github analyzed d2546e2 deep scan · partial (261/3,638 files)

ergoveritas1-alt/certscore.ai

github

CertScore MCP server for scan creation, findings, evidence, and domain lookup.

maintainer: ergoveritas1-alt
licence: —
first seen: 2026-07-05
last seen: 2026-07-05
releases · 30d: 0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit d2546e2 · analyzer v33 · 1d ago

skills & prompt files 4

danger signals42

dynamic code execution vm exec ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/analytics/consent-bootstrap.test.ts :19 vm.runInNewContext(buildConsentBootstrapScript(tag), { window, document, URL });
dynamic code execution new Function() ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/analytics/umami-integration.test.ts :14 assert.doesNotThrow(() => new Function(script));
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/handler.test.ts :1622 requestUrl: "https://www.google-analytics.com/g/collect?secret=redacted",
suspicious endpoint analytics.google.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/live-consent-audit.test.ts :115 url: "https://analytics.google.com/g/collect",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/vendor-enrichment.test.ts :127 url: "https://www.google-analytics.com/g/collect?v=2"
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/executive-summary-card.test.ts :618 preconsent_cookie_initiator_urls: ["https://www.google-analytics.com/analytics.js", "https://connect.facebook.net/en_US/fbevents.js"],
suspicious endpoint o1.ingest.de.sentry.io (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/full-site-resource-context.test.tsx :46 const html = renderToStaticMarkup(<DataTransferDisclosure label="Sentry" context={context} requestUrls={["https://o1.ingest.de.sentry.io/api/2/envelope/"]}/>);
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/canonical-review-finding.test.ts :401 "vendor:Google Analytics|relationship:first_party|endpoint:first_party_collection_proxy|host:www.google-analytics.com|source_url:https://www.google-analytics.com/g/collect?v=2"
suspicious endpoint analytics.google.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/concern-policy.test.ts :2546 "https://analytics.google.com/g/collect?v=2",
suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/executive-findings-projection.test.ts :3558 "https://edge.fullstory.com/s/settings/15TFZD/v1/web",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/finding-evidence-contracts.test.ts :362 sourceEvidenceIds: ["policy:cookie#reject", "cookie:_ga", "request:https://www.google-analytics.com/g/collect"]
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/full-site-resource-context.test.ts :7 const analytics=identifyCrawlService(row('https://www.google-analytics.com/g/collect'));
suspicious endpoint api2.amplitude.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/full-site-resource-context.test.ts :23 const identity=identifyCrawlService(row('https://api2.amplitude.com/2/httpapi'))!;
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/gdpr-eprivacy-coverage-checklist.test.ts :2323 requestUrl: "https://www.google-analytics.com/g/collect?v=2",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/gdpr-eprivacy-coverage-policy.test.ts :5590 requestUrl: "https://www.google-analytics.com/g/collect?v=2",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/hybrid-runtime-evidence.test.ts :1049 const googleUrl = "https://www.google-analytics.com/g/collect?tid=G-TEST";
suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/hybrid-runtime-evidence.test.ts :1050 const fullStoryUrl = "https://edge.fullstory.com/s/fs.js";
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/normalized-concerns.test.ts :451 requestUrl: "https://www.google-analytics.com/g/collect?v=2",
suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/normalized-concerns.test.ts :994 requestUrl: "https://edge.fullstory.com/s/settings/15TFZD/v1/web",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/policy-behavior-conflict.fixtures.ts :202 requests: ["https://www.google-analytics.com/g/collect"],
