui/global-setup.ts :24 bootstrap_admin_password: process.env.BOOTSTRAP_ADMIN_PASSWORD || 'Admin#2025',

declared dependencies 200

  • github.com/mark3labs/mcp-go@v0.37.1-0.20250812151906-9f16336f83e1
  • dario.cat/mergo@v1.0.2
  • github.com/Masterminds/semver/v3@v3.2.1
  • github.com/TykTechnologies/midsommar/microgateway@v0.0.0
  • github.com/TykTechnologies/midsommar/v2/enterprise@v0.0.0
  • github.com/TykTechnologies/tyk-identity-broker@v1.7.0
  • github.com/amikos-tech/chroma-go@v0.2.5
  • github.com/andybalholm/brotli@v1.2.0
  • github.com/aws/aws-sdk-go-v2@v1.41.5
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream@v1.7.8
  • github.com/aws/aws-sdk-go-v2/config@v1.32.14
  • github.com/aws/aws-sdk-go-v2/credentials@v1.19.14
show 28 more
  • github.com/aws/aws-sdk-go-v2/service/bedrockruntime@v1.50.4
  • github.com/docker/docker@v28.5.2+incompatible
  • github.com/docker/go-connections@v0.6.0
  • github.com/dslipak/pdf@v0.0.2
  • github.com/gin-contrib/cors@v1.7.2
  • github.com/gin-gonic/gin@v1.10.1
  • github.com/go-mail/mail@v2.3.1+incompatible
  • github.com/go-openapi/strfmt@v0.27.0
  • github.com/gofrs/uuid@v4.4.0+incompatible
  • github.com/google/uuid@v1.6.0
  • github.com/gorilla/csrf@v1.7.3
  • github.com/gorilla/mux@v1.8.1
  • github.com/gorilla/sessions@v1.2.1
  • github.com/gosimple/slug@v1.15.0
  • github.com/hashicorp/go-hclog@v1.6.3
  • github.com/hashicorp/go-plugin@v1.7.0
  • github.com/joho/godotenv@v1.5.1
  • github.com/lib/pq@v1.10.9
  • github.com/liushuangls/go-anthropic/v2@v2.8.0
  • github.com/lu4p/cat@v0.1.5
  • github.com/nats-io/nats.go@v1.45.0
  • github.com/opencontainers/image-spec@v1.1.1
  • github.com/pb33f/libopenapi@v0.18.0
  • github.com/pgvector/pgvector-go@v0.1.1
  • github.com/pinecone-io/go-pinecone@v1.1.1
  • github.com/pkoukk/tiktoken-go@v0.1.6
  • github.com/prometheus/client_golang@v1.24.1
  • github.com/redis/go-redis/v9@v9.6.3

160 more not shown — this panel samples each group; the count above is the real total.