github analyzed 84edc22

firerpa/lamda

The most powerful Android RPA agent framework, next generation mobile automation.

Drift inferred · capture-to-capture

HIGH 2026-06-14 code analysis flagged committed secret ×6, dynamic code execution ×2 in firerpa/lamda

capabilities0 tools

transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsgithub-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 84edc22 · analyzer v17 · 1h ago

dynamic code executioneval()/exec()firerpa-lamda-84edc22/setup.py:5exec(open("lamda/__init__.py", "rt").read())
dynamic code executioneval()/exec()firerpa-lamda-84edc22/tools/debugimage.py:39area=eval(args.area),
committed secretprivate keyfirerpa-lamda-84edc22/tools/id_rsa:1PEM private key block (redacted)
committed secretprivate keyfirerpa-lamda-84edc22/tools/root.key:1PEM private key block (redacted)
committed secretprivate keyfirerpa-lamda-84edc22/tools/rsync.sh:19PEM private key block (redacted)
committed secretprivate keyfirerpa-lamda-84edc22/tools/scp.sh:19PEM private key block (redacted)
committed secretprivate keyfirerpa-lamda-84edc22/tools/ssh.sh:10PEM private key block (redacted)
committed secretprivate keyfirerpa-lamda-84edc22/tools/test.pem:2PEM private key block (redacted)

code evidencevv9.25 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs firerpa-lamda-84edc22/extensions/example_mcp_extension.py :26 blob = base64.b64encode(open(absolute_path, "rb").read()).decode()
fs firerpa-lamda-84edc22/lamda/client.py :1515 with open(certfile, "rb") as fd:
fs firerpa-lamda-84edc22/lamda/types.py :29 with open(fpath, "wb") as fd:
fs firerpa-lamda-84edc22/setup.py :5 exec(open("lamda/__init__.py", "rt").read())
fs firerpa-lamda-84edc22/tools/adb_pubkey.py :31 open("adbkey.lamda", "w").write(pubkey)
fs firerpa-lamda-84edc22/tools/cert.py :29 with open("root.key", "rb") as f:
fs firerpa-lamda-84edc22/tools/debugimage.py :35 image = Image.open(d.screenshot(95))
fs firerpa-lamda-84edc22/tools/frida_script_generate.py :17 with open(bridge, "r", encoding="utf-8") as f:

shell firerpa-lamda-84edc22/tools/adb_pubkey.py :30 pubkey = os.popen("adb pubkey adbkey").read()
shell firerpa-lamda-84edc22/tools/ida.py :7 import subprocess
shell firerpa-lamda-84edc22/tools/startmitm.py :15 import subprocess