LLM <-- MCP --> CodeQL( AST | CFG | CLI | LSP )
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 52 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
annotation_create
-
annotation_delete
-
annotation_get
-
annotation_list
-
annotation_search
-
annotation_update
-
audit_add_notes
-
audit_clear_repo
-
audit_list_findings
-
audit_store_findings
-
codeql_lsp_completion
-
codeql_lsp_definition
-
codeql_lsp_diagnostics
-
codeql_lsp_document_symbols
-
codeql_lsp_references
-
create_codeql_query
-
find_class_position
-
find_codeql_query_files
-
find_predicate_position
-
list_codeql_databases
-
list_mrva_run_results
-
list_query_run_results
-
profile_codeql_query
-
profile_codeql_query_from_logs
-
query_results_cache_clear
-
query_results_cache_compare
-
query_results_cache_lookup
-
query_results_cache_retrieve
-
quick_evaluate
-
read_database_source
-
register_database
-
sarif_compare_alerts
-
sarif_deduplicate_rules
-
sarif_diff_by_commits
-
sarif_diff_runs
-
sarif_extract_rule
-
sarif_list_rules
-
sarif_rule_to_markdown
-
sarif_store
-
search_ql_code
-
session_calculate_current_score
-
session_end
-
session_get
-
session_get_call_history
-
session_get_score_history
-
session_get_test_history
-
session_list
-
session_update_state
-
sessions_aggregate
-
sessions_compare
-
sessions_export
-
validate_codeql_query
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 0b1f017 · analyzer v33 · 4d ago
skills & prompt files 34
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/changelog_md.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/client_go.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/client_integration_tests.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/github_prompts.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/github_workflows_yaml.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/server_ql_languages_tools.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/server_src_prompts_md.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/server_src_resources_md.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/server_src_ts.instructions.md
- agent-rules advanced-security-codeql-development-mcp-server-0b1f017/.github/instructions/server_test_ts.instructions.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/.github/prompts/ql-mcp-server-fix-build-and-test.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/.github/prompts/validate-ql-mcp-server-tools-via-workshop.prompt.md
- skill advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/add-mcp-support-for-new-language/SKILL.md
- skill advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/SKILL.md
- skill advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/maintain-changelog/SKILL.md
- skill advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/upgrade-codeql-cli-and-packs/SKILL.md
- skill advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/validate-ql-mcp-server-tools-queries/SKILL.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/examples/team-customizations/prompts/example-team.prompt.md
- skill advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/examples/team-customizations/skills/example-team-skill/SKILL.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/check-for-duplicated-code.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/compare-overlapping-alerts.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/data-extension-development.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/diff-informed-analysis-workflow.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/document-codeql-query.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/explain-codeql-query.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/find-overlapping-queries.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/ql-lsp-iterative-development.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/ql-tdd-advanced.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/ql-tdd-basic.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/run-query-and-summarize-false-positives.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/sarif-rank-false-positives.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/sarif-rank-true-positives.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/tools-query-workflow.prompt.md
- prompt-file advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/workshop-creation-workflow.prompt.md
danger signals12
- dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/exercises-tests/Exercise1/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/exercises-tests/Exercise2/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/exercises-tests/Exercise3/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/exercises-tests/Exercise4/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/exercises-tests/Exercise5/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/solutions-tests/Exercise1/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/solutions-tests/Exercise2/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/solutions-tests/Exercise3/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/solutions-tests/Exercise4/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/solutions-tests/Exercise5/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution eval() advanced-security-codeql-development-mcp-server-0b1f017/.github/skills/create-codeql-query-development-workshop/examples/codeql-sap-js-ui5-xss/tests-common/test.js :56
eval(code); // sink: eval — code injection / XSS! - dynamic code execution new Function() advanced-security-codeql-development-mcp-server-0b1f017/server/dist/codeql-development-mcp-server.js :2963
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 373
filesystem 96
- fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/.vscode-test.mjs :17
import { cpSync, mkdirSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/esbuild.config.js :2
import { existsSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/scripts/bundle-customizations.js :30
} from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/scripts/bundle-server.js :18
