shadcn/ui for your backend — a CLI that generates production-ready TypeScript blocks (rate limiting, validation, logging) into your codebase. You own the code
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 8 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
add_block
-
add_blocks
-
detect_project
-
diff_block
-
doctor
-
list_blocks
-
update_apply
-
update_check
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 58f3e42 · analyzer v33 · 2d ago
skills & prompt files 2
danger signals1
- suspicious endpoint sentry.io (telemetry) codewithnuh-blockend-58f3e42/apps/web/components/sections/Security.tsx :79
href="https://sentry.io/"
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 229
filesystem 20
- fs codewithnuh-blockend-58f3e42/apps/web/components/blocks-list.tsx :1
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/apps/web/components/source-code.tsx :1
import fs from "fs/promises"; - fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/add.test.ts :4
import fs from "fs/promises"; - fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/diff.test.ts :3
import fs from "fs/promises"; - fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/doctor.test.ts :3
import fs from "fs/promises"; - fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/init.test.ts :4
import fs from "fs/promises"; - fs (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/update.test.ts :3
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/add.ts :3
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/diff.ts :3
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/doctor.ts :3
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/init.ts :3
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/list.ts :3
import fs from "fs/promises";
show 8 more
- fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :3
import fs from "node:fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/commands/update.ts :3
import fs from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/package-manager.ts :1
import { existsSync, readFileSync } from "fs"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/filesystem.ts :1
import { existsSync } from "fs"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/package.ts :1
import { readFile } from "fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/read-template.ts :1
import { readFile } from "node:fs/promises"; - fs codewithnuh-blockend-58f3e42/packages/cli/src/detectors/readers/tsconfig.ts :1
import { readFile } from "fs/promises"; - fs (weak) codewithnuh-blockend-58f3e42/scripts/generate-import-report.mjs :1
import { promises as fs } from "fs";
shell / exec 6
- shell (weak) codewithnuh-blockend-58f3e42/blocks/idempotency/adapters/express.test.ts :218
execute.mockImplementation(async (_userId, _op, _key, _body, exec) => exec()); - shell (weak) codewithnuh-blockend-58f3e42/blocks/idempotency/adapters/fastify.test.ts :134
execute.mockImplementation(async (_u, _o, _k, _b, exec) => exec()); - shell (weak) codewithnuh-blockend-58f3e42/blocks/idempotency/adapters/hono.test.ts :111
execute.mockImplementation(async (_u, _o, _k, _b, exec) => exec()); - shell (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/add.test.ts :6
import { exec, type ChildProcess } from "child_process"; - shell codewithnuh-blockend-58f3e42/packages/cli/src/commands/add.ts :4
import { exec } from "child_process"; - shell codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :105
const { stdout } = await execa(command, args, options);
network 13
- net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/adapters/express.ts :2
import type { Server } from "node:http"; - net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/adapters/hono.ts :5
import type { Server } from "node:http"; - net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/core/connection-tracker.ts :1
import type { Server } from "node:http"; - net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/express.test.ts :1
import { createServer, type Server } from "node:http"; - net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/fastify.test.ts :1
import type { AddressInfo } from "node:net"; - net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/hono.test.ts :1
import { createServer, type Server } from "node:http"; - net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/unit/connection-tracker.test.ts :1
import { createServer, type Server } from "node:http"; - net (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/unit/http-task.test.ts :1
import { createServer, type Server } from "node:http"; - net codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/utils/http.ts :1
import type { IncomingMessage, Server, ServerResponse } from "node:http"; - net codewithnuh-blockend-58f3e42/packages/cli/src/commands/add.ts :584
const res = await fetch(`${RAW_CDN_BASE}/${fm.source}`); - net codewithnuh-blockend-58f3e42/packages/cli/src/commands/diff.ts :139
const res = await fetch(MANIFEST_URL); - net codewithnuh-blockend-58f3e42/packages/cli/src/commands/list.ts :70
const response = await fetch(MANIFEST_URL);
show 1 more
- net codewithnuh-blockend-58f3e42/packages/cli/src/commands/update.ts :338
const res = await fetch(MANIFEST_URL);
database 2
- db codewithnuh-blockend-58f3e42/blocks/rate-limiter/variants/redis-store.ts :1
import type { Redis } from "ioredis"; - db (weak) codewithnuh-blockend-58f3e42/packages/cli/src/__tests__/edge-cases.test.ts :35
const input = `import Redis from "ioredis";`;
tool registrations 8
- list_blocks codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :114
- add_block codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :124
- detect_project codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :143
- diff_block codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :157
- doctor codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :174
- update_check codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :188
- update_apply codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :202
- add_blocks codewithnuh-blockend-58f3e42/packages/cli/src/commands/mcp.ts :218
install hooks 3
- postinstall codewithnuh-blockend-58f3e42/apps/web/package.json :10
fumadocs-mdx - prepare codewithnuh-blockend-58f3e42/package.json :18
husky - prepublishOnly codewithnuh-blockend-58f3e42/packages/cli/package.json :27
pnpm typecheck
declared dependencies 26
- prettier@^3.8.4
- turbo@^2.10.8
- @commitlint/cli@^21.0.2
- @commitlint/config-conventional@^21.0.2
- @hono/node-server@^2.1.1
- @node-rs/argon2@^2.1.0
- @types/express@^5.0.6
- @types/node@^26.2.0
- @types/supertest@^7.2.1
- express@^5.2.1
- express-rate-limit@^8.6.2
- fastify@^5.12.1
show 14 more
- fastify-plugin@^6.0.0
- hono@^4.13.5
- husky@^9.1.7
- ioredis@^5.11.1
- lint-staged@^17.0.7
- mitata@^1.0.34
- oxlint@^1.77.0
- oxlint-tsgolint@^7.0.2001
- pino@^10.3.1
- pino-pretty@^13.1.3
- supertest@^7.2.2
- typescript@^7.0.2
- vitest@^4.1.11
- zod@^4.4.3
perm:untrusted 3
- untrusted (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/express.test.ts :77
const inflight = fetch(`${base}/slow`).then(async (r) => r.status); - untrusted (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/fastify.test.ts :69
const inflight = fetch(`${base}/slow`).then((r) => r.status); - untrusted (weak) codewithnuh-blockend-58f3e42/blocks/graceful-shutdown/tests/integration/hono.test.ts :76
const inflight = fetch(`${base}/slow`).then((r) => r.status);