github Python analyzed cbf47be deep scan · partial (337/3,781 files)

ariffazil/arifOS

[L0 CONSTITUTION] arifOS — constitutional MCP kernel. Law, identity, F1–F13, VAULT999. Judges but never executes. DITEMPA BUKAN DIBERI.

maintainer: ariffazil
licence: AGPL-3.0
first seen: 2026-06-01
last seen: 2026-09-11
releases · 30d: 0
short id

risk 51/100 · heuristic grade

C elevated inferred analyzer v33 (current)

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 12
trust mitigators mixed − 16

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 5d ago · see ecosystem CVEs →

risk trajectory 4 movements

4w ago C · 59 → C · 51
4w ago C · 52 → C · 59
11w ago C · 44 → C · 52
11w ago A · 0 → C · 44

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 4 findings · grade factor +12

high dangerous code

committed secret: Google API key · dynamic exec: __import__(), __import__ sink, unsafe yaml.load(), eval()/exec()
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call
medium dangerous code

env-secret-flows-to-network-py: An environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a key, call

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit cbf47be · analyzer v33 · 10h ago

skills & prompt files 46

danger signals24

dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/federation/constitution_aggregator.py :146 mod = __import__(cfg["health_module"], fromlist=[cfg["health_fn"]])
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/intelligence/tools/system_monitor.py :9 __import__("os").path.exists("/.dockerenv"),
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/runtime/capabilities.py :31 __import__(name)
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/runtime/governance_identity.py :143 SOVEREIGN_SIGNAL_PHRASES = __import__(
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/runtime/heart_substrate_hook.py :105 mod = sys.modules.get(name) or __import__(name, fromlist=["*"])
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/runtime/organ_attestation.py :251 if __import__("os").path.exists(p):
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/runtime/organ_attestation.py :289 mod = __import__(mod_name, fromlist=[fn_name])
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/runtime/rest_routes/observatory_routes.py :803 started_at = float(psutil.Process(__import__("os").getpid()).create_time())
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/runtime/rest_routes/rest_routes.py :3318 "software_release": __import__(
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/runtime/telemetry.py :186 env={**__import__("os").environ, "NATS_CONTEXT": "kabarkan"},
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/schemas/federation_envelope.py :578 freshness_max_age = int(__import__("os").getenv("ARIFOS_ENVELOPE_MAX_AGE_SECONDS", "1800"))
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/server.py :1185 if _p not in _sys_b.path and __import__("os").path.isdir(_p):
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/server.py :3060 __import__(f"arifosmcp.runtime.{mod}")
dynamic code execution __import__ sink ariffazil-arifOS-cbf47be/arifosmcp/tools/memory.py :91 base = __import__("os").environ.get("QDRANT_URL", "http://127.0.0.1:6333")
dynamic code execution __import__() ariffazil-arifOS-cbf47be/arifosmcp/tools/session.py :2049 __import__(
dynamic code execution unsafe yaml.load() ariffazil-arifOS-cbf47be/scripts/replicate_ci_governance.py :72 data = yaml.load(f)
dynamic code execution __import__() ariffazil-arifOS-cbf47be/tests/foundation/test_chapter6_upgrade.py :542 receipts=__import__(
dynamic code execution eval()/exec() ariffazil-arifOS-cbf47be/tests/runtime/test_no_embedded_credentials.py :259 exec(compile(block_src, f"<isolated:{func_name}>", "exec"), ns) # noqa: S102
dynamic code execution __import__() ariffazil-arifOS-cbf47be/tests/surface/test_runtime_status_enums.py :96 __import__(module_path)
dynamic code execution __import__() ariffazil-arifOS-cbf47be/tests/test_art_library.py :400 else __import__(name, *a, **kw)
suspicious endpoint api.telegram.org ariffazil-arifOS-cbf47be/arifosmcp/integrations/telegram_bridge.py :37 TELEGRAM_API_BASE = "https://api.telegram.org"
suspicious endpoint api.telegram.org ariffazil-arifOS-cbf47be/arifosmcp/runtime/governance_pipeline.py :269 url = f"https://api.telegram.org/bot{token}/sendMessage"
suspicious endpoint 169.254.169.254 (cloud metadata) ariffazil-arifOS-cbf47be/tests/runtime/test_a2a_b3_hardening.py :241 ("http://169.254.169.254/latest/meta-data", "private_ip_access"),
committed secret Google API key ariffazil-arifOS-cbf47be/docs/agents/laws/LAW_OF_FORGING_CONFIGURATION.md :86 AIzaSy…(39 chars, redacted)

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:ariffazil/arifos/badge.svg)](https://mcpobservatory.com/servers/github:ariffazil/arifos/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of ariffazil.

ariffazil/arifOS

skills & prompt files 46

danger signals24

Navigate

Stream

Features

Display