Where data access meets operational intelligence
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×30 in clidey/whodb
- HIGH code analysis flagged committed secret ×29 in clidey/whodb
- HIGH code analysis flagged committed secret ×29 in clidey/whodb
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 42bcb57 · analyzer v28 · 2d ago
skills & prompt files 10
- skill clidey-whodb-42bcb57/.agents/skills/impeccable/SKILL.md
- agent-rules clidey-whodb-42bcb57/AGENTS.md
- agent-rules clidey-whodb-42bcb57/CLAUDE.md
- skill clidey-whodb-42bcb57/cli/external-plugin/openai-skills/whodb/SKILL.md
- skill clidey-whodb-42bcb57/cli/external-plugin/whodb/skills/query-builder/SKILL.md
- skill clidey-whodb-42bcb57/cli/external-plugin/whodb/skills/schema-designer/SKILL.md
- skill clidey-whodb-42bcb57/cli/external-plugin/whodb/skills/whodb/SKILL.md
- skill clidey-whodb-42bcb57/cli/skills/query-builder/SKILL.md
- skill clidey-whodb-42bcb57/cli/skills/schema-designer/SKILL.md
- skill clidey-whodb-42bcb57/cli/skills/whodb/SKILL.md
danger signals30
- committed secret private key clidey-whodb-42bcb57/core/src/common/ssl/tls_test.go :58
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/clickhouse/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/cockroachdb/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/elasticsearch/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/mariadb/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/memcached/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/mongodb/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/mysql/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/postgres/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/ca/redis/ca-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/clickhouse/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/cockroachdb/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/elasticsearch/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/mariadb/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/memcached/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/mongodb/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/mysql/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/postgres/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/client/redis/client-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/clickhouse/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/cockroachdb/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/elasticsearch/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/mariadb/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/memcached/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/mongodb/mongodb.pem :25
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/mongodb/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/mysql/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/postgres/server-key.pem :1
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/redis/redis.pem :25
PEM private key block (redacted) - committed secret private key clidey-whodb-42bcb57/dev/certs/server/redis/server-key.pem :1
PEM private key block (redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 999
filesystem 1
- fs clidey-whodb-42bcb57/dev/translate/translate.mjs :17
import { readFileSync, writeFileSync, existsSync, unlinkSync } from 'fs';
network 7
- net clidey-whodb-42bcb57/frontend/src/components/hooks.tsx :58
const response = await fetch(withBasePath('/api/export'), { - net clidey-whodb-42bcb57/frontend/src/components/import-data.tsx :387
const response = await fetch(withBasePath("/api/query"), { - net clidey-whodb-42bcb57/frontend/src/config/graphql-client.ts :176
response = await fetch(uri, { - net clidey-whodb-42bcb57/frontend/src/pages/chat/chat.tsx :536
const response = await fetch(withBasePath('/api/ai-chat/stream'), { - net clidey-whodb-42bcb57/frontend/src/store/migrations.ts :371
const res = await fetch(withBasePath('/api/query'), { - net clidey-whodb-42bcb57/frontend/src/utils/graphql-upload.ts :50
