github re-analysis due unconfirmed MCP

corespeed-io/zypher-agent

A minimal yet powerful framework for creating AI agents with full control over tools, providers, and execution flow.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 02526a0 · analyzer v17 · 2d ago

code evidence vui/v0.3.3 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

shell corespeed-io-zypher-agent-02526a0/packages/agent/tools/run_terminal_cmd_tool.ts :8 import { exec, spawn } from "node:child_process";

net corespeed-io-zypher-agent-02526a0/packages/ui/task_api_client.ts :185 const response = await fetch(`${this.#options.baseUrl}/messages`, {

secrets corespeed-io-zypher-agent-02526a0/packages/agent/llm/cloudflare.ts :97 * apiToken: process.env.CF_AIG_API_TOKEN,