Local-first technical flow explorer with versioned graph context for developers and coding agents.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 45bb088 · analyzer v33 · 2w ago
skills & prompt files 1
danger signals1
- dynamic code execution new Function() badsleepyday-flopeek-core-45bb088/test/unit/viewer-live-renderer.test.js :14
return new Function(`${source.slice(start, end)}\nreturn { synchronizeCytoscape, focusRenderedView };`)();
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 225
filesystem 126
- fs (weak) badsleepyday-flopeek-core-45bb088/scripts/capture-doc-screenshot.js :3
const fs = require("node:fs"); - fs (weak) badsleepyday-flopeek-core-45bb088/scripts/check-document-contracts.js :3
const fs = require("node:fs"); - fs (weak) badsleepyday-flopeek-core-45bb088/scripts/generate-doc-assets.js :3
const fs = require("node:fs"); - fs (weak) badsleepyday-flopeek-core-45bb088/scripts/generate-support.js :3
const fs = require("fs"); - fs (weak) badsleepyday-flopeek-core-45bb088/scripts/verify-core-baseline.js :4
const fs = require("node:fs"); - fs (weak) badsleepyday-flopeek-core-45bb088/scripts/viewer-cancellation-fixture.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/active-branch-git-evidence.js :1
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/agent-comparison.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/agent-evidence-trace.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/agent-integration.js :2
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/agent-semantic-proposal.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/artifact-cache.js :4
const fs = require("node:fs");
show 28 more
- fs badsleepyday-flopeek-core-45bb088/src/clean-room-package.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/cli.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/continuation-checkpoint.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/core-compatibility.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/csharp-adapter.js :2
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/delivery-graph.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/durable-brief.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/flow-verification.js :2
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/git-context-continuity.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/git-metadata.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/github-release-approval.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/go-adapter.js :2
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/graph-cache.js :1
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/graph-state.js :2
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/handoff-quality-benchmark.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/handoff-workspace.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/helper-process-matrix.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/history.js :1
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/mcp.js :1
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/npm-publication-approval.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/orientation-benchmark.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/package-policy.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/plan-reconciliation.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/planned-overlay.js :4
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/product-proof.js :3
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/project-identity.js :1
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/real-repository-corpus.js :1
const fs = require("node:fs"); - fs badsleepyday-flopeek-core-45bb088/src/related-implementations.js :1
const fs = require("node:fs");
86 more not shown — this panel samples each group; the count above is the real total.
shell / exec 42
- shell (weak) badsleepyday-flopeek-core-45bb088/scripts/capture-doc-screenshot.js :6
const { spawn } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/scripts/run-tests.js :3
const { spawnSync } = require("child_process"); - shell badsleepyday-flopeek-core-45bb088/src/active-branch-git-evidence.js :2
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/benchmark.js :2
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/clean-room-package.js :7
const { spawnSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/cli.js :5
const { execFile } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/continuation-divergence.js :3
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/csharp-adapter.js :5
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/git-metadata.js :5
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/github-release-approval.js :3
const childProcess = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/go-adapter.js :5
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/graph-state.js :4
const { execFileSync } = require("node:child_process");
show 28 more
- shell badsleepyday-flopeek-core-45bb088/src/helper-process-matrix.js :11
try { require("node:child_process").execFileSync(command, [command.includes("dotnet") ? "--info" : "version"], { stdio: "ignore" }); return true; } catch { return false; } - shell badsleepyday-flopeek-core-45bb088/src/history.js :4
const { execFileSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/package-policy.js :5
const { spawnSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/real-repository-corpus.js :3
const { execFileSync, spawnSync } = require("node:child_process"); - shell badsleepyday-flopeek-core-45bb088/src/scanner.js :3
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/scanner.test.js :6
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/showcase.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/active-branch-git-evidence.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/agent-bootstrap.test.js :2
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/agent-comparison.test.js :6
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/agent-integration.test.js :5
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/bounded-scan.test.js :7
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/branch-name-policy.test.js :5
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/continuation-divergence.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/continuation-surfaces.test.js :7
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/delivery-surfaces.test.js :7
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/documentation-assets.test.js :6
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/fixture-cache-hygiene.test.js :5
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/git-context-continuity.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/orientation-benchmark.test.js :7
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/package-policy.test.js :5
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/plan-reconciliation-surfaces.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/planned-overlay-surfaces.test.js :7
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/product-proof.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/production-entry-surfaces.test.js :4
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/related-implementations.test.js :7
const { execFileSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/repository-discovery.test.js :7
const { spawnSync } = require("node:child_process"); - shell (weak) badsleepyday-flopeek-core-45bb088/test/unit/runner-adapter-integration.test.js :4
const { spawn } = require("node:child_process");
2 more not shown — this panel samples each group; the count above is the real total.
