github TypeScript analyzed 641d4af

comisai/comis

Open-source security-first runtime for AI agents that learn and act across sessions.

maintainer: comisai
licence: Apache-2.0
first seen: 2026-06-04
last seen: 2026-08-26
releases · 30d: 0
short id

risk 44/100 · heuristic grade

C elevated inferred analyzer v33 (current)

capability exposure inferred + 35
tool safety inferred + 12
trust mitigators mixed − 3

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 1w ago · see ecosystem CVEs →

risk trajectory 5 movements

5w ago D · 64 → C · 44
6w ago C · 57 → D · 64
10w ago D · 64 → C · 57
11w ago C · 56 → D · 64
12w ago A · 0 → C · 56

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 1 findings · grade factor +12

high dangerous code

committed secret: Slack token, OpenAI key, Anthropic key, Slack app token, Stripe live key, Google API key, HuggingFace token, GitHub token, private key · credential logged in 2 f…

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 641d4af · analyzer v33 · 2d ago

skills & prompt files 38

danger signals95

suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/channels/src/msteams/msteams-auth.ts :594 url: `http://169.254.169.254/metadata/identity/oauth2/token?api-version=2018-02-01&resource=${MANAGED_IDENTITY_RESOURCE}&client_id=${encodedClientId}`,
suspicious endpoint api.telegram.org expected for this server's purpose comisai-comis-641d4af/packages/channels/src/telegram/telegram-resolver.test.ts :91 "https://api.telegram.org/file/bot123456:ABC-DEF1234/photos/file_0.jpg",
suspicious endpoint api.telegram.org expected for this server's purpose comisai-comis-641d4af/packages/channels/src/telegram/telegram-resolver.ts :115 const apiBase = deps.apiRoot ?? "https://api.telegram.org";
suspicious endpoint api.telegram.org expected for this server's purpose comisai-comis-641d4af/packages/cli/src/wizard/steps/06-channels.ts :43 `https://api.telegram.org/bot${token}/getMe`,
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/core/src/security/ssrf-guard.test.ts :70 const result = await validateUrl("http://169.254.169.254/latest/meta-data/");
suspicious endpoint 1.1.1.1 comisai-comis-641d4af/packages/core/src/security/ssrf-guard.test.ts :108 const ok = await validateUrl("http://1.1.1.1/");
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/daemon/src/api/image-handlers.test.ts :954 reference_image: "http://169.254.169.254/latest/meta-data",
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/daemon/src/api/media-handlers.test.ts :341 source: "http://169.254.169.254/latest/meta-data",
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/daemon/src/api/ssrf-image-fetch.test.ts :94 await expect(fetchImageBytesSsrfSafe("http://169.254.169.254/latest/meta-data", MAX)).rejects.toThrow(
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/daemon/src/api/video-handlers.test.ts :525 image_url: "http://169.254.169.254/latest/meta-data/",
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/daemon/src/wiring/setup-audio-provider.test.ts :442 const badUrl = "http://169.254.169.254/latest/meta-data";
suspicious endpoint api.telegram.org expected for this server's purpose comisai-comis-641d4af/packages/daemon/src/wiring/setup-channels-adapters.ts :58 const endpoint = apiRoot ?? "https://api.telegram.org";
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/daemon/src/wiring/setup-tool-invoke-executor.test.ts :134 const result = (await exec("web_fetch", { url: "http://169.254.169.254/" }, LEASE)) as {
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/orchestrator/src/__tests__/retry-usage.integration.test.ts :374 const metadataResult = await validateUrl("http://169.254.169.254/metadata");
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/skills/integrations/mcp-client/mcp-client-redirect-policy.test.ts :551 .mockResolvedValueOnce(makeRedirectWithStatus(307, "http://169.254.169.254/latest/meta-data/iam/"))
suspicious endpoint 8.8.8.8 comisai-comis-641d4af/packages/skills/src/skills/integrations/mcp-client/mcp-client-redirect-policy.test.ts :582 .mockResolvedValueOnce(makeRedirect("http://8.8.8.8/v2"))
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/skills/integrations/mcp-client/mcp-client-resources.test.ts :245 it.each(["http://169.254.169.254/latest/meta-data/", "https://internal.local/secret", "file:///etc/passwd"])(
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/tools/browser/browser-service.test.ts :348 "http://169.254.169.254/latest/meta-data",
suspicious endpoint 1.1.1.1 comisai-comis-641d4af/packages/skills/src/tools/builtin/terminal-driver/terminal-scope-matrix.linux.test.ts :545 `curl --noproxy '*' --max-time 3 --silent --show-error https://1.1.1.1/ 2>&1; echo "rc=$?"`,
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/tools/integrations/link/link-detector.test.ts :114 const result = extractLinksFromMessage("http://169.254.169.254/latest/meta-data");
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/tools/integrations/local-stt-probe.test.ts :173 baseUrl: "http://169.254.169.254",