suspicious endpoint cdn.segment.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/preconsent-public-evidence.test.ts :57 { ...common, requestUrl: "https://cdn.segment.com/analytics.js", classification: "library" },
suspicious endpoint api.segment.io (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/preconsent-public-evidence.test.ts :58 { ...common, requestUrl: "https://api.segment.io/v1/p", classification: "tracking", collectionEndpointObserved: true }
suspicious endpoint edge.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/preconsent-public-evidence.test.ts :141 pageUrl: "https://edge.fullstory.com/s/settings/15TFZD/v1/web",
suspicious endpoint sr-client-cfg.amplitude.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/preconsent-public-evidence.test.ts :183 url: "https://sr-client-cfg.amplitude.com/config/abc",
suspicious endpoint api2.amplitude.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/preconsent-public-evidence.test.ts :209 url: "https://api2.amplitude.com/2/httpapi",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/preconsent-public-evidence.test.ts :724 inferDirectEndpointVendorFromUrl("https://www.google-analytics.com/analytics.js"),
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/promotion-evidence-contracts.test.ts :866 runtimeAnchorRef: "https://www.google-analytics.com/g/collect?v=2",
suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/regulatory-risk-source.test.ts :67 "https://rs.fullstory.com/rec/page.js",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/reject-click-tracking-runtime.test.ts :22 pendingRedirect?.writeHead(302, { location: "https://www.google-analytics.com/g/collect?tid=G-REDIRECT" }).end();
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/runtime-vendor-disclosure.test.ts :155 "https://www.google-analytics.com/g/collect?v=2",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/scan-report-unified-findings.test.ts :1947 "https://www.google-analytics.com/g/collect"
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/scans/unified-findings.test.ts :2616 initiatorUrl: "https://www.google-analytics.com/analytics.js",
suspicious endpoint api.segment.io (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/browser-scans/canonical-routing.test.ts :186 url: "https://api.segment.io/v1/t"
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/scans/full-site-score.test.ts :133 nalytics", method: "POST", requestUrl: "https://www.google-analytics.com/g/collect", hostname: "www.google-analytics.com", thirdParty: true, collectionEndpointObserved: true }],
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/scans/local-v2-dag-report.test.ts :336 requestUrl: "https://www.google-analytics.com/g/collect?v=2",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/infra/aws/ergoveritas-canary/broad-baseline-runtime.js :13 img.src = "https://www.google-analytics.com/collect?v=1&t=pageview&tid=G-X5ZM7BWET3&cid=CANARY";
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/infra/aws/ergoveritas-canary/post-accept/post-accept-runtime.js :53 analytics.src = "https://www.google-analytics.com/g/collect?v=2&tid=G-CERTSCORE&cid=POST_ACCEPT_CANARY&en=accept_honored";
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/infra/aws/ergoveritas-canary/post-refusal/post-refusal-runtime.js :51 analytics.src = "https://www.google-analytics.com/g/collect?v=2&tid=G-CERTSCORE&cid=POST_REFUSAL_CANARY&en=reject_ignored";
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-review-engine/src/fixtures.ts :118 url: "https://www.google-analytics.com/g/collect?v=2&tid=G-TEST",
suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-review-engine/src/fixtures.ts :206 url: "https://rs.fullstory.com/s/fs.js",
suspicious endpoint rs.fullstory.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-review-engine/src/index.test.ts :1037 key: "endpoint:https://rs.fullstory.com/rec/page",
suspicious endpoint www.google-analytics.com (telemetry) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-review-engine/src/index.test.ts :4016 matchedUrls: ["https://www.google-analytics.com/g/collect"],