import { cpSync, existsSync, mkdirSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/scripts/download-vscode.js :15
import { existsSync, rmSync } from 'node:fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/bridge/database-copier.ts :1
import { existsSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/bridge/environment-builder.ts :2
import { existsSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/codeql/cli-resolver.ts :2
import { access, readdir, readFile } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/extension.ts :1
import * as fs from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/server/pack-installer.ts :2
import { access } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/server/server-manager.ts :3
import { access, readFile, mkdir } from 'fs/promises'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/bridge/database-copier.test.ts :2
import { existsSync, mkdirSync, mkdtempSync, rmSync, utimesSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/codeql/cli-resolver.test.ts :18
import { access, readdir, readFile } from 'fs/promises'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/customizations/bundle-customizations.test.ts :17
} from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/server/pack-installer.test.ts :14
import { access } from 'fs/promises'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/server/server-manager.test.ts :21
import { access, readFile } from 'fs/promises'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/agents.integration.test.ts :13
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/bridge.integration.test.ts :10
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/bundled-markdown-links.integration.test.ts :15
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/codeql-workspace-resolution.integration.test.ts :23
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/copydb-e2e.integration.test.ts :25
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/file-watcher-stability.integration.test.ts :18
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/mcp-completion-e2e.integration.test.ts :17
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/mcp-completion-multiroot.integration.test.ts :16
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/mcp-prompt-e2e.integration.test.ts :18
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/mcp-resource-e2e.integration.test.ts :19
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/mcp-tool-e2e.integration.test.ts :17
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/suite/workspace-folder-change.integration.test.ts :18
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/esbuild.config.js :2
import { chmod, mkdir } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/codeql-development-mcp-server.ts :12
import { realpathSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/cli-executor.ts :6
import { accessSync, constants as fsConstants, existsSync, readdirSync, readFileSync, statSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/cli-tool-registry.ts :15
import { existsSync, mkdirSync, realpathSync, rmSync, writeFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/codeql-version.ts :8
import { existsSync, readFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/database-resolver.ts :9
import { existsSync, readdirSync, readFileSync, statSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/evaluator-log-parser.ts :17
import { createReadStream } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/log-directory-manager.ts :5
import { mkdirSync, existsSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/query-file-finder.ts :6
import * as fs from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/query-results-evaluator.ts :7
import { closeSync, fstatSync, mkdirSync, openSync, readFileSync, writeFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/query-scaffolding.ts :6
import * as fs from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/result-processor.ts :10
import { mkdirSync, readFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/server-manager.ts :14
import { mkdirSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/session-data-manager.ts :6
import { mkdirSync, writeFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/sqlite-store.ts :16
import { mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/prompt-completions.ts :14
import { readdir, readFile } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/prompts/workflow-prompts.ts :10
import { access } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/find-class-position.ts :11
import { readFile } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/find-predicate-position.ts :11
import { readFile } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/list-databases.ts :11
import { existsSync, readdirSync, statSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/list-mrva-run-results.ts :13
import { existsSync, readdirSync, readFileSync, statSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/list-query-run-results.ts :16
import { existsSync, readdirSync, readFileSync, statSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/profile-codeql-query-from-logs.ts :23
import { existsSync, mkdirSync, writeFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/profile-codeql-query.ts :9
import { writeFileSync, existsSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/read-database-source.ts :22
import { existsSync, readdirSync, readFileSync, statSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/register-database.ts :11
import { access, constants } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/search-ql-code.ts :11
import { closeSync, createReadStream, fstatSync, lstatSync, openSync, readdirSync, readFileSync, realpathSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/lsp/lsp-handlers.ts :9
import { readFile } from 'fs/promises'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :9
import { readFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/utils/package-paths.ts :19
