github re-analysis due unconfirmed MCP

afshinm/zerobox

Lightweight, cross-platform process sandboxing powered by OpenAI Codex's runtime. Sandbox any command with file, network, and credential controls.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

code evidence vv0.3.3 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs afshinm-zerobox-9a7affd/packages/zerobox/src/bin.ts :6 import { existsSync, openSync, readSync, closeSync, realpathSync } from "node:fs";
fs afshinm-zerobox-9a7affd/packages/zerobox/src/binary.ts :3 import { existsSync } from "node:fs";
fs afshinm-zerobox-9a7affd/packages/zerobox/src/platforms.ts :2 import { existsSync, readFileSync } from "node:fs";

shell afshinm-zerobox-9a7affd/packages/zerobox/src/bin.ts :3 import { execFileSync } from "node:child_process";
shell afshinm-zerobox-9a7affd/packages/zerobox/src/binary.ts :4 import { execFileSync } from "node:child_process";
shell afshinm-zerobox-9a7affd/packages/zerobox/src/command.ts :1 import { execFile } from "node:child_process";
shell afshinm-zerobox-9a7affd/packages/zerobox/src/platforms.ts :1 import { execSync } from "node:child_process";
shell afshinm-zerobox-9a7affd/packages/zerobox/src/sandbox.ts :78 exec(cmd: string, args: string[] = []): ShellCommand {