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 2500

filesystem 278

fs ergoveritas1-alt-certscore.ai-d2546e2/.codex-artifacts/security-privacy-pack/build_registers.mjs :1 import fs from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/.codex-tmp/geometry-review-workbook/build.mjs :1 import fs from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/actions/pulse-check/check.mjs :2 import { appendFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/browser-extension/scripts/package-store-release.mjs :2 import { cpSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/browser-extension/scripts/validate-extension.mjs :1 import { readFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/read-throttle.test.ts :2 import { readFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/telemetry.test.ts :3 import { readFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/action-worker-checkpoints.test.ts :2 import { mkdtemp, readFile, rm } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/action-worker-checkpoints.ts :1 import { writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/dev-scripts.test.ts :2 import { readFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/full-site-page.test.ts :4 import { readFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/full-site-page.ts :5 import { rm } from "node:fs/promises";

show 28 more

fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/handler.test.ts :5 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/handler.ts :13 import { mkdir, readdir, readFile, writeFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/local-full-site-runner.ts :1 import { writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/runtime-evidence-graph.test.ts :5 import { mkdir, mkdtemp, rm } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/screenshot-safety.test.ts :2 import { mkdtemp, readFile, rm, stat, writeFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/screenshot-safety.ts :1 import { readFile, readdir, unlink } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/compare-policy-review-benchmarks.ts :1 import { readFile, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/evaluate-adjudicated-policy-review.ts :1 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/evaluate-model-policy-review.ts :1 import { readFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/extract-financial-claims-drafts.ts :1 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/extract-privacy-runtime-drafts.ts :1 import { existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/ingest-independent-policy-review.ts :1 import { readdir, readFile, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/live-consent-audit.ts :1 import { mkdir, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/prepare-independent-policy-review.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/promote-human-adjudicated-policy-review.ts :1 import { readFile, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-model-policy-shadow.ts :1 import { readFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-policy-review-benchmark.ts :1 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-policy-review-dual-nano-benchmark.ts :1 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-policy-review-escalation-benchmark.ts :1 import { mkdir, readFile, readdir, writeFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/browser-cleanup.ts :1 import { readdir, rm, stat } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/full-site/local-dispatch.ts :2 import { mkdtemp, readFile, rm } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/full-site/scheduler.test.ts :4 import { readFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/canonical-policy-review-input.test.ts :3 import { readFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/canonical-policy-review-input.ts :10 import { readFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/dispatcher.test.ts :2 import { readFileSync } from "node:fs";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/local-v2-dag-lambda-results.test.ts :4 import { mkdtemp, readFile } from "node:fs/promises";
fs ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/local-v2-dag-lambda-results.ts :25 import { mkdir, readFile, writeFile } from "node:fs/promises";
fs (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/runtime-scan-artifacts.test.ts :2 import { existsSync, mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";

238 more not shown — this panel samples each group; the count above is the real total.

shell / exec 59

shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/browser-extension/scripts/package-store-release.mjs :5 import { spawnSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/http-integration.test.ts :2 import { spawn, type ChildProcess } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/token-refresh.test.ts :2 import { spawn } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/prod-ops-db-probe.ts :1 import { execFile } from "node:child_process";
shell ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/browser-cleanup.ts :4 import { execFile as execFileCallback } from "node:child_process";
shell ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/full-site/local-dispatch.ts :1 import { spawn } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/mcp-response-review.test.ts :2 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/scripts/compare-prod-local-tranco-calibration.ts :3 import { spawnSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/scripts/run-noisy-finding-postdeploy-validation.ts :4 import { spawnSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/scripts/run-tranco-calibration-batch.ts :3 import { spawnSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/scripts/run-tranco-calibration-session.ts :3 import { spawnSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/scripts/run-tranco-comparison-batches.ts :3 import { spawnSync } from "node:child_process";

