MCP Observatory
2m ago Tracked 55,861 Last 2m ago 24h 2,736
github TypeScript analyzed fcdcbd2

black141312/ada

github

From-zero terminal coding agent: a key-holding OpenAI-compatible routing backend + a thin client with ~285 skills, MCP connectors, and ask/plan/auto modes. No build step.

maintainer
black141312
licence
MIT
first seen
2026-06-29
last seen
2026-09-07
releases · 30d
5
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in black141312/ada
  2. HIGH code analysis flagged committed secret in black141312/ada
  3. HIGH code analysis flagged committed secret in black141312/ada
  4. HIGH code analysis flagged committed secret in black141312/ada
  5. HIGH code analysis flagged committed secret in black141312/ada
  6. HIGH code analysis flagged committed secret in black141312/ada
  7. HIGH code analysis flagged committed secret in black141312/ada
  8. HIGH code analysis flagged committed secret in black141312/ada
  9. HIGH code analysis flagged committed secret in black141312/ada
  10. HIGH code analysis flagged committed secret in black141312/ada
  11. HIGH code analysis flagged committed secret in black141312/ada
  12. HIGH code analysis flagged committed secret in black141312/ada
  13. HIGH code analysis flagged committed secret in black141312/ada
  14. HIGH code analysis flagged committed secret in black141312/ada
  15. HIGH code analysis flagged committed secret in black141312/ada
  16. HIGH code analysis flagged committed secret in black141312/ada
  17. HIGH code analysis flagged committed secret in black141312/ada
  18. HIGH code analysis flagged committed secret in black141312/ada
  19. HIGH code analysis flagged committed secret in black141312/ada
  20. HIGH code analysis flagged committed secret in black141312/ada
capabilities 17 tools
transport stdio · http counts 17 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • bash
  • compact_now
  • context_status
  • edit_file
  • generate_pptx
  • glob
  • goal
  • grep
  • heartbeat
  • list_agents
  • ls
  • peek_agent
  • project_map
  • read_file
  • refine_note
  • send_agent_message
  • write_file
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit fcdcbd2 · analyzer v33 · 2d ago

skills & prompt files 40

danger signals1

code evidence vv0.16.4 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 149

filesystem 67

  • fs black141312-ada-fcdcbd2/bench/extraction.ts :29 import { rmSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/bench/memory.ts :24 import { rmSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/bench/swebench.mjs :18 import { appendFileSync, existsSync, mkdirSync, readFileSync, rmSync } from "node:fs";
  • fs (weak) black141312-ada-fcdcbd2/scripts/refresh-catalog.mjs :11 import { writeFileSync } from "node:fs";
  • fs (weak) black141312-ada-fcdcbd2/scripts/release.mjs :14 import { readFileSync } from "node:fs";
  • fs (weak) black141312-ada-fcdcbd2/scripts/sqlite-abi.mjs :17 import { copyFileSync, existsSync, mkdirSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/agent.ts :5 import { existsSync, mkdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/background.ts :10 import { existsSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/brain.ts :10 import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/bridge.ts :14 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/browser.ts :8 import { existsSync, mkdirSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/checkpoint.ts :4 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
show 28 more
  • fs black141312-ada-fcdcbd2/src/client/chrome-profiles.ts :9 import { existsSync, readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/cli.ts :6 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/docx.ts :6 import { readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/embed-index.ts :14 import { appendFileSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/extensions.ts :5 import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/graph.ts :15 import { mkdirSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/image.ts :3 import { existsSync, readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/live.ts :12 import { appendFileSync, mkdirSync, readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/mcp-oauth.ts :21 import { closeSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/mcp.ts :7 import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/memory-vec.ts :16 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/memory.ts :27 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/models-dev.ts :6 import { readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/pkg.ts :5 import { mkdirSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/platform.ts :4 import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/pptx.ts :7 import { readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/prompts.ts :5 import { existsSync, readdirSync, readFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/session.ts :9 import { appendFileSync, copyFileSync, existsSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/settings.ts :4 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/skills.ts :6 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/snapshot.ts :7 import { rmSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/telemetry.ts :4 import { appendFileSync, mkdirSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/tools.ts :6 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, statSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/uiux.ts :12 import { existsSync, readFileSync, readdirSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/client/worker.ts :15 import { copyFileSync, existsSync, mkdirSync, rmSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/clone-profile.ts :14 import { copyFileSync, cpSync, existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/selfcheck.ts :5 import { existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs black141312-ada-fcdcbd2/src/server/credentials.ts :5 import { chmodSync, mkdirSync, readFileSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";

