MCP Observatory
5m ago Tracked 58,723 Last 5m ago 24h 2,553
github Rust re-analysis due deep scan · partial (218/4,877 files) unconfirmed MCP

generalbots/generalbots

github

Multi-agent AI platform for autonomous agents, agentic AI orchestration and LLM workflow automation. 80 self-hosted apps - Chat, CRM, Mail, Drive, Calendar, Advanced RAG. Open source, built in Rust.

maintainer
generalbots
licence
MIT
first seen
2026-09-13
last seen
2026-09-16
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in generalbots/generalbots
  2. HIGH code analysis flagged committed secret in generalbots/generalbots
  3. HIGH code analysis flagged committed secret in generalbots/generalbots
  4. HIGH code analysis flagged committed secret in generalbots/generalbots
  5. HIGH code analysis flagged committed secret in generalbots/generalbots
  6. HIGH code analysis flagged committed secret in generalbots/generalbots
  7. HIGH code analysis flagged committed secret in generalbots/generalbots
  8. HIGH code analysis flagged committed secret in generalbots/generalbots
  9. HIGH code analysis flagged committed secret in generalbots/generalbots
  10. HIGH code analysis flagged committed secret in generalbots/generalbots
  11. HIGH code analysis flagged committed secret in generalbots/generalbots
  12. HIGH code analysis flagged committed secret in generalbots/generalbots
  13. HIGH code analysis flagged committed secret in generalbots/generalbots
  14. HIGH code analysis flagged committed secret in generalbots/generalbots
capabilities 0 tools
transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit c5cd89d · analyzer v33 · 1h ago

skills & prompt files 20

danger signals6

code evidence v2.4.42 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 2735

filesystem 1

  • fs (weak) generalbots-generalbots-c5cd89d/botui/tests/sheet_modules.test.js :6 const fs = require("fs");

network 185

  • net generalbots-generalbots-c5cd89d/botplugin/background.js :126 const response = await fetch(`${settings.serverUrl}/api/v1/llm/process`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-appstores.js :65 const res = await fetch(`${API_BASE}/appstore/purchase`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-auth.js :16 const res = await fetch(`${API_BASE}/auth/login`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-cards.js :11 const res = await fetch(`${API_BASE}/payment-cards`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-checkout.js :114 const res = await fetch(`${API_BASE}/checkout`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-invoices.js :11 const res = await fetch(`${API_BASE}/invoices`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-offers.js :18 const res = await fetch(`${API_BASE}/organizations`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-plans.js :13 fetch(`${API_BASE}/plans`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-profile.js :11 const res = await fetch(`${API_BASE}/profile`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud-store.js :14 const res = await fetch(`${API_BASE}/store`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/cloud.js :52 const res = await fetch('/cloud/partials/sidebar.html');
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/marketplace.p1.js :31 const response = await fetch(endpoint, Object.assign({}, options, { headers }));
show 28 more
  • net generalbots-generalbots-c5cd89d/botui/ui/cloud/js/store/01_data.js :13 const res = await fetch('/api/products/items?limit=100');
  • net generalbots-generalbots-c5cd89d/botui/ui/login/js/cloud-auth.js :67 const res = await fetch(`${API_BASE}/auth/login`, {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/admin/admin-functions.p2.js :70 fetch("/api/settings/smtp/test", {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/analytics/analytics.js :78 const response = await fetch("/api/ui/analytics/chat", {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/attendant/attendant.p2.js :13 const response = await fetch(
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/attendant/attendant.p3.js :50 const response = await fetch(
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/attendant/attendant.p4.js :263 var resp = await fetch(
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/attendant/attendant.p5.js :129 fetch("/api/attendant/sessions/" + encodeURIComponent(id))
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/automations/automations.p1.js :21 const response = await fetch(endpoint, Object.assign({}, options, { headers }));
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/banking/banking.js :55 const res = await fetch(path, { headers, ...opts });
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/biometry/biometry.js :16 try{var r=await fetch(url,options);if(!r.ok)throw new Error('HTTP '+r.status);var t=await r.text();return t?JSON.parse(t):null}catch(e){showFeedback('API error: '+e.message,'error');return null}
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/browser/browser-agentic.js :28 return fetch(path, opts).then(function (r) { return r.json().catch(function () { return {}; }); });
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/calendar/calendar.js :377 fetch(`/api/calendar/events?start=${encodeURIComponent(start)}&end=${encodeURIComponent(end)}`)
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/calendar/modules/calendar-more.js :286 fetch('/api/calendar/CS.events', {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/chat-init.js :188 return fetch("/api/auth?bot_name=" + encodeURIComponent(botName), { headers: headers })
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/chat-mentions.js :66 fetch("/api/search/entities?type=" + encodeURIComponent(type) + "&q=" + encodeURIComponent(searchTerm || ""))
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/chat-theme.js :40 fetch("/api/bot/public?bot_name=" + encodeURIComponent(botName) + "&_=" + Date.now())
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/chat-websocket.js :45 fetch("/api/bot/public?bot_name=" + encodeURIComponent(bot), { credentials: "same-origin" })
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/modules/20_tabs.js :259 fetch("/api/user/workspace/tabs", {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/modules/21_tabs_events.js :182 return fetch(
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/modules/22_multichat.js :344 fetch("/api/auth?bot_name=" + encodeURIComponent(resolveBotName()), { headers: headers })
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/modules/40_consent_cards.js :86 fetch("/api/consent/resolve", {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/chat/projector-inline.p1.js :277 fetch(data.source_url)
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/compliance/compliance.js :214 var resp = await fetch(url, options);
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/concierge/concierge.js :38 fetch("/api/agent/plan", {
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/dashboards/dashboards.js :73 const response = await fetch("/api/dashboards");
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/database/modules/03_actions.js :7 var resp = await fetch(url, opts);
  • net generalbots-generalbots-c5cd89d/botui/ui/suite/database/modules/04_actions.js :276 var resp = await fetch(DB.API + '/table/' + encodeURIComponent(DB.currentTable) + '/export?format=csv');