show 28 more

shell ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/admin/v2-scan-lab-runner.ts :2 import { spawn } from "node:child_process";
shell ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/scans/local-v2-dag-lambda-simulated-dispatch.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-contracts/src/gpc-public-contract.test.ts :2 import { execFileSync } from "node:child_process";
shell ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/cli/post-refusal-public-cohort.ts :2 import { spawn } from "node:child_process";
shell ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/cli/runtime-graph-benchmark.ts :7 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/gpc-pre-transmission-block.test.ts :22 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/transport-security-scanner.test.ts :2 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-sdk/src/client.test.ts :2 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/assert-forward-web-deploy.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/audit-gdpr-transparency-retained-bundles.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/backfill-admin-evidence-matrix-ecs.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/build-aro-likelihood-human-review.ts :2 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/build-certscore-mcp-homebrew-release.ts :4 import { spawnSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/build-microsoft-mcp-certification-package.ts :1 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/check-live-deployment-state.ts :1 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/check-load-test-canary-db-psql-oneoff.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/check-regional-scanner-parity.ts :1 import { execFileSync } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/deploy-ergoveritas-embeds.ts :1 import {execFileSync} from 'node:child_process';
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/deploy-fast.ts :1 import { spawn } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/diagnostics/proxy-tunnel-proof/benchmark.cjs :4 const {spawn}=require('node:child_process');const path=require('node:path');
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/diagnostics/proxy-tunnel-proof/check-local.cjs :3 const { execFileSync } = require('node:child_process');
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/fetch-regional-gdpr-passive-sample.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/find-prod-v2-gold-corpus-candidates.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/generate-evidence-industry-benchmark-data.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/lib/prod-db-psql-oneoff.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/lib/scanner-image-provenance.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/monitor-prod-ops.ts :1 import { execFile } from "node:child_process";
shell (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/predeploy.ts :1 import { spawn } from "node:child_process";

19 more not shown — this panel samples each group; the count above is the real total.

network 144

net ergoveritas1-alt-certscore.ai-d2546e2/actions/pulse-check/check.mjs :91 const response = await fetch(apiUrl(pathOrUrl), {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/browser-extension/src/background.js :215 await fetch(httpsUrl.href, { cache: "no-store", credentials: "omit", method: "HEAD", redirect: "follow" });
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/http-integration.test.ts :3 import { createServer as createHttpServer } from "node:http";
net ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/index.ts :2 import { createServer, type IncomingMessage, type ServerResponse } from "node:http";
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/requester-identity.test.ts :2 import type { IncomingMessage } from "node:http";
net ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/requester-identity.ts :4 import type { IncomingMessage } from "node:http";
net ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/telemetry.ts :3 import type { IncomingHttpHeaders } from "node:http";
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/token-refresh.test.ts :3 import { createServer } from "node:http";
net ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/runtime-bootstrap.mjs :26 await fetch(`http://${runtimeApi}/2018-06-01/runtime/invocation/${invocationId}/${suffix}`, {
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/handler.test.ts :6 import { createServer as createHttpServer } from "node:http";
net ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/handler.ts :8 import { request as httpRequest, type ClientRequest } from "node:http";
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/runtime-evidence-graph.test.ts :3 import { createServer } from "node:http";