27 more not shown — this panel samples each group; the count above is the real total.

shell / exec 21

  • shell black141312-ada-fcdcbd2/bench/swebench.mjs :17 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) black141312-ada-fcdcbd2/scripts/release.mjs :13 import { execFileSync, spawnSync } from "node:child_process";
  • shell (weak) black141312-ada-fcdcbd2/scripts/sqlite-abi.mjs :16 import { execFileSync } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/agent.ts :4 import { spawnSync } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/autostart.ts :6 import { spawn } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/browser.ts :7 import { execFileSync, spawn } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/cli.ts :4 import { spawnSync } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/mcp.ts :6 import { type ChildProcess, spawn } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/pkg.ts :4 import { spawnSync } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/platform.ts :3 import { spawnSync } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/snapshot.ts :6 import { spawnSync } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/client/tools.ts :3 import { spawnSync } from "node:child_process";
show 9 more
  • shell black141312-ada-fcdcbd2/src/client/worker.ts :14 import { execFileSync, spawn } from "node:child_process";
  • shell black141312-ada-fcdcbd2/src/selfcheck.ts :859 const { spawnSync } = await import("node:child_process");
  • shell black141312-ada-fcdcbd2/src/server/providers/subscription-oauth.ts :22 import { spawn } from "node:child_process";
  • shell (weak) black141312-ada-fcdcbd2/test/connector-flow.ts :26 const { spawn } = await import("node:child_process");
  • shell (weak) black141312-ada-fcdcbd2/test/ink-tui-smoke.mjs :6 const pty = spawn(process.platform === "win32" ? "npx.cmd" : "npx", ["tsx", "test/ink-tui-stub.mjs"], {
  • shell (weak) black141312-ada-fcdcbd2/test/login-label.ts :8 import { spawn } from "node:child_process";
  • shell (weak) black141312-ada-fcdcbd2/test/payload-bench.mjs :20 import { execSync } from "node:child_process";
  • shell (weak) black141312-ada-fcdcbd2/test/store-concurrent.ts :9 import { spawn } from "node:child_process";
  • shell (weak) black141312-ada-fcdcbd2/test/uiux-parity.mjs :9 import { execFileSync } from "node:child_process";