import { existsSync, readFileSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/src/utils/temp-dir.ts :10
import { mkdirSync, mkdtempSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/cli-executor.test.ts :6
import { writeFileSync, rmSync, chmodSync, mkdirSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/cli-tool-registry.test.ts :6
import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/evaluator-log-parser.test.ts :7
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/log-directory-manager.test.ts :7
import { existsSync, mkdirSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/query-file-finder.test.ts :6
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/query-results-evaluator.test.ts :6
import { existsSync, mkdirSync, writeFileSync, readFileSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/query-scaffolding.test.ts :6
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/result-processor.test.ts :5
import { existsSync, rmSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/server-manager.test.ts :7
import { existsSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/session-data-manager.test.ts :7
import { existsSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/sqlite-store.test.ts :5
import { existsSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/validation.test.ts :4
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/prompts/prompt-completions.test.ts :16
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/prompts/workflow-prompts.test.ts :43
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/annotation-tools.test.ts :7
import { existsSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/audit-tools.test.ts :7
import { existsSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/cache-tools.test.ts :7
import { existsSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/find-class-position.test.ts :6
import { promises as fs } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/find-predicate-position.test.ts :6
import { promises as fs } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/find-query-files.test.ts :9
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/list-databases.test.ts :6
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/list-mrva-run-results.test.ts :6
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/list-query-run-results.test.ts :6
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/profile-codeql-query-from-logs.test.ts :7
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/profile-codeql-query.test.ts :7
import { existsSync, mkdirSync, writeFileSync, readFileSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/quick-evaluate.test.ts :7
import { promises as fs } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/read-database-source.test.ts :6
import { promises as fs } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/register-database.test.ts :7
import { promises as fs } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/codeql/search-ql-code.test.ts :6
import { mkdirSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/monitoring-tools.test.ts :9
import { existsSync, rmSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/query-documentation.test.ts :11
import * as fs from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/tools/sarif-tools.test.ts :6
import { existsSync, rmSync, writeFileSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/utils/package-paths.test.ts :12
import { readFileSync, existsSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/utils/temp-dir.test.ts :6
import { existsSync, rmSync, statSync } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/utils/file-cleanup.ts :1
import { promises as fs } from 'fs'; - fs (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/utils/temp-dir.ts :9
import { mkdirSync, mkdtempSync, rmSync } from 'fs'; - fs advanced-security-codeql-development-mcp-server-0b1f017/server/vitest.config.ts :2
import { readFileSync } from 'fs';
shell / exec 18
- shell advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/codeql/cli-resolver.ts :1
import { execFile } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/server/pack-installer.ts :1
import { execFile } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/src/server/server-manager.ts :2
import { execFile } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/codeql/cli-resolver.test.ts :17
import { execFile } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/server/pack-installer.test.ts :13
import { execFile } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/extensions/vscode/test/server/server-manager.test.ts :20
import { execFile } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/cli-executor.ts :5
import { execFile } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/cli-server.ts :11
import { ChildProcess, spawn } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/language-server.ts :6
import { spawn, ChildProcess } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/query-server.ts :12
import { ChildProcess, spawn } from 'child_process'; - shell advanced-security-codeql-development-mcp-server-0b1f017/server/src/lib/sqlite-store.ts :241
private exec(sql: string, params?: Record<string, unknown>): void { - shell advanced-security-codeql-development-mcp-server-0b1f017/server/src/utils/process-ready.ts :13
import { ChildProcess } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/cli-executor.test.ts :7
import { execFileSync } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/cli-server.test.ts :7
import { ChildProcess, spawn } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/language-server.test.ts :10
import { ChildProcess, spawn } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/query-server.test.ts :7
import { ChildProcess, spawn } from 'child_process'; - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/lib/server-manager.test.ts :21
// Mock child_process.spawn to avoid starting real CodeQL processes - shell (weak) advanced-security-codeql-development-mcp-server-0b1f017/server/test/src/utils/process-ready.test.ts :7
import { ChildProcess } from 'child_process';
tool registrations 52
