MCP Observatory
1m ago Tracked 59,450 Last 1m ago 24h 2,448
github Go analyzed a7c8985 deep scan · partial (366/1,879 files)

clidey/whodb

github

Where data access meets operational intelligence

maintainer
clidey
licence
Apache-2.0
first seen
2026-07-16
last seen
2026-09-17
releases · 30d
2
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  2. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  3. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  4. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  5. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  6. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  7. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  8. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  9. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  10. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  11. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  12. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  13. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  14. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  15. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  16. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  17. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  18. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  19. HIGH code analysis flagged committed secret ×29 in clidey/whodb
  20. HIGH code analysis flagged committed secret ×29 in clidey/whodb
capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit a7c8985 · analyzer v33 · 1h ago

skills & prompt files 10

danger signals30

code evidence v0.127.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1181

filesystem 66

  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context-signals.mjs :19 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context.mjs :29 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/critique-storage.mjs :28 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detect-csp.mjs :28 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detect.mjs :3 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/cli/main.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/design-system.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/engines/browser/detect-url.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/engines/static-html/css-cascade.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/engines/static-html/detect-html.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/node/file-system.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/doctor.mjs :22 import fs from 'node:fs';
show 28 more
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/embed-prompt.mjs :17 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/generate-image.mjs :14 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/hook-admin.mjs :24 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/hook-before-edit.mjs :13 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/hook-lib.mjs :43 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/composition-catalog.mjs :2 import { readFileSync } from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/concept-catalog.mjs :2 import { readFileSync } from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/impeccable-config.mjs :18 import { existsSync, readFileSync, writeFileSync, mkdirSync, statSync } from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/impeccable-paths.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/is-generated.mjs :17 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/staleness-deep.mjs :15 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/staleness-notice.mjs :23 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/staleness.mjs :36 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/surface-briefs.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/template-extensions.mjs :15 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-accept.mjs :16 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-commit-manual-edits.mjs :25 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-complete.mjs :6 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-copy-edit-agent.mjs :11 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-inject.mjs :26 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-insert.mjs :10 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-manual-edit-evidence.mjs :11 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-server.mjs :19 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-wrap.mjs :14 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live.mjs :21 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live/browser-script-parts.mjs :1 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live/frameworks/detect-utils.mjs :9 import fs from 'node:fs';
  • fs (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live/frameworks/journal.mjs :29 import fs from 'node:fs';

26 more not shown — this panel samples each group; the count above is the real total.

shell / exec 17

  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context-signals.mjs :23 import { execFileSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context.mjs :30 import { spawnSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/generate-image.mjs :236 const { spawnSync } = await import('node:child_process');
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/is-generated.mjs :16 import { execSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/lib/staleness-deep.mjs :17 import { execFileSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-copy-edit-agent.mjs :10 import { spawn, spawnSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-poll.mjs :12 import { execFileSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-server.mjs :18 import { spawn, execFileSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live.mjs :20 import { execSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live/generation-preflight.mjs :1 import { execFile } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live/roots.mjs :30 import { execFileSync } from 'node:child_process';
  • shell (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/serve-question.mjs :80 import { spawn } from 'node:child_process';
show 5 more
  • shell clidey-whodb-a7c8985/cli/npm-package/packages/whodb-cli/lib/launch.js :3 const { spawn } = require('child_process');
  • shell (weak) clidey-whodb-a7c8985/frontend/scripts/run-analytics-tests.mjs :1 import { execFileSync } from 'node:child_process';
  • shell clidey-whodb-a7c8985/sdk/packages/typescript/src/auth.ts :1 import { execFile } from 'node:child_process';
  • shell clidey-whodb-a7c8985/sdk/tools/conformance-runner.mjs :8 import { spawn } from 'node:child_process';
  • shell clidey-whodb-a7c8985/sdk/tools/generate-core.mjs :12 import { execFileSync } from 'node:child_process';