network 49

  • net black141312-ada-fcdcbd2/bench/extraction.ts :256 await fetch(`${base}/models`, { signal: AbortSignal.timeout(4000) });
  • net black141312-ada-fcdcbd2/extension/background.js :18 const r = await fetch(chrome.runtime.getURL("token.txt"));
  • net (weak) black141312-ada-fcdcbd2/scripts/refresh-catalog.mjs :33 const res = await fetch("https://models.dev/api.json", { signal: AbortSignal.timeout(20_000) });
  • net black141312-ada-fcdcbd2/src/browsercheck.ts :4 import { createServer } from "node:http";
  • net black141312-ada-fcdcbd2/src/client/bridge.ts :12 import { createServer, type IncomingMessage, type Server, type ServerResponse } from "node:http";
  • net black141312-ada-fcdcbd2/src/client/browser.ts :91 const r = await fetch(`${ORIGIN}/json/version`, { signal: AbortSignal.timeout(800) });
  • net black141312-ada-fcdcbd2/src/client/cli.ts :176 const r = await fetch(`${BACKEND}/providers`, { headers: { authorization: `Bearer ${clientKey()}` }, signal: AbortSignal.timeout(3000) });
  • net black141312-ada-fcdcbd2/src/client/embed-index.ts :133 const res = await fetch(`${BACKEND}/embeddings`, {
  • net black141312-ada-fcdcbd2/src/client/google-rest.ts :20 const r = await fetch(url, {
  • net black141312-ada-fcdcbd2/src/client/mcp-oauth.ts :20 import { createServer } from "node:http";
  • net black141312-ada-fcdcbd2/src/client/mcp.ts :73 fetch(url, {
  • net black141312-ada-fcdcbd2/src/client/models-dev.ts :51 const res = await fetch("https://models.dev/api.json", { signal: AbortSignal.timeout(10_000) });
show 28 more
  • net black141312-ada-fcdcbd2/src/client/skills.ts :51 const res = await fetch(url, { signal: AbortSignal.timeout(20_000) });
  • net black141312-ada-fcdcbd2/src/client/social-rest.ts :31 const r = await fetch(url, {
  • net black141312-ada-fcdcbd2/src/client/telemetry.ts :22 fetch(OTLP, { method: "POST", headers: { "content-type": "application/json" }, body: JSON.stringify(rec) }).catch(() => undefined);
  • net black141312-ada-fcdcbd2/src/client/tools.ts :1100 const res = await fetch(url, {
  • net black141312-ada-fcdcbd2/src/sdk/index.ts :115 const res = await fetch(`${url}/v1/prompt`, {
  • net black141312-ada-fcdcbd2/src/server/analytics-page.ts :205 r = await fetch('/v1/admin/analytics?days=' + days, { headers: { authorization: 'Bearer ' + key } });
  • net black141312-ada-fcdcbd2/src/server/identity.ts :15 const r = await fetch("https://api.github.com/user", {
  • net black141312-ada-fcdcbd2/src/server/index.ts :5 import { createServer, type Server } from "node:http";
  • net black141312-ada-fcdcbd2/src/server/kelviq.ts :23 const r = await fetch(`${BASE}${path}`, {
  • net black141312-ada-fcdcbd2/src/server/mcp-oauth-exchange.ts :136 const r = await fetch(endpoint, {
  • net black141312-ada-fcdcbd2/src/server/oauth.ts :50 const res = await fetch(url, {
  • net black141312-ada-fcdcbd2/src/server/oidc.ts :14 import { isIP } from "node:net";
  • net black141312-ada-fcdcbd2/src/server/providers/adapter.ts :10 import type { ServerResponse } from "node:http";
  • net black141312-ada-fcdcbd2/src/server/providers/anthropic.ts :423 const r = await fetch("https://api.anthropic.com/v1/models?limit=1000", {
  • net black141312-ada-fcdcbd2/src/server/providers/codex.ts :156 upstream = await fetch(`${PROVIDERS.chatgpt.baseURL}/responses`, {
  • net black141312-ada-fcdcbd2/src/server/providers/copilot-token.ts :26 const res = await fetch("https://api.github.com/copilot_internal/v2/token", {
  • net black141312-ada-fcdcbd2/src/server/providers/openai-compat.ts :165 upstream = await fetch(`${def.baseURL}/chat/completions`, {
  • net black141312-ada-fcdcbd2/src/server/providers/subscription-oauth.ts :21 import { createServer } from "node:http";
  • net black141312-ada-fcdcbd2/src/server/sse.ts :3 import type { ServerResponse } from "node:http";
  • net black141312-ada-fcdcbd2/src/server/upstream.ts :16 import type { IncomingMessage, ServerResponse } from "node:http";
  • net black141312-ada-fcdcbd2/src/worker/index.ts :68 upstream = await fetch(`${def.baseURL}/chat/completions`, {
  • net (weak) black141312-ada-fcdcbd2/test/anthropic-thinking.mjs :10 import { createServer } from "node:http";
  • net (weak) black141312-ada-fcdcbd2/test/bridge-recovery.mjs :7 import { createServer } from "node:http";
  • net (weak) black141312-ada-fcdcbd2/test/browse-agent.mjs :6 import { createServer } from "node:http";
  • net (weak) black141312-ada-fcdcbd2/test/callback-page.ts :8 const ok = await (await fetch(`${base}?code=abc&state=st4te`)).text();
  • net (weak) black141312-ada-fcdcbd2/test/connector-flow.ts :39 const first = await fetch(url, { method: "POST", body: "{}" });
  • net (weak) black141312-ada-fcdcbd2/test/delegated-vs-quiet.mjs :9 import { createServer } from "node:http";
  • net (weak) black141312-ada-fcdcbd2/test/exchange-routing.ts :15 import { createServer } from "node:http";

9 more not shown — this panel samples each group; the count above is the real total.