145 more not shown — this panel samples each group; the count above is the real total.

declared dependencies 200

  • monaco-editor@^0.45.0
  • botautotask@*
  • botlib@*
  • http@1.0
  • botanalytics@*
  • botbrazil@*
  • boteval@*
  • botfraud@*
  • botgl@*
  • botinventory@*
  • botattendance@*
  • botattendant@*
show 28 more
  • botbilling@*
  • botbrowser@*
  • botcalendar@*
  • botcanvas@*
  • botchannels@*
  • botchannels-core@*
  • botcompliance@*
  • botcontacts@*
  • botdashboards@*
  • botdeployment@*
  • botdesigner@*
  • botagent@*
  • botautomation@*
  • botbrowserpolicy@*
  • botchannelbindings@*
  • botconnectors@*
  • botconsent@*
  • botdocs@*
  • botemail@*
  • botlearn@*
  • botlegal@*
  • botllm@*
  • botmaintenance@*
  • botmarketing@*
  • botmarketplace@*
  • botmemory@*
  • botbiometry@*
  • botbanking@*

160 more not shown — this panel samples each group; the count above is the real total.

perm:untrusted 13

  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/browser/browser-agentic.js :28 return fetch(path, opts).then(function (r) { return r.json().catch(function () { return {}; }); });
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/drive/modules/02_api.js :167 fetch(cleanUrl).then(function (r) { return r.text(); }).then(function (html) {
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/base/worker/workerMain.js :6 h)!==self.origin)&&this._canUseEval(o)){fetch(C).then(m=>{if(m.status!==200)throw new Error(m.statusText);return m.text()}).then(m=>{m=`${m}
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/language/json/jsonWorker.js :34 ypeof fetch<"u"&&(zr=function(t){return fetch(t).then(r=>r.text())});var st=class{_ctx;_languageService;_languageSettings;_languageId;constructor(r,i){this._ctx=r,this._languageSettings=i.languageSett
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/loader.js :6 h)!==self.origin)&&this._canUseEval(e)){fetch(i).then(o=>{if(o.status!==200)throw new Error(o.statusText);return o.text()}).then(o=>{o=`${o}
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/vs/base/worker/workerMain.js :6 h)!==self.origin)&&this._canUseEval(o)){fetch(C).then(m=>{if(m.status!==200)throw new Error(m.statusText);return m.text()}).then(m=>{m=`${m}
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/vs/language/json/jsonWorker.js :34 ypeof fetch<"u"&&(zr=function(t){return fetch(t).then(r=>r.text())});var st=class{_ctx;_languageService;_languageSettings;_languageId;constructor(r,i){this._ctx=r,this._languageSettings=i.languageSett
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/vs/loader.js :6 h)!==self.origin)&&this._canUseEval(e)){fetch(i).then(o=>{if(o.status!==200)throw new Error(o.statusText);return o.text()}).then(o=>{o=`${o}
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/js/window-manager.js :1018 fetch(hxGet + sep + "_=" + Date.now()).then((r) => r.text()).then((html) => {
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/meet/meet.js :624 return fetch(url, options).then(function (resp) {
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/vibe/vibe-agents.js :34 return fetch(path, options).then(function (r) {
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/vibe/vibe-dialogs.js :35 return fetch(path, options).then(function (resp) {
show 1 more
  • untrusted generalbots-generalbots-c5cd89d/botui/ui/suite/vibe/vibe-run.js :125 return fetch(path, opts).then(function (r) {