github analyzed 8ce8bf9

helius-labs/core-ai

Official Helius AI tooling repository

maintainer: helius-labs
license: MIT
first seen: 2026-06-08
last seen: 2026-06-11
releases · 30d: 0
short id

risk80/100 · heuristic grade

E critical

capability exposureinferred+35
recent driftinferred+20
tool safetyinferred+25

inferred

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

graded 13m ago · see ecosystem CVEs →

risk trajectory2 movements

4d agoD · 72 → E · 80
4d agoD · 69 → D · 72

capability exposuregrade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities0 CVEs

no known CVEs for this server.

tool safety3 findings · grade factor +25

highdangerous code
credential logged in 1 file(s) · suspicious bundled script in 1 file(s)
highexfiltration comboheliusChain
single tool reads + sends: net, secrets
highhidden prompt content
11 file(s) with hidden prompt content: helius-labs-core-ai-8ce8bf9/.agents/skills/helius-dflow/prompts/claude.system.md (hidden-directive), helius-labs-core-ai-8ce8bf9/.agents/ski…

skills & danger signalsgithub-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8ce8bf9 · analyzer v17 · 23h ago

skills & prompt files 47

⚠ hidden: prompt-file: hidden-directivehelius-labs-core-ai-8ce8bf9/.agents/skills/helius-dflow/prompts/claude.system.md:2Claude API — use as a system prompt block
⚠ hidden: prompt-file: skill-exfilhelius-labs-core-ai-8ce8bf9/.agents/skills/helius-dflow/prompts/full.md:2212secret→sink:
⚠ hidden: prompt-file: hidden-directivehelius-labs-core-ai-8ce8bf9/.agents/skills/helius-jupiter/prompts/claude.system.md:2Claude API — use as a system prompt block
⚠ hidden: prompt-file: skill-exfilhelius-labs-core-ai-8ce8bf9/.agents/skills/helius-jupiter/prompts/full.md:1202secret→sink:
⚠ hidden: prompt-file: hidden-directivehelius-labs-core-ai-8ce8bf9/.agents/skills/helius-okx/prompts/claude.system.md:2Claude API — use as a system prompt block
⚠ hidden: prompt-file: skill-exfilhelius-labs-core-ai-8ce8bf9/.agents/skills/helius-okx/prompts/full.md:307secret→sink:
⚠ hidden: prompt-file: hidden-directivehelius-labs-core-ai-8ce8bf9/.agents/skills/helius-phantom/prompts/claude.system.md:2Claude API — use as a system prompt block
⚠ hidden: prompt-file: skill-exfilhelius-labs-core-ai-8ce8bf9/.agents/skills/helius-phantom/prompts/full.md:749secret→sink: if (subpath.startsWith('v0/') || subpath.startsWith('v1/')) {
⚠ hidden: prompt-file: hidden-directivehelius-labs-core-ai-8ce8bf9/.agents/skills/helius/prompts/claude.system.md:2Claude API — use as a system prompt block
⚠ hidden: prompt-file: skill-exfilhelius-labs-core-ai-8ce8bf9/.agents/skills/helius/prompts/full.md:1487secret→sink:
⚠ hidden: prompt-file: hidden-directivehelius-labs-core-ai-8ce8bf9/.agents/skills/svm/prompts/claude.system.md:2Claude API — use as a system prompt block

danger signals2

suspicious bundled scriptsuspicious bundled scripthelius-labs-core-ai-8ce8bf9/helius-skills/helius-okx/install.sh:78echo " curl -fsSL https://raw.githubusercontent.com/okx/onchainos-skills/main/install.sh | bash"
credential in logscredential in loghelius-labs-core-ai-8ce8bf9/helius-cli/src/commands/signup.ts:552console.log(`API Key: ${chalk.cyan(apiKey)}`);

other grade factorsevidence elsewhere

recent drift+20 capability drift →

embed badgereadme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:helius-labs/core-ai/badge.svg)](https://mcpobservatory.com/servers/github:helius-labs/core-ai/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of helius-labs.

helius-labs/core-ai

skills & prompt files 47

danger signals2

Navigate

Stream

Display