[L3 ASSET] arif-fazil.com — Unified federation web surface. One domain, many organs. Satu domain, banyak organ, tetap bersempadan.
- capability exposure inferred + 26
- tool safety inferred + 17
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 6d ago · see ecosystem CVEs →
- C · 38 → C · 43
- B · 26 → C · 38
- B · 22 → B · 26
No known CVEs for this server.
- high dangerous code
committed secret: Google API key · dynamic exec: new Function()
- medium toxic flow (lethal trifecta)
lethal trifecta reachable across this server's tool + source surface: private-data access + untrusted-content ingestion + network exfil (a leg is proven only in the analyzed source)
analyzed commit ee1e448 · analyzer v33 · 5d ago
skills & prompt files 10
- agent-rules ariffazil-arif-fazil.com-ee1e448/.github/copilot-instructions.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/AGENTS.md
- skill ariffazil-arif-fazil.com-ee1e448/_legacy/SKILL.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/arif-fazil-wiki/AGENTS.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/arif-fazil-wiki/CLAUDE.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/content/wiki/CLAUDE.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/AGENTS.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/CLAUDE.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/aaa/AGENTS.md
- agent-rules ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/arifos/AGENTS.md
danger signals8
- dynamic code execution new Function() ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/geox/cesium/Workers/transcodeKTX2.js :26
"_"+e:e}function Ze(e,t){return e=qe(e),new Function("body","return function "+e+`() { - dynamic code execution new Function() ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/geox/cockpit/cesium/Workers/transcodeKTX2.js :26
"_"+e:e}function Ze(e,t){return e=qe(e),new Function("body","return function "+e+`() { - suspicious endpoint t.me ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/public/_shared/trinity-nav.js :23
{ href: 'https://t.me/arifos', label: 'HERMES', cls: 'hermes', emoji: '⚛' }, - suspicious endpoint t.me ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/scripts/generate-discovery.cjs :211
- **Telegram**: https://t.me/ariffazil - suspicious endpoint t.me ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/src/components/ArrowFooter.tsx :56
href="https://t.me/ariffazil" - suspicious endpoint t.me ariffazil-arif-fazil.com-ee1e448/sites/arif-fazil.com/src/data/siteContent.ts :206
{ label: 'Telegram / ariffazil', href: 'https://t.me/ariffazil', external: true }, - suspicious endpoint t.me ariffazil-arif-fazil.com-ee1e448/sites/shared/trinity-nav.js :23
{ href: 'https://t.me/arifos', label: 'HERMES', cls: 'hermes', emoji: '⚛' }, - committed secret Google API key ariffazil-arif-fazil.com-ee1e448/specs/SPATIAL_INTELLIGENCE_STATE_MAP.md :29
AIzaSy…(39 chars, redacted)
[](https://mcpobservatory.com/servers/github:ariffazil/arif-sites/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of ariffazil.