github JavaScript analyzed d61f82e

brettchien/katashiro

Chrome Side Panel companion for OpenAB — a multi-agent chatroom with in-browser control for agents via MCP-over-ACP.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit d61f82e · analyzer v33 · 1w ago

dynamic code execution new Function() brettchien-katashiro-d61f82e/test/markdown.test.js :15 new Function(fs.readFileSync(path.join(__dirname, f), "utf8")).call(globalThis);

code evidence vv2.2.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 15

fs (weak) brettchien-katashiro-d61f82e/test/markdown.test.js :9 const fs = require("node:fs");

net brettchien-katashiro-d61f82e/sidepanel.js :259 fetch(httpUrl, { method: "GET" })