network 26

  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/concept-seed.mjs :156 fetch(`${API_BASE}/roll?${params}`, { signal: controller.signal }),
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context-signals.mjs :20 import net from 'node:net';
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context.mjs :1007 const res = await fetch(`${UPDATE_HOST}/api/version`, { signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/detector/node/file-system.mjs :167 const res = await fetch(`http://localhost:${port}/`, { signal: controller.signal, redirect: 'follow' });
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/generate-image.mjs :216 const response = await fetch('https://api.openai.com/v1/images/generations', {
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-browser.js :3772 const res = await fetch('http://localhost:' + PORT + '/manual-edit-stash?token=' + encodeURIComponent(TOKEN), {
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-complete.mjs :91 const res = await fetch(`http://localhost:${info.port}/poll`, {
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-poll.mjs :25 // Node's built-in fetch (undici under the hood) enforces a 300s headers
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-server.mjs :16 import http from 'node:http';
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live-status.mjs :18 const res = await fetch(`http://localhost:${info.port}/status?token=${info.token}`);
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/live/roots.mjs :324 "const req = require('node:http').get({ host: '127.0.0.1', port: Number(process.argv[1]), path: '/status?token=' + encodeURIComponent(process.argv[2]), timeout: 1200 }, (res) => { res.resume(); proces
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/modern-screenshot.umd.js :7 tTimeout(()=>a.abort(),r):void 0;return fetch(t,D({signal:a.signal},i)).then(c=>{if(!c.ok)throw new Error("Failed fetch, not 2xx resp
show 14 more
  • net (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/serve-question.mjs :77 import http from 'node:http';
  • net (weak) clidey-whodb-a7c8985/frontend/e2e/support/helpers/test-utils.mjs :97 const response = await fetch('/api/query', {
  • net (weak) clidey-whodb-a7c8985/frontend/e2e/tests/features/schema-management.spec.mjs :94 const response = await fetch(`${window.location.origin}/api/query`, {
  • net clidey-whodb-a7c8985/frontend/src/components/hooks.tsx :58 const response = await fetch(withBasePath('/api/export'), {
  • net clidey-whodb-a7c8985/frontend/src/components/import-data.tsx :387 const response = await fetch(withBasePath("/api/query"), {
  • net clidey-whodb-a7c8985/frontend/src/config/graphql-client.ts :176 response = await fetch(uri, {
  • net clidey-whodb-a7c8985/frontend/src/pages/chat/chat.tsx :536 const response = await fetch(withBasePath('/api/ai-chat/stream'), {
  • net clidey-whodb-a7c8985/frontend/src/store/migrations.ts :372 const res = await fetch(withBasePath('/api/query'), {
  • net clidey-whodb-a7c8985/frontend/src/utils/graphql-upload.ts :50 const response = await fetch(withBasePath("/api/query"), {
  • net clidey-whodb-a7c8985/frontend/src/utils/platform-funnel.ts :109 const response = await fetch(PLATFORM_IMPORT_ENDPOINT, {
  • net clidey-whodb-a7c8985/sdk/packages/typescript/src/files.ts :38 const response = await fetch(`${this.options.host.replace(/\/$/, '')}/api/files/upload`, {
  • net clidey-whodb-a7c8985/sdk/packages/typescript/src/transport-http.ts :74 return fetch(`${this.options.host.replace(/\/$/, '')}/api/query`, {
  • net clidey-whodb-a7c8985/sdk/packages/typescript/src/transport-ipc.ts :17 import { request as httpRequest } from 'node:http';
  • net (weak) clidey-whodb-a7c8985/sdk/packages/typescript/test/transport-ipc.test.mjs :19 import { createServer } from 'node:http';

secrets 5

  • secrets (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/context.mjs :1278 if (!process.env.OPENAI_API_KEY) return;
  • secrets (weak) clidey-whodb-a7c8985/.agents/skills/impeccable/scripts/generate-image.mjs :201 const key = process.env.OPENAI_API_KEY;
  • secrets clidey-whodb-a7c8985/sdk/packages/typescript/src/client.ts :23 * const whodb = new WhoDB({ apiKey: process.env.WHODB_API_KEY, org: "acme", project: "growth" });
  • secrets clidey-whodb-a7c8985/sdk/packages/typescript/src/transport-ipc.ts :42 this.token = options.token ?? process.env.WHODB_IPC_TOKEN ?? '';
  • secrets clidey-whodb-a7c8985/sdk/tools/smoke.mjs :14 const apiKey = process.env.WHODB_API_KEY;

declared dependencies 200

  • github.com/modelcontextprotocol/go-sdk@v1.7.0
  • @apollo/client@4.2.12
  • @clidey/connparse@0.9.0
  • @clidey/ux@1.2.4
  • @codemirror/autocomplete@6.20.3
  • @codemirror/lang-json@6.0.2
  • @codemirror/lang-markdown@6.5.2
  • @codemirror/lang-sql@6.10.0
  • @codemirror/language@6.12.4
  • @codemirror/state@6.7.1
  • @codemirror/theme-one-dark@6.1.3
  • @codemirror/view@6.43.8
show 28 more
  • @dagrejs/dagre@3.1.1
  • @emotion/is-prop-valid@1.4.0
  • @heroicons/react@2.2.0
  • @microlink/react-json-view@1.31.28
  • @radix-ui/react-visually-hidden@1.2.11
  • @reduxjs/toolkit@2.12.0
  • @tailwindcss/vite@4.3.3
  • @types/react@19.2.18
  • @types/react-dom@19.2.4
  • classnames@2.5.1
  • codemirror@6.0.2
  • framer-motion@12.42.2
  • graphql@16.11.0
  • html-to-image@1.11.13
  • lodash@4.18.1
  • posthog-js@1.418.1
  • react@19.2.8
  • react-dom@19.2.8
  • react-markdown@10.1.0
  • react-redux@9.3.0
  • react-router-dom@7.18.2
  • reactflow@11.11.4
  • redux-persist@6.0.0
  • remark-gfm@4.0.1
  • rxjs@7.8.2
  • tailwind-merge@3.6.0
  • tailwindcss@4.3.3
  • uuid@14.0.1

160 more not shown — this panel samples each group; the count above is the real total.