show 28 more

net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/extract-financial-claims-drafts.ts :152 const response = await fetch(input.pageUrl, {
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/extract-privacy-runtime-drafts.ts :642 const response = await fetch(url, {
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/import-static-tranco-snapshot.ts :122 const response = await fetch(STATIC_TRANCO_SOURCE_URL, { headers: { "User-Agent": "CertScoreStaticTrancoImporter/1.0" } });
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/prod-ops-db-probe.ts :465 const response = await fetch(new URL("/api/full-scan", baseUrl), {
net (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/accessibility/run-accessibility-scan.integration.test.ts :2 import { createServer, type Server } from "node:http";
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/full-site/completion-emails.ts :19 const response = await fetch(
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/full-site/local-dispatch.ts :42 const finish=await fetch(new URL("/api/internal/full-site/page",origin),{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({...message,...response.finish}),signal:AbortSign
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/llm-client.ts :64 const response = await fetch(OPENAI_API_URL, {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/nano-document-discovery.ts :867 const response = await fetch(OPENAI_API_URL, {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/nano-document-extraction.ts :512 const response = await fetch(OPENAI_API_URL, {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/repository.ts :689 const response = await fetch(sourceUrl, { headers: sourceRequest.headers });
net ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/vendor-enrichment.ts :350 const response = await fetch(OPENAI_API_URL, {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/app/admin/scans/admin-scans-auto-refresh.tsx :40 const response = await fetch("/api/admin/scans/live-status", {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/pulse/feedback/pulse-feedback-form.tsx :33 const response = await fetch("/api/v1/pulse/feedback", {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/dashboard/live-full-site-scan-notice.tsx :29 const response = await fetch(`/api/scans/${initial.scanId}/full-site/progress`, {cache:"no-store", signal:controller.signal});
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/developers/mcp-light-actions.tsx :70 const response = await fetch("/api/v2/scans", {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/domains/add-domain-form.tsx :88 fetch(buildRecentScanAvailabilityUrl({ domain: effectiveSubmitDomain, scanFrom: scanFrom as ServerScanFrom }), {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/marketing/domain-scan-form.tsx :343 void fetch("/api/scan-submit-events", {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/marketing/preview-scan-state.tsx :26 const response = await fetch(`/api/preview-scan/${scan.scanId}`, {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/full-site-controls.tsx :41 void fetch("/api/full-scan/options", {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/full-site-workspace.tsx :199 const response = await fetch(
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/gdpr-eprivacy-coverage-checklist-card.tsx :2928 const response = await fetch(
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/inventory-resource-details.tsx :45 const response = await fetch(source.href, { credentials: "same-origin", cache: "no-store", signal: AbortSignal.timeout(15000) });
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/runtime-evidence-graph-explorer.tsx :36 const response = await fetch(`/api/scans/${encodeURIComponent(scanId)}/runtime-evidence-graph`, { credentials: "same-origin", cache: "no-store", signal: controller.signal });
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/scan-status-auto-refresh.tsx :338 const response = await fetch(`/api/scan-status/${encodeURIComponent(scanId)}?includeFindings=0`, {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scanso2/full-site-controls.tsx :41 void fetch("/api/full-scan/options", {
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scanso2/full-site-workspace.tsx :191 const response = await fetch(
net ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scanso2/gdpr-eprivacy-coverage-checklist-card.tsx :2928 const response = await fetch(

104 more not shown — this panel samples each group; the count above is the real total.

secrets 40

secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/v2-dag-lambda/src/handler.ts :511 const secretAccessKey = compactString(process.env.S3_SECRET_ACCESS_KEY);
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-policy-review-benchmark.ts :151 apiKey: process.env.OPENAI_API_KEY,
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-policy-review-dual-nano-benchmark.ts :134 apiKey: process.env.OPENAI_API_KEY,
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/scripts/run-policy-review-escalation-benchmark.ts :127 apiKey: process.env.OPENAI_API_KEY,
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/llm-client.test.ts :16 OPENAI_API_KEY: process.env.OPENAI_API_KEY,
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/api/internal/mcp-telemetry/route.ts :9 return process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim()
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/api/internal/scan-report-projection-backfill/route.ts :28 const expected = process.env.SCAN_PROJECTION_BACKFILL_SECRET?.trim() ?? null;
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/api/v2/scans/[scanId]/report-evidence/route.ts :30 const signingSecret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim() || "";
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/app/layout.tsx :41 try { confirmation = {path: identity.path, token: issueAuthenticatedPageToken(identity, process.env.BETTER_AUTH_SECRET ?? "")}; }
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/app/developers/sdk/page.tsx :62 apiKey: process.env.CERTSCORE_API_KEY
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scans/share-report-actions.tsx :159 " apiKey: process.env.CERTSCORE_API_KEY",
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/components/scanso2/share-report-actions.tsx :159 " apiKey: process.env.CERTSCORE_API_KEY",

