github Python analyzed 874c115

ehgp/ai_skill_scanner

Aggregated multiple scanners for you

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 874c115 · analyzer v33 · 3w ago

suspicious endpoint api.telegram.org ehgp-ai_skill_scanner-874c115/tests/test_static_rules.py :103 ("https://api.telegram.org/bot123/sendMessage", False),

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3

fs ehgp-ai_skill_scanner-874c115/skill-scanner.py :112 import shutil
fs (weak) ehgp-ai_skill_scanner-874c115/tests/test_static_rules.py :20 from pathlib import Path
fs ehgp-ai_skill_scanner-874c115/update-scanners.py :28 import shutil

shell ehgp-ai_skill_scanner-874c115/skill-scanner.py :113 import subprocess
shell (weak) ehgp-ai_skill_scanner-874c115/tests/test_static_rules.py :40 # executed, imported, or shelled out - `eval(...)` and `os.system(...)` appear
shell ehgp-ai_skill_scanner-874c115/update-scanners.py :29 import subprocess

net ehgp-ai_skill_scanner-874c115/skill-scanner.py :121 from urllib.parse import urlparse
net ehgp-ai_skill_scanner-874c115/update-scanners.py :33 import requests

secrets ehgp-ai_skill_scanner-874c115/skill-scanner.py :221 not os.environ.get("SKILL_SCANNER_LLM_API_KEY")