github Python analyzed f3ef7b7 deep scan · partial (424/7,263 files)

ariffazil/AAA

[L1 GOVERNANCE] AAA — Surface layer: cockpit, A2A gateway, agent identity. Routes and displays, never adjudicates.

maintainer: ariffazil
licence: AGPL-3.0
first seen: 2026-06-04
last seen: 2026-09-09
releases · 30d: 2
short id

risk 77/100 · heuristic grade

D high inferred analyzer v33 (current)

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 25
trust mitigators mixed − 3

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 3d ago · see ecosystem CVEs →

risk trajectory 6 movements

3w ago D · 76 → D · 77
3w ago D · 64 → D · 76
9w ago D · 76 → D · 64
10w ago D · 64 → D · 76
10w ago C · 56 → D · 64
11w ago A · 0 → C · 56

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 7 findings · grade factor +25

high dangerous code

committed secret: private key, GitHub token, Google API key · dynamic exec: eval()/exec() · suspicious bundled script in 2 file(s)
high hidden prompt content

5 file(s) with hidden prompt content: ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/github/github-pr-workflow/SKILL.md (skill-exfil), ariffazil-AAA-f3ef7b7/.hermes-arch…
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
medium toxic flow (lethal trifecta)

lethal trifecta reachable across this server's tool + source surface: private-data access + untrusted-content ingestion + network exfil (a leg is proven only in the analyzed source)

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f3ef7b7 · analyzer v33 · 12h ago

skills & prompt files 179

hidden: skill: skill-exfil ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/github/github-pr-workflow/SKILL.md :364 secret→sink: | Add comment | `gh pr comment N --body "..."` | `curl -X POST .../issues/N/comments -d '{"body":"..."}'` |
hidden: skill: skill-exfil ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/airtable/SKILL.md :40 secret→sink: - **All requests** use JSON (`Content-Type: application/json` for any POST/PATCH/PUT body).
hidden: skill: skill-exfil ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/github/github-pr-workflow/SKILL.md :364 secret→sink: | Add comment | `gh pr comment N --body "..."` | `curl -X POST .../issues/N/comments -d '{"body":"..."}'` |
hidden: skill: skill-exfil ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/airtable/SKILL.md :40 secret→sink: - **All requests** use JSON (`Content-Type: application/json` for any POST/PATCH/PUT body).
hidden: skill: skill-exfil ariffazil-AAA-f3ef7b7/registries/antigravity/skills/workers-best-practices/SKILL.md :90 secret→sink: | Hardcoded secrets in source or config | Credential leak via version control |

danger signals25

dynamic code execution eval()/exec() ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/red-teaming/godmode/scripts/auto_jailbreak.py :52 exec(compile(open(_parseltongue_path).read(), str(_parseltongue_path), 'exec'), _caller_globals)
dynamic code execution eval()/exec() ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/red-teaming/godmode/scripts/load_godmode.py :29 exec(compile(open(path).read(), str(path), 'exec'), ns)
suspicious endpoint api.telegram.org ariffazil-AAA-f3ef7b7/archive/2026-07-25/AAA/a2a-server/archive/2026-06-26-hermes-a2a-decommission/hermes-a2a.py :13 TELEGRAM_API = f"https://api.telegram.org/bot{TELEGRAM_TOKEN}"
suspicious endpoint api.telegram.org ariffazil-AAA-f3ef7b7/scripts/supply_chain_audit.py :54 f"https://api.telegram.org/bot{token}/sendMessage",
over-broad OAuth scope gmail.modify ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/google_api.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/google_api.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/google_api.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/google_api.py :53 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope gmail.modify ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/setup.py :49 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/setup.py :51 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/setup.py :53 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/productivity/google-workspace/scripts/setup.py :54 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope gmail.modify ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/google_api.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/google_api.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/google_api.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/google_api.py :53 "https://www.googleapis.com/auth/documents",
over-broad OAuth scope gmail.modify ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/setup.py :48 "https://www.googleapis.com/auth/gmail.modify",
over-broad OAuth scope https://www.googleapis.com/auth/drive ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/setup.py :50 "https://www.googleapis.com/auth/drive",
over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/setup.py :52 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/productivity/google-workspace/scripts/setup.py :53 "https://www.googleapis.com/auth/documents",
committed secret private key ariffazil-AAA-f3ef7b7/IDENTITY/keys/.quarantine-qwen-code-20260812-224652/qwen-code_private.pem :1 PEM private key block (redacted)
committed secret GitHub token ariffazil-AAA-f3ef7b7/scripts/tests/test_aaa_capability_phase_a.py :229 ghp_aa…(40 chars, redacted)
committed secret Google API key ariffazil-AAA-f3ef7b7/workspace/memory/2026-04-04-sovereign-architect.md :187 AIzaSy…(39 chars, redacted)
suspicious bundled script suspicious bundled script ariffazil-AAA-f3ef7b7/.hermes-archived-2026-08-15/skills/creative/manim-video/scripts/setup.sh :9 python3 -c "import manim" 2>/dev/null && ok "Manim $(manim --version 2>&1 | head -1)" || { fail "Manim not installed: pip install manim"; errors=$((errors+1)); }
suspicious bundled script suspicious bundled script ariffazil-AAA-f3ef7b7/agents/hermes-asi/runtime/skills/creative/manim-video/scripts/setup.sh :9 python3 -c "import manim" 2>/dev/null && ok "Manim $(manim --version 2>&1 | head -1)" || { fail "Manim not installed: pip install manim"; errors=$((errors+1)); }

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:ariffazil/AAA/badge.svg)](https://mcpobservatory.com/servers/github:ariffazil/AAA/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of ariffazil.

ariffazil/AAA

skills & prompt files 179

danger signals25

Navigate

Stream

Features

Display