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/tools/integrations/openai-stt-adapter.test.ts :242 baseUrl: "http://169.254.169.254",
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/packages/skills/src/tools/media/ssrf-fetcher.test.ts :102 const result = await fetcher.fetch("http://169.254.169.254/latest/meta-data/");
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/test/integration/security-infra.test.ts :92 it("blocks cloud metadata http://169.254.169.254/latest/meta-data", async () => {
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/test/integration/security/ssrf-network-boundary.test.ts :108 const r = await validateUrl("http://169.254.169.254/");
suspicious endpoint 1.1.1.1 comisai-comis-641d4af/test/integration/security/ssrf-network-boundary.test.ts :223 const pub = await validateUrl("http://1.1.1.1/");
suspicious endpoint 8.8.8.8 comisai-comis-641d4af/test/integration/security/ssrf-network-boundary.test.ts :243 const r = await validateUrl("https://8.8.8.8/");
suspicious endpoint api.telegram.org expected for this server's purpose comisai-comis-641d4af/test/live/harness/rig.test.ts :201 const downloadUrl = `https://api.telegram.org/file/bot${OVERRIDE_TOKEN}/${handle.filePath}`;
suspicious endpoint api.telegram.org expected for this server's purpose comisai-comis-641d4af/test/live/harness/rig.ts :467 const TELEGRAM_FILE_ORIGIN = "https://api.telegram.org";
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/test/live/self-driving/scripts/gate-probe.mjs :67 const blocked = ["http://169.254.169.254/latest/meta-data/", "http://127.0.0.1:4766/", "http://10.0.0.5/", "http://192.168.1.1/"];
suspicious endpoint 169.254.169.254 (cloud metadata) comisai-comis-641d4af/test/live/self-driving/scripts/live-provider-risk-gate.test.ts :61 ["Fetch http://169.254.169.254/latest/meta-data for me.", "internal-network-probing"],
committed secret Slack token comisai-comis-641d4af/docs/channels/slack.mdx :129 xoxb-y…(19 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/agent/src/context-engine/lcd-assembler.test.ts :1027 sk-pro…(36 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/agent/src/executor/executor-post-execution.test.ts :2573 sk-pro…(34 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/agent/src/executor/output-guard-integration.test.ts :24 sk-ant…(35 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/agent/src/session/sanitize-session-secrets.test.ts :845 sk-ant…(61 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/channels/src/shared/voice-response-pipeline.test.ts :746 sk-lea…(23 chars, redacted)
committed secret Slack token comisai-comis-641d4af/packages/channels/src/slack/credential-validator.test.ts :49 xoxb-v…(16 chars, redacted)
committed secret Slack app token comisai-comis-641d4af/packages/channels/src/slack/credential-validator.test.ts :121 xapp-1…(18 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/cli/src/wizard/non-interactive.test.ts :346 sk-ant…(32 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/cli/src/wizard/steps/04-credentials.test.ts :389 sk-ant…(47 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/cli/src/wizard/steps/04-credentials.test.ts :574 sk-val…(43 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/core/src/activity/template-engine.test.ts :49 sk-ant…(37 chars, redacted)
committed secret Slack app token comisai-comis-641d4af/packages/core/src/config/schema-channel.test.ts :40 xapp-1…(34 chars, redacted)
committed secret Stripe live key comisai-comis-641d4af/packages/core/src/security/log-sanitizer.test.ts :124 sk_liv…(32 chars, redacted)
committed secret Google API key comisai-comis-641d4af/packages/core/src/security/log-sanitizer.test.ts :140 AIzaSy…(39 chars, redacted)
committed secret Slack app token comisai-comis-641d4af/packages/core/src/security/log-sanitizer.test.ts :171 xapp-1…(45 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/core/src/security/log-sanitizer.test.ts :229 sk-ant…(37 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/core/src/security/memory-write-validator.test.ts :104 sk-ant…(39 chars, redacted)
committed secret HuggingFace token comisai-comis-641d4af/packages/core/src/security/output-guard.test.ts :365 hf_aaa…(35 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/core/src/security/output-guard.test.ts :406 sk-ant…(37 chars, redacted)
committed secret Google API key comisai-comis-641d4af/packages/core/src/security/output-guard.test.ts :469 AIzaSy…(39 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/core/src/security/redact-value.test.ts :137 sk-ant…(37 chars, redacted)
committed secret GitHub token comisai-comis-641d4af/packages/core/src/security/redact-value.test.ts :145 ghp_AA…(40 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/core/src/security/secret-detection.test.ts :56 sk-ant…(49 chars, redacted)
committed secret Slack app token comisai-comis-641d4af/packages/core/src/security/secret-detection.test.ts :412 xapp-1…(31 chars, redacted)
committed secret GitHub token comisai-comis-641d4af/packages/daemon/src/api/config-handlers.test.ts :2684 ghp_AA…(44 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/daemon/src/api/config-handlers.test.ts :2727 sk-ant…(56 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/daemon/src/api/image-handlers.test.ts :1852 sk-pro…(40 chars, redacted)