network 20
- net (weak) badsleepyday-flopeek-core-45bb088/examples/commerce-showcase/src/payments/provider.ts :2
return fetch("https://payments.example/authorize", { - net badsleepyday-flopeek-core-45bb088/public/app.js :41
const response = await fetch(url, options); - net (weak) badsleepyday-flopeek-core-45bb088/scripts/capture-doc-screenshot.js :150
const pageResponse = await fetch(`http://127.0.0.1:${port}/json/new?about%3Ablank`, { method: "PUT" }); - net badsleepyday-flopeek-core-45bb088/src/server.js :2
const http = require("node:http"); - net badsleepyday-flopeek-core-45bb088/src/workspace-server.js :5
const http = require("node:http"); - net (weak) badsleepyday-flopeek-core-45bb088/test/contracts/adapter-capability-contract.test.js :21
const response = await fetch(`http://127.0.0.1:${app.port}/api/capabilities`); - net (weak) badsleepyday-flopeek-core-45bb088/test/fixtures/next-request-flow/src/components/HealthPanel.tsx :2
return fetch("/api/health"); - net (weak) badsleepyday-flopeek-core-45bb088/test/fixtures/runner-adapter-repository/test/flow-contract.test.js :20
const response = await fetch(configuration.endpoint, { - net (weak) badsleepyday-flopeek-core-45bb088/test/scanner.test.js :3
const net = require("node:net"); - net (weak) badsleepyday-flopeek-core-45bb088/test/showcase.test.js :25
const response = await fetch(`${baseUrl}/api/view?mode=overview&scope=application`); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/active-branch-git-evidence.test.js :107
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/active-branch-git-evidence?contextRef=${encodeURIComponent(contextRef)}&limit=2`)).json(); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/cache-hygiene-surfaces.test.js :31
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/cache-hygiene`)).json();
show 8 more
- net (weak) badsleepyday-flopeek-core-45bb088/test/unit/continuation-surfaces.test.js :27
const response = await fetch(`${baseUrl}${pathname}`, { - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/delivery-surfaces.test.js :22
const response = await fetch(`${baseUrl}${pathname}`, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(body) }); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/git-context-continuity.test.js :76
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/git-context-continuity?contextRef=${encodeURIComponent(contextRef)}&from=${fixture.before}&to=${fixture.after}`)).json(); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/plan-reconciliation-surfaces.test.js :69
const response = await fetch(`${baseUrl}${pathname}`, { method: "POST", headers: { "content-type": "application/json", ...headers }, body: JSON.stringify(body) }); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/planned-overlay-surfaces.test.js :28
const response = await fetch(`${baseUrl}${pathname}`, { - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/semantic-zoom.test.js :79
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/view?level=feature&focus=${encodeURIComponent(domain.id)}`)).json(); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/serve-workspace.test.js :65
const firstHealth = await (await fetch(`http://127.0.0.1:${first.port}/api/health`)).json(); - net (weak) badsleepyday-flopeek-core-45bb088/test/unit/workspace-server.test.js :5
const http = require("node:http");
database 2
- db (weak) badsleepyday-flopeek-core-45bb088/examples/commerce-showcase/src/orders/repository.ts :1
import { PrismaClient } from "@prisma/client"; - db (weak) badsleepyday-flopeek-core-45bb088/test/scanner.test.js :958
write(root, "src/orders.ts", "import { PrismaClient } from '@prisma/client';\nimport { Queue } from 'bullmq';\nconst prisma = new PrismaClient();\nconst orders = new Queue('orders');\nexport function
install hooks 1
- prepublishOnly badsleepyday-flopeek-core-45bb088/package.json :103
npm run verify:npm-publication
declared dependencies 11
- @modelcontextprotocol/sdk@^1.29.0
- @lezer/python@^1.1.19
- cytoscape@^3.34.0
- cytoscape-dagre@^4.0.0
- php-parser@^3.7.0
- svelte@^5.56.4
- tree-sitter@^0.21.1
- tree-sitter-java@^0.23.5
- tree-sitter-rust@^0.21.0
- typescript@^5.9.3
- zod@^4.4.3
perm:untrusted 12
- untrusted (weak) badsleepyday-flopeek-core-45bb088/test/scanner.test.js :409
const catalog = await (await fetch(`${baseUrl}/api/entry-flows?query=serve`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/showcase.test.js :94
const page = await (await fetch(instance.url)).text(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/active-branch-git-evidence.test.js :107
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/active-branch-git-evidence?contextRef=${encodeURIComponent(contextRef)}&limit=2`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/cache-hygiene-surfaces.test.js :31
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/cache-hygiene`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/continuation-surfaces.test.js :63
const initial = await (await fetch(`${baseUrl}/api/continuation-checkpoints`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/delivery-surfaces.test.js :34
const workflows = await (await fetch(`${baseUrl}/api/workflows`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/git-context-continuity.test.js :76
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/git-context-continuity?contextRef=${encodeURIComponent(contextRef)}&from=${fixture.before}&to=${fixture.after}`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/plan-reconciliation-surfaces.test.js :109
const http = await (await fetch(`${baseUrl}/api/plan-reconciliations?planRef=${encodeURIComponent(planRef)}`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/planned-overlay-surfaces.test.js :98
const graph = await (await fetch(`${baseUrl}/api/graph`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/semantic-zoom.test.js :79
const http = await (await fetch(`http://127.0.0.1:${app.port}/api/view?level=feature&focus=${encodeURIComponent(domain.id)}`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/serve-workspace.test.js :65
const firstHealth = await (await fetch(`http://127.0.0.1:${first.port}/api/health`)).json(); - untrusted (weak) badsleepyday-flopeek-core-45bb088/test/unit/workspace-server.test.js :46
const health = await (await fetch(`http://127.0.0.1:${hubPort}/api/health`)).json();