const response = await fetch(withBasePath("/api/query"), { - net clidey-whodb-42bcb57/frontend/src/utils/platform-funnel.ts :83
const response = await fetch(PLATFORM_IMPORT_ENDPOINT, {
declared dependencies 200
- github.com/modelcontextprotocol/go-sdk@v1.7.0
- @apollo/client@4.2.7
- @clidey/connparse@0.8.0
- @clidey/ux@1.1.1
- @codemirror/autocomplete@6.20.3
- @codemirror/lang-json@6.0.2
- @codemirror/lang-markdown@6.5.1
- @codemirror/lang-sql@6.10.0
- @codemirror/language@6.12.4
- @codemirror/state@6.7.1
- @codemirror/theme-one-dark@6.1.3
- @codemirror/view@6.43.6
- @dagrejs/dagre@3.0.0
- @emotion/is-prop-valid@1.4.0
- @heroicons/react@2.2.0
- @microlink/react-json-view@1.31.23
- @radix-ui/react-visually-hidden@1.2.8
- @reduxjs/toolkit@2.12.0
- @tailwindcss/vite@4.3.3
- @types/react@19.2.17
- @types/react-dom@19.2.3
- classnames@2.5.1
- codemirror@6.0.2
- framer-motion@12.42.2
- graphql@16.11.0
- html-to-image@1.11.13
- lodash@4.18.1
- posthog-js@1.406.0
- react@19.2.7
- react-dom@19.2.7
- react-markdown@10.1.0
- react-redux@9.3.0
- react-router-dom@7.18.1
- reactflow@11.11.4
- redux-persist@6.0.0
- remark-gfm@4.0.1
- rxjs@7.8.2
- tailwind-merge@3.6.0
- tailwindcss@4.3.3
- uuid@14.0.1
- @axe-core/playwright@4.12.1
- @graphql-codegen/cli@7.2.0
- @graphql-codegen/typed-document-node@7.1.0
- @graphql-codegen/typescript@6.1.0
- @graphql-codegen/typescript-operations@6.1.1
- @graphql-typed-document-node/core@3.2.0
- @lhci/cli@0.15.1
- @oxlint/migrate@1.73.0
- @playwright/test@1.61.1
- @types/lodash@4.17.24
- @vitejs/plugin-react@6.0.3
- baseline-browser-mapping@2.11.0
- js-yaml@5.2.1
- nyc@18.0.0
- oxlint@1.74.0
- oxlint-tsgolint@7.0.2001
- typescript@6.0.3
- vite@8.1.5
- vite-plugin-istanbul@9.0.1
- charm.land/bubbles/v2@v2.1.1
- charm.land/bubbletea/v2@v2.0.8
- charm.land/lipgloss/v2@v2.0.5
- github.com/charmbracelet/colorprofile@v0.4.3
- github.com/charmbracelet/x/ansi@v0.11.7
- github.com/clidey/whodb/core@v0.0.0
- github.com/google/uuid@v1.6.0
- github.com/hashicorp/go-version@v1.9.0
- github.com/jackc/pgx/v5@v5.10.0
- github.com/sahilm/fuzzy@v0.1.3
- github.com/spf13/cobra@v1.10.2
- github.com/spf13/viper@v1.21.0
- github.com/vektah/gqlparser/v2@v2.5.36
- github.com/xuri/excelize/v2@v2.11.0
- github.com/zalando/go-keyring@v0.2.8
- go.yaml.in/yaml/v3@v3.0.5
- golang.org/x/crypto@v0.54.0
- golang.org/x/oauth2@v0.36.0
- golang.org/x/sync@v0.22.0
- golang.org/x/term@v0.45.0
- cloud.google.com/go@v0.123.0
- cloud.google.com/go/alloydb@v1.28.0
- cloud.google.com/go/auth@v0.20.0
- cloud.google.com/go/auth/oauth2adapt@v0.2.8
- cloud.google.com/go/compute/metadata@v0.9.0
- cloud.google.com/go/longrunning@v1.2.0
- cloud.google.com/go/memcache@v1.17.0
- cloud.google.com/go/redis@v1.25.0
- filippo.io/edwards25519@v1.2.0
- github.com/99designs/gqlgen@v0.17.94
- github.com/Azure/azure-sdk-for-go/sdk/azcore@v1.22.0
- github.com/Azure/azure-sdk-for-go/sdk/azidentity@v1.14.0
- github.com/Azure/azure-sdk-for-go/sdk/internal@v1.12.0
- github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/cosmos/armcosmos/v3@v3.4.0
- github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/mysql/armmysqlflexibleservers@v1.2.0
- github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/postgresql/armpostgresqlflexibleservers@v1.1.0
- github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/redis/armredis@v1.0.0
- github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armsubscriptions@v1.3.0
- github.com/AzureAD/microsoft-authentication-library-for-go@v1.7.2
- github.com/ClickHouse/ch-go@v0.73.0
- github.com/ClickHouse/clickhouse-go/v2@v2.47.0
- github.com/agnivade/levenshtein@v1.2.1
- github.com/andybalholm/brotli@v1.2.1
- github.com/apache/arrow-go/v18@v18.5.2
- github.com/atotto/clipboard@v0.1.4
- github.com/aws/aws-sdk-go-v2@v1.43.0
- github.com/aws/aws-sdk-go-v2/config@v1.32.31
- github.com/aws/aws-sdk-go-v2/credentials@v1.19.30
- github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.18.31
- github.com/aws/aws-sdk-go-v2/feature/rds/auth@v1.6.30
- github.com/aws/aws-sdk-go-v2/internal/configsources@v1.4.31
