Agent-native CLI + MCP server for healthcare conferences (Medicare, Medicaid, payer, quality). The directory AI agents query for healthcare conferences.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 6 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
conference_ics
-
conferences_near
-
directory_stats
-
get_conference
-
list_conferences
-
search_conferences
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 3a1501d · analyzer v33 · 1d ago
skills & prompt files 1
danger signals2
- suspicious endpoint us.i.posthog.com (telemetry) healthleader-cli-3a1501d/src/core/analytics.ts :12
const POSTHOG_HOST = "https://us.i.posthog.com"; - suspicious endpoint 169.254.169.254 (cloud metadata) healthleader-cli-3a1501d/test/render.test.ts :32
assert.throws(() => safeWebhookUrl("https://169.254.169.254/latest/meta-data"), /private\/loopback/);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 25
filesystem 5
- fs (weak) healthleader-cli-3a1501d/scripts/build-openapi.ts :6
import { writeFile } from "node:fs/promises"; - fs (weak) healthleader-cli-3a1501d/scripts/build-snapshot.ts :6
import { writeFile } from "node:fs/promises"; - fs healthleader-cli-3a1501d/src/cli/render.ts :1
import { writeFile } from "node:fs/promises"; - fs healthleader-cli-3a1501d/src/core/analytics.ts :3
import { mkdirSync, readFileSync, writeFileSync } from "node:fs"; - fs healthleader-cli-3a1501d/src/core/snapshot.ts :1
import { readFile } from "node:fs/promises";
network 3
- net healthleader-cli-3a1501d/src/cli/render.ts :155
const res = await fetch(url, { - net healthleader-cli-3a1501d/src/core/analytics.ts :51
fetch(`${POSTHOG_HOST}/capture/`, { - net healthleader-cli-3a1501d/src/core/client.ts :42
res = await fetch(url, {
secrets 1
- secrets healthleader-cli-3a1501d/src/core/config.ts :11
process.env.HEALTHLEADER_SUPABASE_ANON_KEY ??
tool registrations 6
- list_conferences healthleader-cli-3a1501d/src/mcp/server.ts :36
- get_conference healthleader-cli-3a1501d/src/mcp/server.ts :103
- search_conferences healthleader-cli-3a1501d/src/mcp/server.ts :121
- conferences_near healthleader-cli-3a1501d/src/mcp/server.ts :140
- conference_ics healthleader-cli-3a1501d/src/mcp/server.ts :160
- directory_stats healthleader-cli-3a1501d/src/mcp/server.ts :177
install hooks 1
- prepublishOnly healthleader-cli-3a1501d/package.json :52
npm run build
declared dependencies 5
- @modelcontextprotocol/sdk@^1.0.0
- zod@^3.23.0
- @types/node@^22.0.0
- tsx@^4.19.0
- typescript@^5.6.0