ARGUS-3 — wallet-native, security-hardened personal agent; demand-side reference client and the reference host for the WARDEN MCP firewall (@aimarket/warden, a separate package) plus native AIMarket consumer/provider. Owner-locked Telegram, multi-provider, autonomous offline.
Drift inferred · capture-to-capture
tool count over time
06-23 10:57 now
0t
3t
transport stdio · http
verified
reported
listed in the official MCP registry counts 3 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
argus_ask
-
argus_capabilities
-
argus_status
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 31da3f6 · analyzer v33 · 1w ago
danger signals1
- suspicious endpoint api.telegram.org alexar76-argus-31da3f6/src/telegram/bot.ts :23
const API = "https://api.telegram.org";
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 130
filesystem 15
- fs (weak) alexar76-argus-31da3f6/scripts/capture-warden-gif.mjs :6
import { writeFileSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/channels/http.ts :3
import { readFileSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/cli/commands/verify.ts :1
import { readFileSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/cli/util.ts :3
import { writeFileSync, realpathSync, existsSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/config.ts :1
import { readFileSync, existsSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/economy/keystore.ts :2
import { readFileSync, writeFileSync, existsSync, chmodSync, mkdirSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/env-file.ts :1
import { readFileSync, existsSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/memory/store.ts :1
import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/monitor/instanceId.ts :2
import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/monitor/persist.ts :1
import { mkdirSync, readFileSync, writeFileSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/setup/wizard.ts :3
import { readFileSync, writeFileSync, existsSync, chmodSync } from "node:fs"; - fs alexar76-argus-31da3f6/src/telegram/bot.ts :1
import { writeFileSync, readFileSync, existsSync, mkdirSync } from "node:fs";
show 3 more
- fs (weak) alexar76-argus-31da3f6/test/env-file.test.ts :2
import { mkdtempSync, writeFileSync, rmSync } from "node:fs"; - fs (weak) alexar76-argus-31da3f6/test/keystore.test.ts :2
import { mkdtempSync, rmSync, existsSync, statSync } from "node:fs"; - fs (weak) alexar76-argus-31da3f6/test/monitor-feed.test.ts :2
import { mkdtemp } from "node:fs/promises";
network 13
- net alexar76-argus-31da3f6/src/channels/http.ts :1
import { createServer, type IncomingMessage, type Server, type ServerResponse } from "node:http"; - net alexar76-argus-31da3f6/src/economy/aimarket.ts :148
return fetch(input, init); - net alexar76-argus-31da3f6/src/economy/lumen.ts :115
const res = await fetch(`${this.url}/ai-market/v2/invoke`, { - net alexar76-argus-31da3f6/src/economy/mesh.ts :117
const res = await fetch(`${this.base}${path}`, { - net alexar76-argus-31da3f6/src/economy/oracles.ts :152
const res = await fetch(`${base}/ai-market/v2/invoke`, { - net alexar76-argus-31da3f6/src/ecosystem/networks.ts :98
return fetch(url, { ...init, dispatcher: agent } as any); - net alexar76-argus-31da3f6/src/mcp/catalog.ts :19
const res = await fetch(url, { signal: ctrl.signal }); - net alexar76-argus-31da3f6/src/monitor/feed.ts :73
const res = await fetch(endpoint, { - net alexar76-argus-31da3f6/src/providers/anthropic.ts :65
res = await fetch(`${this.baseUrl}/v1/messages`, { - net alexar76-argus-31da3f6/src/providers/openai.ts :55
res = await fetch(`${this.baseUrl}/chat/completions`, { - net alexar76-argus-31da3f6/src/telegram/bot.ts :186
const res = await fetch(`${API}/bot${this.o.token}/${method}`, { - net alexar76-argus-31da3f6/src/tools/builtin.ts :4
import { request as httpRequest, type IncomingMessage } from "node:http";
show 1 more
- net (weak) alexar76-argus-31da3f6/test/ecosystem-connectivity.test.ts :22
const res = await fetch(url, { headers });
secrets 8
- secrets alexar76-argus-31da3f6/src/cli/commands/channels.ts :103
token: process.env.ARGUS_HTTP_TOKEN?.trim(), - secrets alexar76-argus-31da3f6/src/cli/commands/doctor.ts :22
` telegram: ${process.env.ARGUS_TELEGRAM_TOKEN ? `token set · owner ${process.env.ARGUS_TELEGRAM_OWNER_ID ?? config.telegram.ownerId ?? "(TOFU: first /start)"}` : "off (no ARGUS_TELEGRAM_TOKEN)"}`, - secrets alexar76-argus-31da3f6/src/cli/commands/keystore.ts :71
const k = process.env.ARGUS_WALLET_KEY?.trim(); - secrets alexar76-argus-31da3f6/src/config.ts :215
feedPublicKey: process.env.ARGUS_THREAT_FEED_PUBKEY || undefined, - secrets alexar76-argus-31da3f6/src/economy/keystore.ts :279
return process.env.ARGUS_WALLET_KEY?.trim() || undefined; - secrets (weak) alexar76-argus-31da3f6/test/ecosystem-connectivity.test.ts :46
const token = process.env.MESH_API_TOKEN?.trim(); - secrets (weak) alexar76-argus-31da3f6/test/env-file.test.ts :27
delete process.env.DEEPSEEK_API_KEY; - secrets (weak) alexar76-argus-31da3f6/test/keystore.test.ts :137
const saved = { pass: process.env.ARGUS_KEYSTORE_PASSPHRASE, key: process.env.ARGUS_WALLET_KEY };
tool registrations 3
- argus_ask alexar76-argus-31da3f6/src/channels/mcp_server.ts :17
- argus_status alexar76-argus-31da3f6/src/channels/mcp_server.ts :84
- argus_capabilities alexar76-argus-31da3f6/src/channels/mcp_server.ts :118
install hooks 1
- prepublishOnly alexar76-argus-31da3f6/package.json :40
npm run build
declared dependencies 11
- @modelcontextprotocol/sdk@^1.12.0
- @aimarket/warden@0.4.0
- @noble/post-quantum@^0.6.1
- viem@^2.21.55
- zod@^3.24.1
- @aimarket/agent@^0.1.0
- @types/node@^22.10.2
- @vitest/coverage-v8@^2.1.9
- tsx@^4.19.2
- typescript@^5.7.2
- vitest@^2.1.8