- github.com/aws/aws-sdk-go-v2/internal/endpoints/v2@v2.7.31
- github.com/aws/aws-sdk-go-v2/internal/v4a@v1.4.32
- github.com/aws/aws-sdk-go-v2/service/docdb@v1.50.1
- github.com/aws/aws-sdk-go-v2/service/elasticache@v1.55.1
- github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding@v1.13.13
- github.com/aws/aws-sdk-go-v2/service/internal/presigned-url@v1.13.31
- github.com/aws/aws-sdk-go-v2/service/opensearch@v1.74.1
- github.com/aws/aws-sdk-go-v2/service/rds@v1.122.0
- github.com/aws/aws-sdk-go-v2/service/signin@v1.5.0
- github.com/aws/aws-sdk-go-v2/service/sso@v1.33.0
- github.com/aws/aws-sdk-go-v2/service/ssooidc@v1.38.0
- github.com/aws/aws-sdk-go-v2/service/sts@v1.45.0
- github.com/aws/smithy-go@v1.27.5
- github.com/boundaryml/baml@v0.223.0
- github.com/brianvoe/gofakeit/v7@v7.15.0
- github.com/cespare/xxhash/v2@v2.3.0
- github.com/charmbracelet/ultraviolet@v0.0.0-20260703014108-f5a850f9c2b7
- github.com/charmbracelet/x/term@v0.2.2
- github.com/charmbracelet/x/termios@v0.1.1
- github.com/charmbracelet/x/windows@v0.2.2
- github.com/clipperhouse/displaywidth@v0.11.0
- github.com/clipperhouse/uax29/v2@v2.7.0
- github.com/danieljoos/wincred@v1.2.3
- github.com/deckarep/golang-set/v2@v2.9.0
- github.com/dromara/carbon/v2@v2.6.16
- github.com/duckdb/duckdb-go-bindings@v0.10504.0
- github.com/duckdb/duckdb-go-bindings/lib/darwin-amd64@v0.10504.0
- github.com/duckdb/duckdb-go-bindings/lib/darwin-arm64@v0.10504.0
- github.com/duckdb/duckdb-go-bindings/lib/linux-amd64@v0.10504.0
- github.com/duckdb/duckdb-go-bindings/lib/linux-arm64@v0.10504.0
- github.com/duckdb/duckdb-go-bindings/lib/windows-amd64@v0.10504.0
- github.com/duckdb/duckdb-go/v2@v2.10504.0
- github.com/elastic/elastic-transport-go/v8@v8.11.0
- github.com/elastic/go-elasticsearch/v9@v9.4.2
- github.com/felixge/httpsnoop@v1.0.4
- github.com/fsnotify/fsnotify@v1.9.0
- github.com/go-faster/city@v1.0.1
- github.com/go-faster/errors@v0.7.1
- github.com/go-logr/logr@v1.4.3
- github.com/go-logr/stdr@v1.2.2
- github.com/go-sql-driver/mysql@v1.10.0
- github.com/go-viper/mapstructure/v2@v2.5.0
- github.com/goccy/go-json@v0.10.6
- github.com/godbus/dbus/v5@v5.2.2
- github.com/golang-jwt/jwt/v5@v5.3.1
- github.com/google/flatbuffers@v25.12.19+incompatible
- github.com/google/jsonschema-go@v0.4.3
- github.com/google/s2a-go@v0.1.9
- github.com/googleapis/enterprise-certificate-proxy@v0.3.18
- github.com/googleapis/gax-go/v2@v2.23.0
- github.com/hashicorp/golang-lru/v2@v2.0.7
- github.com/inconshreveable/mousetrap@v1.1.0
- github.com/jackc/pgpassfile@v1.0.0
- github.com/jackc/pgservicefile@v0.0.0-20240606120523-5a60cdf6a761
- github.com/jackc/puddle/v2@v2.2.2
- github.com/jinzhu/inflection@v1.0.0
- github.com/jinzhu/now@v1.1.5
- github.com/klauspost/compress@v1.18.6
- github.com/klauspost/cpuid/v2@v2.3.0
- github.com/kylelemons/godebug@v1.1.0
- github.com/lucasb-eyer/go-colorful@v1.4.0
- github.com/mattn/go-runewidth@v0.0.24
- github.com/mattn/go-sqlite3@v1.14.48
- github.com/muesli/cancelreader@v0.2.2
- github.com/paulmach/orb@v0.13.0
- github.com/pelletier/go-toml/v2@v2.2.4
- github.com/pierrec/lz4/v4@v4.1.27
- github.com/pkg/browser@v0.0.0-20240102092130-5ac0b6a4141c
- github.com/posthog/posthog-go@v1.22.0
- github.com/redis/go-redis/v9@v9.21.0
- github.com/richardlehane/mscfb@v1.0.7
- github.com/richardlehane/msoleps@v1.0.6
- github.com/rivo/uniseg@v0.4.7
- github.com/sagikazarmark/locafero@v0.12.0
- github.com/segmentio/asm@v1.2.1
- github.com/segmentio/encoding@v0.5.4
- github.com/shopspring/decimal@v1.4.0
- github.com/sirupsen/logrus@v1.9.4
- github.com/sosodev/duration@v1.4.0
- github.com/spf13/afero@v1.15.0
- github.com/spf13/cast@v1.10.0
- github.com/spf13/pflag@v1.0.10
- github.com/subosito/gotenv@v1.6.0
- github.com/tiendc/go-deepcopy@v1.7.2
- github.com/twpayne/go-geom@v1.6.1
- github.com/xdg-go/pbkdf2@v1.0.0
- github.com/xdg-go/scram@v1.2.0
- github.com/xdg-go/stringprep@v1.0.4
- github.com/xo/terminfo@v0.0.0-20220910002029-abceb7e1c41e
- github.com/xuri/efp@v0.0.1