The Simple Agent Development Kit.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution ×7 in evilsocket/nerve
transport stdio · streamable-http · sse counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 3c8b9c3 · analyzer v17 · 1h ago
danger signals7
- dynamic code execution__import__()evilsocket-nerve-3c8b9c3/nerve/cli/create.py:59
module = __import__(f"nerve.tools.namespaces.{modname}", fromlist=[""]) - dynamic code executioneval()/exec()evilsocket-nerve-3c8b9c3/nerve/cli/eval.py:44
def eval( - dynamic code execution__import__()evilsocket-nerve-3c8b9c3/nerve/cli/namespaces.py:26
module = __import__(f"nerve.tools.namespaces.{modname}", fromlist=[""]) - dynamic code execution__import__()evilsocket-nerve-3c8b9c3/nerve/tools/compiler.py:75
module = __import__(f"nerve.tools.namespaces.{namespace}", fromlist=[""]) - dynamic code executioneval()/exec()evilsocket-nerve-3c8b9c3/nerve/tools/compiler.py:152
exec(func_body, func_namespace) - dynamic code executioneval()/exec()evilsocket-nerve-3c8b9c3/nerve/tools/mcp/compiler.py:136
exec(func_body, type_defs) - dynamic code executioneval()/exec()evilsocket-nerve-3c8b9c3/nerve/tools/namespaces/anytool.py:43
exec(code, func_namespace)
evidence-backed
findings quoted directly from the published source artifact — not inferred
filesystem 23
- fs evilsocket-nerve-3c8b9c3/nerve/cli/agents.py :1
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/create.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/eval.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/install.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/replay.py :3
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/serve.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/uninstall.py :1
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/cli/utils.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/defaults.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/models.py :1
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/__init__.py :3
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/agent.py :1
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/eval.py :2
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/flow.py :1
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/logging.py :1
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/runner.py :5
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/runtime/state.py :4
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/tools/compiler.py :7
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/tools/mcp/client.py :3
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/tools/mcp/compiler.py :4
import pathlib - fs evilsocket-nerve-3c8b9c3/nerve/tools/namespaces/filesystem.py :38
with open(path, "rb") as f: - fs evilsocket-nerve-3c8b9c3/nerve/tools/namespaces/filesystem_w.py :37
with open(path, "w") as f: - fs evilsocket-nerve-3c8b9c3/nerve/tools/utils.py :1
from pathlib import Path
shell / exec 3
- shell evilsocket-nerve-3c8b9c3/nerve/cli/create.py :202
os.system(f"nerve run {path}") - shell evilsocket-nerve-3c8b9c3/nerve/tools/namespaces/filesystem.py :30
return os.popen(f"ls -la {path}").read() - shell evilsocket-nerve-3c8b9c3/nerve/tools/namespaces/shell.py :8
import subprocess
network 3
- net evilsocket-nerve-3c8b9c3/nerve/cli/agents.py :5
import requests - net evilsocket-nerve-3c8b9c3/nerve/cli/install.py :8
import requests - net evilsocket-nerve-3c8b9c3/nerve/runtime/builtin.py :5
import socket
declared dependencies 26
- pydantic-yaml@^1.4.0
- jinja2@^3.1.5
- typer@^0.15.1
- litellm@^1.75.5.post1
- loguru@^0.7.3
- ollama@^0.4.7
- click@^8.1.8
- inquirer@^3.4.0
- pyautogui@{ version =
- pyscreeze@{ version =
- pillow@{ version =
- pyperclip@{ version =
- types-pyautogui@{ version =
- types-pyperclip@{ version =
- termcolor@^2.5.0
- requests@^2.32.3
- types-requests@^2.32.0.20250328
- packaging@^24.2
- mcp@^1.12.2
- uvicorn@^0.34.0
- fastapi@^0.115.12
- uuid@^1.30
- starlette@^0.46.1
- typer-di@^0.1.3
- natsort@^8.4.0
- fastparquet@^2024.11.0