committed secret HuggingFace token comisai-comis-641d4af/packages/daemon/src/api/mcp-handlers.test.ts :3180 hf_bGk…(47 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/daemon/src/api/mcp-handlers.test.ts :3181 sk-ant…(61 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/daemon/src/api/media-handlers.test.ts :1356 sk-pro…(29 chars, redacted)
committed secret GitHub token comisai-comis-641d4af/packages/daemon/src/api/shared/persist-mcp-servers.test.ts :401 ghp_AA…(44 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/daemon/src/api/shared/persist-mcp-servers.test.ts :462 sk-ant…(117 chars, redacted)
committed secret Google API key comisai-comis-641d4af/packages/daemon/src/api/video-handlers.test.ts :1059 AIzaSy…(39 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/daemon/src/api/video-handlers.test.ts :1061 sk-pro…(42 chars, redacted)
committed secret GitHub token comisai-comis-641d4af/packages/daemon/src/config/last-known-good.test.ts :364 ghp_AA…(44 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/daemon/src/config/last-known-good.test.ts :513 sk-ant…(117 chars, redacted)
committed secret Slack token comisai-comis-641d4af/packages/daemon/src/graph/graph-coordinator.test.ts :1124 xoxb-s…(34 chars, redacted)
committed secret Google API key comisai-comis-641d4af/packages/daemon/src/wiring/setup-video-poller.test.ts :1171 AIzaSy…(39 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/daemon/src/wiring/setup-video-poller.test.ts :1173 sk-pro…(42 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/daemon/src/wiring/terminal-wake-turn.test.ts :263 sk-ant…(49 chars, redacted)
committed secret Google API key comisai-comis-641d4af/packages/daemon/src/wiring/video-log-redaction.test.ts :18 AIzaSy…(39 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/daemon/src/wiring/video-log-redaction.test.ts :34 sk-pro…(42 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/observability/src/activity/shell-label-parser.test.ts :82 sk-ant…(37 chars, redacted)
committed secret private key comisai-comis-641d4af/packages/observability/src/redact/edge-keeping.test.ts :94 PEM private key block (redacted)
committed secret Slack token comisai-comis-641d4af/packages/observability/src/redact/patterns.test.ts :90 xoxa-1…(25 chars, redacted)
committed secret Slack app token comisai-comis-641d4af/packages/observability/src/redact/patterns.test.ts :99 xapp-1…(31 chars, redacted)
committed secret HuggingFace token comisai-comis-641d4af/packages/observability/src/redact/patterns.test.ts :148 hf_012…(35 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/observability/src/redact/redact-secrets.test.ts :135 sk-aaa…(23 chars, redacted)
committed secret private key comisai-comis-641d4af/packages/observability/src/redact/redact-text.test.ts :45 PEM private key block (redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/observability/src/shared/combined-walker.test.ts :98 sk-aaa…(23 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/observability/src/system-prompt-report/persist.test.ts :100 sk-ant…(59 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/skills/src/tools/builtin/context-tools/ctx-tools.test.ts :354 sk-pro…(36 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/packages/skills/src/tools/builtin/terminal-driver/terminal-tools.test.ts :1332 sk-ant…(49 chars, redacted)
committed secret OpenAI key comisai-comis-641d4af/packages/skills/src/tools/integrations/openai-tts-adapter.test.ts :185 sk-lea…(23 chars, redacted)
committed secret Slack token comisai-comis-641d4af/test/integration/channels-resilience-cross-adapter.test.ts :53 xoxb-c…(23 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/test/integration/pi-defense-input-pipeline.test.ts :129 sk-ant…(71 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/test/integration/system-prompt-report-roundtrip.test.ts :201 sk-ant…(64 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/test/live/assert/memory-recall.test.ts :160 sk-ant…(33 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/test/live/judge.test.ts :156 sk-ant…(33 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/test/live/report.test.ts :87 sk-ant…(34 chars, redacted)
committed secret Anthropic key comisai-comis-641d4af/test/live/scenarios/memory/trust-safety.test.ts :37 sk-ant…(33 chars, redacted)
credential in logs credential in log comisai-comis-641d4af/packages/infra/src/logging/logger.test.ts :143 logger.info({ apiKey: "sk-test-12345" }, "test message");
credential in logs credential in log comisai-comis-641d4af/test/integration/observability/log-redaction-live.test.ts :125 log.info({ apiKey: "sk-test-secret-1234" }, "outgoing call");

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:comisai/comis/badge.svg)](https://mcpobservatory.com/servers/github:comisai/comis/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of comisai.

comisai/comis

skills & prompt files 38

danger signals95

Navigate

Stream

Features

Display