show 28 more

secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/pulse/request.test.ts :42 const previousSecret = process.env.CERTSCORE_OAUTH_JWT_SECRET;
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/pulse/request.ts :89 const secret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/middleware.ts :29 const { identity, token } = issuePublicPageToken(pathname, process.env.BETTER_AUTH_SECRET ?? "");
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/admin/list-admin-users.ts :259 return process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim() || null;
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/browser-scans/repository.ts :350 return process.env.BX01_OBSERVED_SIGNAL_INGEST_TOKEN?.trim() || null;
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/email/gmail.test.ts :7 const previousPassword = process.env.GMAIL_SMTP_APP_PASSWORD;
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/email/gmail.ts :13 const appPassword = process.env.GMAIL_SMTP_APP_PASSWORD?.replace(/\s+/g, "");
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/integrations/api-keys.test.ts :75 const previousSecret = process.env.CERTSCORE_OAUTH_JWT_SECRET;
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/integrations/api-keys.ts :513 const jwtSecret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/oauth/mcp-oauth.ts :85 const secret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/product-analytics/authenticated-page-ingest.test.ts :10 const oldSecret=process.env.BETTER_AUTH_SECRET;
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/product-analytics/ingest-request.ts :48 const identity = verifyAuthenticatedPageToken(payload.authenticatedPageToken, payload.pagePath, user.id, process.env.BETTER_AUTH_SECRET ?? "");
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/scans/domain-benchmark-estimate.ts :260 const apiKey = process.env.OPENAI_API_KEY?.trim();
secrets ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/settings/generate-google-query-urls.ts :28 const apiKey = process.env.GOOGLE_CUSTOM_SEARCH_API_KEY;
secrets ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-mcp/src/index.ts :61 apiKey: process.env.CERTSCORE_API_KEY,
secrets ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/calibration.ts :88 const apiKey = input.env?.OPENAI_API_KEY ?? process.env.OPENAI_API_KEY;
secrets ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/cli/consent-geometry-review.ts :33 const apiKey = process.env.OPENAI_API_KEY?.trim();
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/proxy-destination-capture.test.ts :14 process.env.CERTSCORE_PROXY_RECORDS_KEY='a'.repeat(64);
secrets ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/proxy-destination-capture.ts :41 const key=process.env.CERTSCORE_PROXY_RECORDS_KEY;
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-scan-core/src/run-scan-nano-requirement.test.ts :29 const previousOpenAiApiKey = process.env.OPENAI_API_KEY;
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-sdk/examples/canonical-resource-workflow.ts :4 apiKey: process.env.CERTSCORE_API_KEY
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/backfill-scan-report-projections.ts :10 ...(process.env.SCAN_PROJECTION_BACKFILL_SECRET
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/diagnostics/proxy-tunnel-proof/scanner-check.ts :12 process.env.CERTSCORE_PROXY_RECORDS_KEY=(await readFile('/tmp/certscore-proxy-integration/key','utf8')).trim();
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/run-local-v2-dag-lambda-parity.ts :256 delete process.env.CERTSCORE_V2_DAG_LAMBDA_PROXY_PASSWORD;
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/smoke-certscore-mcp-http-tools-diff.ts :47 const secret = process.env.CERTSCORE_OAUTH_JWT_SECRET?.trim() || process.env.JWT_SIGNING_KEY?.trim();
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/smoke-certscore-mcp.mjs :4 const apiKey = process.env.CERTSCORE_API_KEY;
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/test-authenticated-activity.ts :22 process.env.BETTER_AUTH_SECRET="a-local-browser-test-secret-at-least-32-characters";
secrets (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/verify-certscore-mcp-release-guards.ts :73 return process.env.GH_TOKEN ?? process.env.GITHUB_TOKEN ?? "";

