github TypeScript analyzed 5cd7e65

cloveric/tarocub

github

Feishu/Lark-first local AI agent gateway and native DeepSeek Harness plugin for Codex, Claude Code, Kimi Code, DeepSeek Harness, and Antigravity; Telegram optional.

maintainer
cloveric
licence
MIT
first seen
2026-08-19
last seen
2026-09-15
releases · 30d
79
short id

cloveric/tarocub is an MCP server distributed on github, maintained by cloveric, tracked here since August 2026. It has shipped 169 releases and exposes 5 tools. Tools include approve, health_check, provider_status, web_extract, web_search. Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised 2 review prompts — dangerous code and toxic flow (lethal trifecta) — each a pattern worth a human look rather than a finding of fault.

Its 5 tools appear to reach filesystem, shell / exec, network, secrets, database and untrusted content, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

full security breakdown →
tools 5
  • approve
  • health_check
  • provider_status
  • web_extract
  • web_search
release cadence · 90d 166 releases
06-18 00:00 08-01 00:00 now
recent releases last 10
version date src
v0.1.335 2026-09-15 github
v0.1.334 2026-09-14 github
v0.1.333 2026-09-14 github
v0.1.332 2026-09-14 github
v0.1.331 2026-09-14 github
v0.1.330 2026-09-11 github
v0.1.329 2026-09-11 github
v0.1.328 2026-09-11 github
v0.1.327 2026-09-10 github
v0.1.326 2026-09-10 github

view all →