MCP Observatory
5m ago Tracked 39,510 Last 5m ago 24h 3,139
github JavaScript re-analysis due

emrecdr/devt

github

Zero-dependency multi-agent development workflow plugin for Claude Code

maintainer
emrecdr
license
MIT
first seen
2026-06-07
last seen
2026-08-13
releases · 30d
74
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 05bd88b · analyzer v28 · 1w ago

skills & prompt files 18

code evidence vv0.219.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 87

filesystem 37

  • fs emrecdr-devt-05bd88b/bin/devt-graphify-mcp.cjs :33 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/devt-memory-mcp.cjs :34 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/agent-resume.cjs :24 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/bash-guard.cjs :17 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/config.cjs :12 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/deferred.cjs :20 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/discovery.cjs :30 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/dispatch.cjs :28 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/evolution.cjs :16 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/grader.cjs :3 const fs = require("node:fs");
  • fs emrecdr-devt-05bd88b/bin/modules/graphify.cjs :29 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/health.cjs :10 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/hook-cost.cjs :27 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/init.cjs :11 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/io.cjs :5 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/logger.cjs :24 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/mcp-stats.cjs :38 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/memory-bundle.cjs :24 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/memory.cjs :22 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/preflight.cjs :34 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/reuse-search.cjs :17 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/review-weight.cjs :237 const fsA = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/security.cjs :11 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/setup.cjs :19 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state-audit.cjs :22 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state-contract.cjs :8 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state-gates.cjs :8 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state-graphify.cjs :8 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state-io.cjs :8 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state-lanes.cjs :8 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/state.cjs :10 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/static-compress.cjs :23 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/stuck-detector.cjs :13 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/token-report.cjs :24 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/update.cjs :10 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/bin/modules/weekly-report.cjs :10 const fs = require("fs");
  • fs emrecdr-devt-05bd88b/hooks/run-hook.js :21 const fs = require("fs");

shell / exec 14

  • shell emrecdr-devt-05bd88b/bin/modules/evolution.cjs :15 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/graphify.cjs :31 const child_process = require("node:child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/io.cjs :32 const out = require("child_process").execFileSync("git", nul ? ["ls-files", "-z"] : ["ls-files"], opts);
  • shell emrecdr-devt-05bd88b/bin/modules/memory.cjs :1351 // ReDoS guard: a catastrophic-backtracking regex (e.g. `(a+)+$`) needs a long
  • shell emrecdr-devt-05bd88b/bin/modules/preflight.cjs :255 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/review-weight.cjs :26 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/setup.cjs :75 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/state-gates.cjs :1455 const { execSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/state-graphify.cjs :433 // `parse_failed_lines` telemetry. Prior strict `\s*$` anchor silently
  • shell emrecdr-devt-05bd88b/bin/modules/state-lanes.cjs :296 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/state.cjs :1060 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/update.cjs :165 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/bin/modules/weekly-report.cjs :12 const { execFileSync } = require("child_process");
  • shell emrecdr-devt-05bd88b/hooks/run-hook.js :23 const { spawnSync } = require("child_process");

network 2

  • net emrecdr-devt-05bd88b/bin/modules/graphify.cjs :1867 // Over-fetch (3×) before filter so we still hit `limit` after stripping
  • net emrecdr-devt-05bd88b/bin/modules/update.cjs :12 const https = require("https");