database 26

db ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/nano-signal-wakeup.ts :2 import type { PoolClient } from "pg";
db ergoveritas1-alt-certscore.ai-d2546e2/apps/validation-worker/src/validation/repository.ts :3 import type { PoolClient } from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/activity-provenance.test.ts :4 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/mcp-caller-activity.test.ts :3 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/mcp-discovery.test.ts :4 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/mcp-funnel.test.ts :3 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/mcp-traffic-exclusions.test.ts :3 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/mcp-workflow-cohort.test.ts :3 import pg from 'pg';
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/lib/admin/scan-creation-source.test.ts :3 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/admin/admin-pages-performance.test.ts :4 import pg from 'pg';
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/oauth/mcp-oauth-exchange.test.ts :5 import pg from 'pg';
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/product-analytics/authenticated-page-sql.test.ts :4 import pg from "pg";

show 14 more

db (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/product-analytics/public-page-sql.test.ts :4 import pg from "pg";
db ergoveritas1-alt-certscore.ai-d2546e2/packages/db/src/full-site-crawl.ts :2 import type { PoolClient } from "pg";
db ergoveritas1-alt-certscore.ai-d2546e2/packages/db/src/postgres.ts :1 import { Pool, type PoolClient, type PoolConfig, type QueryResult, type QueryResultRow } from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/apply-db-migrations.mjs :7 const pg = require("pg");
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/apply-db-migrations.ts :4 import { Client, type ClientConfig } from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/audit-prior-scan-acceleration.ts :1 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/backfill-admin-evidence-matrix-ecs.ts :92 const { Client } = require("pg");
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/import-admin-scan-fixture.ts :1 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/import-dev-corpus-to-prod.ts :4 import { Client } from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/import-json-to-postgres.ts :3 import { Client, type ClientConfig } from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/insert-integration-api-key.mjs :1 import pg from "pg";
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/run-phase1a-scan-metadata-migration-ecs.ts :105 const { Client } = require("pg");
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/smoke-certscore-mcp-production.ts :240 "const pg=require('pg');",
db (weak) ergoveritas1-alt-certscore.ai-d2546e2/scripts/test-authenticated-activity.ts :9 import pg from "pg";

install hooks 2

prepack ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-mcp/package.json :55 pnpm run build
prepack ergoveritas1-alt-certscore.ai-d2546e2/packages/certscore-sdk/package.json :40 pnpm run build

declared dependencies 7

@modelcontextprotocol/sdk@^1.30.0
@types/node@^24.0.0
@types/pg@^8.20.0
esbuild@^0.27.3
tsx@^4.21.0
turbo@^2.5.0
typescript@^5.8.2

obfuscation 1

dynamic require()/import() ergoveritas1-alt-certscore.ai-d2546e2/apps/web/server/oauth/automatic-connection-page.test.ts :39 const {page,state} = await import(`data:text/javascript;base64,${Buffer.from(result.outputFiles[0]!.text).toString('base64')}`);

perm:untrusted 2

untrusted (weak) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/http-integration.test.ts :364 const health = await fetch(`${origin}/healthz`).then((response) => response.json());
untrusted ergoveritas1-alt-certscore.ai-d2546e2/outputs/hosted-oauth-launch-2026-09-14/verify-public.mjs :13 const version=await fetch(origin+'/api/version').then(r=>r.json());const evidence={at:new Date().toISOString(),origin,version,pages:results,metadata:'pass',ordering:'pass',documentation:'pass',asset:{

transport_posture 2

binds all interfaces (0.0.0.0) ergoveritas1-alt-certscore.ai-d2546e2/apps/mcp/src/index.ts :803 server.listen(env.PORT, "0.0.0.0", () => {
network-listening, binds all interfaces, no auth detected ergoveritas1-alt-certscore.ai-d2546e2/scripts/diagnostics/proxy-tunnel-proof/benchmark.cjs :62 });await new Promise(r=>server.listen(44553,'0.0.0.0',r));

ergoveritas1-alt/certscore.ai

Drift inferred · capture-to-capture

skills & prompt files 4

danger signals42

filesystem 278

shell / exec 59

network 144

secrets 40

database 26

install hooks 2

declared dependencies 7

obfuscation 1

perm:untrusted 2

transport_posture 2

Navigate

Stream

Features

Display