- annotation_create advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/annotation-tools.ts :31
- annotation_get advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/annotation-tools.ts :56
- annotation_list advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/annotation-tools.ts :78
- annotation_update advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/annotation-tools.ts :107
- annotation_delete advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/annotation-tools.ts :133
- annotation_search advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/annotation-tools.ts :157
- audit_store_findings advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/audit-tools.ts :42
- audit_list_findings advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/audit-tools.ts :96
- audit_add_notes advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/audit-tools.ts :138
- audit_clear_repo advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/audit-tools.ts :204
- query_results_cache_lookup advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/cache-tools.ts :30
- query_results_cache_retrieve advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/cache-tools.ts :74
- query_results_cache_clear advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/cache-tools.ts :172
- query_results_cache_compare advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/cache-tools.ts :198
- validate_codeql_query advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql-tools.ts :58
- create_codeql_query advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql-tools.ts :87
- find_class_position advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/find-class-position.ts :65
- find_predicate_position advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/find-predicate-position.ts :80
- find_codeql_query_files advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/find-query-files.ts :15
- list_codeql_databases advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/list-databases.ts :93
- list_mrva_run_results advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/list-mrva-run-results.ts :207
- list_query_run_results advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/list-query-run-results.ts :270
- profile_codeql_query_from_logs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/profile-codeql-query-from-logs.ts :246
- profile_codeql_query advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/profile-codeql-query.ts :248
- quick_evaluate advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/quick-evaluate.ts :61
- read_database_source advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/read-database-source.ts :347
- register_database advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/register-database.ts :91
- search_ql_code advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/codeql/search-ql-code.ts :350
- codeql_lsp_diagnostics advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/lsp/lsp-diagnostics.ts :146
- codeql_lsp_completion advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/lsp/lsp-tools.ts :76
- codeql_lsp_definition advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/lsp/lsp-tools.ts :109
- codeql_lsp_references advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/lsp/lsp-tools.ts :142
- codeql_lsp_document_symbols advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/lsp/lsp-tools.ts :175
- session_end advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :66
- session_get advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :114
- session_list advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :161
- session_update_state advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :227
- session_get_call_history advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :289
- session_get_test_history advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :346
- session_get_score_history advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :403
- session_calculate_current_score advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :460
- sessions_compare advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :521
- sessions_aggregate advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :575
- sessions_export advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/monitoring-tools.ts :625
- sarif_extract_rule advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :111
- sarif_list_rules advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :157
- sarif_rule_to_markdown advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :191
- sarif_compare_alerts advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :238
- sarif_diff_by_commits advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :365
- sarif_diff_runs advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :430
- sarif_store advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :473
- sarif_deduplicate_rules advanced-security-codeql-development-mcp-server-0b1f017/server/src/tools/sarif-tools.ts :549
declared dependencies 30
- github.com/mark3labs/mcp-go@v0.58.0
- eslint@^10.8.1
- eslint-config-prettier@^10.1.8
- eslint-plugin-prettier@^5.5.6
- markdownlint-cli@^0.49.1
- prettier@^3.9.6
- typescript@^6.0.3
- typescript-eslint@^8.67.0
- github.com/cli/go-gh/v2@v2.13.0
- github.com/spf13/cobra@v1.10.2
- github.com/aymanbagabas/go-osc52/v2@v2.0.1
- github.com/cli/safeexec@v1.0.1
- github.com/cli/shurcooL-graphql@v0.0.4
- github.com/google/jsonschema-go@v0.4.3
- github.com/google/uuid@v1.6.0
- github.com/henvic/httpretty@v0.2.0
- github.com/inconshreveable/mousetrap@v1.1.0
- github.com/lucasb-eyer/go-colorful@v1.4.0
- github.com/mattn/go-isatty@v0.0.24
- github.com/muesli/termenv@v0.16.0
- github.com/rivo/uniseg@v0.4.7
- github.com/santhosh-tekuri/jsonschema/v6@v6.0.2
- github.com/spf13/cast@v1.10.0
- github.com/spf13/pflag@v1.0.10
- github.com/thlib/go-timezone-local@v0.0.8
- github.com/yosida95/uritemplate/v3@v3.0.2
- golang.org/x/sys@v0.47.0
- golang.org/x/term@v0.45.0
- golang.org/x/text@v0.40.0
- gopkg.in/yaml.v3@v3.0.1