Public LiquiLens evidence and agent routing for bank risk, money markets, capital markets and revision-safe China economy research.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 3 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
financial_evidence_fetch
-
financial_evidence_route
-
financial_evidence_topics
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 80db0d5 · analyzer v33 · 6d ago
danger signals5
- dynamic code execution vm exec beepboop2025-liquilens-site-80db0d5/tests/test_developer_demo.mjs :37
vm.runInNewContext(script, context); - suspicious endpoint t.me beepboop2025-liquilens-site-80db0d5/go/telegram/app.js :48
var destination = "https://t.me/liquilens_crypto_bot?start=" + encodeURIComponent(start); - suspicious endpoint t.me beepboop2025-liquilens-site-80db0d5/start/acquisition.mjs :31
return `https://t.me/${bot}?start=social_${source}_${task}`; - suspicious endpoint t.me beepboop2025-liquilens-site-80db0d5/tests/test_social_acquisition.mjs :21
assert.equal(bot.origin, "https://t.me"); - suspicious endpoint t.me beepboop2025-liquilens-site-80db0d5/tests/test_x_bridge.mjs :227
assert.equal(destination.origin + destination.pathname, "https://t.me/liquilens_crypto_bot");
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 82
filesystem 4
- fs (weak) beepboop2025-liquilens-site-80db0d5/scripts/bind_catalog_candidate.mjs :3
import { appendFile, readFile, writeFile } from "node:fs/promises"; - fs (weak) beepboop2025-liquilens-site-80db0d5/tests/test_catalog_worker.mjs :2
import { readFile } from "node:fs/promises"; - fs (weak) beepboop2025-liquilens-site-80db0d5/tests/test_developer_demo.mjs :2
import {readFileSync} from "node:fs"; - fs (weak) beepboop2025-liquilens-site-80db0d5/tests/test_x_bridge.mjs :2
import { readFile } from "node:fs/promises";
network 19
- net beepboop2025-liquilens-site-80db0d5/access/app.js :5
fetch("https://api.liquilens.in/api/events", { - net beepboop2025-liquilens-site-80db0d5/access/sample/app.js :16
return fetch(url, {headers: {Accept: "application/json"}}).then(function (res) { - net beepboop2025-liquilens-site-80db0d5/ai-referral.js :41
fetch("https://api.liquilens.in/api/events", { - net beepboop2025-liquilens-site-80db0d5/authority-actions.js :9
function emit(root,action){var endpoint=root.getAttribute("data-event-endpoint"),surface=root.getAttribute("data-event-surface");if(!endpoint||!surface)return;fetch(endpoint,{method:"POST",headers:{"C - net beepboop2025-liquilens-site-80db0d5/banking/app.mjs :13
fetch("https://api.liquilens.in/api/events", {method: "POST", credentials: "omit", headers: {"Content-Type": "application/json"}, body: JSON.stringify({surface: "developers", event}), keepalive: true} - net beepboop2025-liquilens-site-80db0d5/desk/app.js :28
const response = await fetch(url, { headers: { Accept: "application/json" } }); - net beepboop2025-liquilens-site-80db0d5/developers/app.js :46
fetch("https://api.liquilens.in/api/events", { - net beepboop2025-liquilens-site-80db0d5/edge/catalog-worker.mjs :800
async fetch(request, env, ctx) { - net beepboop2025-liquilens-site-80db0d5/experience.js :150
fetch(source, { headers: { Accept: "application/json" } }) - net beepboop2025-liquilens-site-80db0d5/funnel.js :6
fetch("https://api.liquilens.in/api/events", { - net beepboop2025-liquilens-site-80db0d5/go/telegram/app.js :65
var request = fetch(API, { - net beepboop2025-liquilens-site-80db0d5/go/x/app.js :81
var request = fetch(API, {
show 7 more
- net beepboop2025-liquilens-site-80db0d5/pilot/app.js :5
fetch("https://api.liquilens.in/api/events", { - net beepboop2025-liquilens-site-80db0d5/protocol/trade-safety/app.js :14
fetch("https://api.liquilens.in/api/events", { - net beepboop2025-liquilens-site-80db0d5/start/app.mjs :18
return fetch("https://api.liquilens.in/api/events", {method: "POST", headers: {"Content-Type": "application/json"}, credentials: "omit", keepalive: true, - net (weak) beepboop2025-liquilens-site-80db0d5/tests/test_catalog_worker.mjs :16
const response = await worker.fetch( - net (weak) beepboop2025-liquilens-site-80db0d5/tests/test_developer_demo.mjs :25
async fetch(url, options = {}) { - net (weak) beepboop2025-liquilens-site-80db0d5/tests/test_financial_evidence_mcp.mjs :74
const initialized = await worker.fetch( - net beepboop2025-liquilens-site-80db0d5/tools/ews-coverage-check/app.js :14
fetch(EVENT_ENDPOINT, {
tool registrations 3
- financial_evidence_topics beepboop2025-liquilens-site-80db0d5/edge/catalog-worker.mjs :590
- financial_evidence_route beepboop2025-liquilens-site-80db0d5/edge/catalog-worker.mjs :602
- financial_evidence_fetch beepboop2025-liquilens-site-80db0d5/edge/catalog-worker.mjs :616
declared dependencies 4
- @modelcontextprotocol/server@2.0.0
- agents@0.21.0
- zod@4.4.3
- wrangler@4.130.0
perm:untrusted 1
- untrusted beepboop2025-liquilens-site-80db0d5/access/sample/app.js :16
return fetch(url, {headers: {Accept: "application/json"}}).then(function (res) {