github Rust re-analysis due deep scan · partial (218/4,877 files)
unconfirmed MCP
generalbots/generalbots
Multi-agent AI platform for autonomous agents, agentic AI orchestration and LLM workflow automation. 80 self-hosted apps - Chat, CRM, Mail, Drive, Calendar, Advanced RAG. Open source, built in Rust.
C elevated
- capability exposure inferred + 10
- recent drift inferred + 20
- tool safety inferred + 12
- abandonment inferred + 6
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 3d ago · see ecosystem CVEs →
- C · 40 → C · 48
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
committed secret: committed .env · dynamic exec: new Function()
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit c5cd89d · analyzer v33 · 1h ago
skills & prompt files 20
- agent-rules generalbots-generalbots-c5cd89d/AGENTS.md
- agent-rules generalbots-generalbots-c5cd89d/botbook/AGENTS.md
- skill generalbots-generalbots-c5cd89d/botskills/automation/agent-browser/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/documentation/documentation-writer/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/engineering/extreme-software-optimization/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/engineering/systematic-debugging/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/engineering/verification-before-completion/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/frontend/next-best-practices/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/frontend/shadcn/SKILL.md
- agent-rules generalbots-generalbots-c5cd89d/botskills/frontend/zod/AGENTS.md
- skill generalbots-generalbots-c5cd89d/botskills/frontend/zod/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/integration/mcp-builder/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/integration/skill-creator/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/operations/sentry-cli/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/research/context7/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/research/exa-web-search-free/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/research/firecrawl/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/testing/vitest/SKILL.md
- skill generalbots-generalbots-c5cd89d/botskills/testing/webapp-testing/SKILL.md
- prompt-file generalbots-generalbots-c5cd89d/prompts/integratedsuite.md
danger signals6
- dynamic code execution new Function() generalbots-generalbots-c5cd89d/botui/ui/suite/chat/chat-messages.js :101
var fn = new Function(text); - dynamic code execution new Function() generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/base/worker/workerMain.js :6
(o?self.eval(o.createScript("","true")):new Function("true")).call(self),!0}catch{return!1}}class i{constructor(){this._cachedCanUseEval=null}_canUseEval(o){return this._cachedCanUseEval===null&&(this - dynamic code execution new Function() generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/loader.js :6
(e?self.eval(e.createScript("","true")):new Function("true")).call(self),!0}catch{return!1}}class h{constructor(){this._cachedCanUseEval=null}_canUseEval(e){return this._cachedCanUseEval===null&&(this - dynamic code execution new Function() generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/vs/base/worker/workerMain.js :6
(o?self.eval(o.createScript("","true")):new Function("true")).call(self),!0}catch{return!1}}class i{constructor(){this._cachedCanUseEval=null}_canUseEval(o){return this._cachedCanUseEval===null&&(this - dynamic code execution new Function() generalbots-generalbots-c5cd89d/botui/ui/suite/js/vendor/vs/vs/loader.js :6
(e?self.eval(e.createScript("","true")):new Function("true")).call(self),!0}catch{return!1}}class h{constructor(){this._cachedCanUseEval=null}_canUseEval(e){return this._cachedCanUseEval===null&&(this - committed secret committed .env generalbots-generalbots-c5cd89d/botserver/.env.embedded :1
env file shipped with populated values
- recent drift +20 capability drift →
- abandonment +6 abandonment hub →
[](https://mcpobservatory.com/servers/github:generalbots/generalbots/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of generalbots.