github Python analyzed f31d38d

gabriel-dantas98/tapioca

Repositório central de skills, agents e MCPs reusáveis pro Claude Code e Cursor (estilo platform engineering).

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f31d38d · analyzer v33 · 3d ago

over-broad OAuth scope https://www.googleapis.com/auth/spreadsheets gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/sheets_agent.py :40 "https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scope https://www.googleapis.com/auth/documents gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/sheets_agent.py :41 "https://www.googleapis.com/auth/documents",

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 20

fs gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/evals/grade_runs.py :20 from pathlib import Path
fs gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/evals/run_integration.py :22 from pathlib import Path
fs gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/evals/run_static.py :10 from pathlib import Path
fs (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/apps_script_deploy.py :8 from pathlib import Path
fs (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/canvas_export/cli.py :6 from pathlib import Path
fs (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/canvas_export/manifest.py :5 from pathlib import Path
fs (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/canvas_export/renderer.py :4 from pathlib import Path
fs (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/sheets_agent.py :12 import shutil
fs gabriel-dantas98-tapioca-f31d38d/skills/multi-gen/build_preview.py :18 import shutil
fs gabriel-dantas98-tapioca-f31d38d/skills/multi-gen/run_engines.py :23 import shutil
fs (weak) gabriel-dantas98-tapioca-f31d38d/skills/multi-gen/tests/smoke_test.py :74 with open(os.path.join(d, "briefing.json"), "w") as f:

shell gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/evals/run_integration.py :19 import subprocess
shell gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/evals/run_static.py :7 import subprocess
shell (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/sheets_agent.py :14 import subprocess
shell gabriel-dantas98-tapioca-f31d38d/skills/multi-gen/build_preview.py :19 import subprocess
shell gabriel-dantas98-tapioca-f31d38d/skills/multi-gen/run_engines.py :25 import subprocess

net (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/apps_script_deploy.py :6 import urllib.error
net (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/sheets_agent.py :13 import socket

secrets (weak) gabriel-dantas98-tapioca-f31d38d/skills/google-sheets-apps-script/scripts/sheets_agent.py :140 env_path = os.environ.get("GOOGLE_SHEETS_AGENT_CLIENT_SECRET")
secrets gabriel-dantas98-tapioca-f31d38d/skills/multi-gen/run_engines.py :50 if os.environ.get("CURSOR_API_KEY"):