secrets 24

  • secrets black141312-ada-fcdcbd2/bench/extraction.ts :253 const client = new OpenAI({ baseURL: base, apiKey: process.env.ADA_CLIENT_KEY ?? "dev", maxRetries: 1 });
  • secrets black141312-ada-fcdcbd2/bench/memory.ts :220 const client = new OpenAI({ baseURL: process.env.ADA_BACKEND_URL ?? "http://localhost:8787/v1", apiKey: process.env.ADA_CLIENT_KEY ?? "dev", maxRetries: 1 });
  • secrets black141312-ada-fcdcbd2/src/client/cli.ts :67 return process.env.ADA_CLIENT_KEY ?? identityToken() ?? loadSettings(false).backendKey ?? "dev";
  • secrets black141312-ada-fcdcbd2/src/client/embed-index.ts :135 headers: { "content-type": "application/json", authorization: `Bearer ${process.env.ADA_CLIENT_KEY ?? "dev"}` },
  • secrets black141312-ada-fcdcbd2/src/client/mcp-oauth.ts :56 const raw = process.env.ADA_TOKEN_KEY;
  • secrets black141312-ada-fcdcbd2/src/client/tools.ts :1126 const key = process.env.BRAVE_API_KEY ?? process.env.ADA_BRAVE_API_KEY;
  • secrets black141312-ada-fcdcbd2/src/selfcheck.ts :1259 process.env.ZZ_API_KEY = "sekret";
  • secrets black141312-ada-fcdcbd2/src/server/auth.ts :16 if (process.env.GITHUB_CLIENT_ID && process.env.GITHUB_CLIENT_SECRET) {
  • secrets black141312-ada-fcdcbd2/src/server/config.ts :77 if (p === "copilot" && process.env.COPILOT_GITHUB_TOKEN) return true;
  • secrets black141312-ada-fcdcbd2/src/server/enterprise.ts :124 if (process.env.ADA_ADMIN_KEY) return true;
  • secrets black141312-ada-fcdcbd2/src/server/index.ts :698 if (kelviqEnabled() && process.env.KELVIQ_WEBHOOK_SECRET) {
  • secrets black141312-ada-fcdcbd2/src/server/kelviq.ts :11 const API_KEY = process.env.KELVIQ_API_KEY || "";
show 12 more
  • secrets black141312-ada-fcdcbd2/src/server/providers/copilot-token.ts :21 const direct = process.env.COPILOT_API_KEY;
  • secrets black141312-ada-fcdcbd2/src/server/upstream.ts :27 return { url, key: process.env.ADA_UPSTREAM_KEY || undefined };
  • secrets (weak) black141312-ada-fcdcbd2/test/anthropic-thinking.mjs :81 process.env.ANTHROPIC_API_KEY = "sk-ant-test";
  • secrets (weak) black141312-ada-fcdcbd2/test/connector-flow.ts :17 process.env.ADA_TOKEN_KEY = randomBytes(32).toString("base64");
  • secrets (weak) black141312-ada-fcdcbd2/test/device-page.ts :13 process.env.GITHUB_CLIENT_SECRET = "secret";
  • secrets (weak) black141312-ada-fcdcbd2/test/exchange-routing.ts :23 process.env.ADA_TOKEN_KEY = randomBytes(32).toString("base64");
  • secrets (weak) black141312-ada-fcdcbd2/test/login-label.ts :14 process.env.ADA_TOKEN_KEY = randomBytes(32).toString("base64");
  • secrets (weak) black141312-ada-fcdcbd2/test/oauth-exchange.ts :13 delete process.env.ADA_MCP_OAUTH_GOOGLE_CLIENT_SECRET;
  • secrets (weak) black141312-ada-fcdcbd2/test/server-client.ts :12 process.env.ADA_MCP_OAUTH_GOOGLE_CLIENT_SECRET = "GOCSPX-SERVER-ONLY";
  • secrets (weak) black141312-ada-fcdcbd2/test/store-concurrent.ts :53 process.env.ADA_TOKEN_KEY = KEY;
  • secrets (weak) black141312-ada-fcdcbd2/test/store-not-clobbered.ts :22 process.env.ADA_TOKEN_KEY = KEY;
  • secrets (weak) black141312-ada-fcdcbd2/test/token-encryption.ts :16 delete process.env.ADA_TOKEN_KEY;

database 7

  • db black141312-ada-fcdcbd2/src/client/graph.ts :12 import type Database from "better-sqlite3";
  • db black141312-ada-fcdcbd2/src/server/allowlist.ts :8 import type { Pool } from "pg";
  • db black141312-ada-fcdcbd2/src/server/analytics.ts :11 import type { Pool } from "pg";
  • db black141312-ada-fcdcbd2/src/server/billing.ts :13 import type { Pool } from "pg";
  • db black141312-ada-fcdcbd2/src/server/db.ts :19 import type Database from "better-sqlite3";
  • db black141312-ada-fcdcbd2/src/server/plans.ts :16 import type { Pool } from "pg";
  • db black141312-ada-fcdcbd2/src/server/usage.ts :12 import type { Pool } from "pg";

tool registrations 37

  • write_file black141312-ada-fcdcbd2/src/selfcheck.ts :41
  • edit_file black141312-ada-fcdcbd2/src/selfcheck.ts :43
  • read_file black141312-ada-fcdcbd2/src/selfcheck.ts :45
  • write_file black141312-ada-fcdcbd2/src/selfcheck.ts :49
  • edit_file black141312-ada-fcdcbd2/src/selfcheck.ts :50
  • read_file black141312-ada-fcdcbd2/src/selfcheck.ts :54
  • bash black141312-ada-fcdcbd2/src/selfcheck.ts :58
  • write_file black141312-ada-fcdcbd2/src/selfcheck.ts :77
  • grep black141312-ada-fcdcbd2/src/selfcheck.ts :78
  • ls black141312-ada-fcdcbd2/src/selfcheck.ts :80
  • glob black141312-ada-fcdcbd2/src/selfcheck.ts :82
  • write_file black141312-ada-fcdcbd2/src/selfcheck.ts :86
show 25 more
  • read_file black141312-ada-fcdcbd2/src/selfcheck.ts :87
  • write_file black141312-ada-fcdcbd2/src/selfcheck.ts :91
  • edit_file black141312-ada-fcdcbd2/src/selfcheck.ts :92
  • read_file black141312-ada-fcdcbd2/src/selfcheck.ts :100
  • write_file black141312-ada-fcdcbd2/src/selfcheck.ts :105
  • edit_file black141312-ada-fcdcbd2/src/selfcheck.ts :106
  • read_file black141312-ada-fcdcbd2/src/selfcheck.ts :108
  • generate_pptx black141312-ada-fcdcbd2/src/selfcheck.ts :115
  • generate_pptx black141312-ada-fcdcbd2/src/selfcheck.ts :129
  • generate_pptx black141312-ada-fcdcbd2/src/selfcheck.ts :131
  • project_map black141312-ada-fcdcbd2/src/selfcheck.ts :509
  • list_agents black141312-ada-fcdcbd2/src/selfcheck.ts :1368
  • peek_agent black141312-ada-fcdcbd2/src/selfcheck.ts :1371
  • peek_agent black141312-ada-fcdcbd2/src/selfcheck.ts :1373
  • send_agent_message black141312-ada-fcdcbd2/src/selfcheck.ts :1376
  • send_agent_message black141312-ada-fcdcbd2/src/selfcheck.ts :1379
  • goal black141312-ada-fcdcbd2/src/selfcheck.ts :1384
  • goal black141312-ada-fcdcbd2/src/selfcheck.ts :1386
  • goal black141312-ada-fcdcbd2/src/selfcheck.ts :1388
  • context_status black141312-ada-fcdcbd2/src/selfcheck.ts :1391
  • compact_now black141312-ada-fcdcbd2/src/selfcheck.ts :1393
  • heartbeat black141312-ada-fcdcbd2/src/selfcheck.ts :1397
  • heartbeat black141312-ada-fcdcbd2/src/selfcheck.ts :1399
  • heartbeat black141312-ada-fcdcbd2/src/selfcheck.ts :1401
  • refine_note black141312-ada-fcdcbd2/src/selfcheck.ts :1415

install hooks 1

  • postinstall black141312-ada-fcdcbd2/package.json :59 node scripts/sqlite-abi.mjs || exit 0

declared dependencies 18

  • @anthropic-ai/sdk@^0.106.0
  • @huggingface/transformers@^4.2.0
  • better-auth@^1.6.23
  • better-sqlite3@^12.11.1
  • ink@^7.1.1
  • ink-text-input@^6.0.0
  • openai@^6.45.0
  • pg@^8.22.0
  • react@^19.2.8
  • tsx@^4.22.4
  • @cloudflare/workers-types@^4.20260702.1
  • @types/better-sqlite3@^7.6.13
show 6 more
  • @types/node@^26.0.1
  • @types/pg@^8.20.0
  • @types/react@^19.2.17
  • typescript@^6.0.3
  • node-pty@^1.1.0
  • sharp@^0.35.3

clipboard 1

  • clipboard shell call black141312-ada-fcdcbd2/src/client/platform.ts :37 ? [["pbpaste", []]]

obfuscation 2

  • dynamic require()/import() black141312-ada-fcdcbd2/test/session-store.mjs :22 const freshModule = () => import(`${SRC}?load=${++loads}`);
  • dynamic require()/import() black141312-ada-fcdcbd2/test/store-concurrent.ts :26 const { setAuth } = await import(${JSON.stringify(new URL("../src/client/mcp-oauth.ts", import.meta.url).href)});

perm:untrusted 3

  • untrusted black141312-ada-fcdcbd2/src/client/browser.ts :331 const list = (await (await fetch(`${ORIGIN}/json/list`)).json()) as Target[];
  • untrusted (weak) black141312-ada-fcdcbd2/test/callback-page.ts :8 const ok = await (await fetch(`${base}?code=abc&state=st4te`)).text();
  • untrusted (weak) black141312-ada-fcdcbd2/test/login-label.ts :33 const page = await (await fetch(`${redirect.origin}/callback?code=x&state=${encodeURIComponent(state)}`)).text();