github TypeScript analyzed 79624df

inite-ai/inite-mcp

MCP server for the INITE AI visibility audit — see how ChatGPT, Claude, Gemini and Perplexity read a website, from inside your agent.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools

transport stdio · streamable-http · http counts 1 tools · 0 res · 0 prompts permission surface via README inference

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 79624df · analyzer v33 · 1d ago

suspicious endpoint 169.254.169.254 (cloud metadata) inite-ai-inite-visibility-79624df/test/checks.test.js :86 'http://169.254.169.254',

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 8

fs inite-ai-inite-visibility-79624df/src/auth.ts :1 import { mkdir, readFile, writeFile, chmod } from "node:fs/promises";
fs (weak) inite-ai-inite-visibility-79624df/test/auth.test.js :3 import { writeFile, mkdtemp, chmod, stat } from 'node:fs/promises'
fs (weak) inite-ai-inite-visibility-79624df/test/package.test.js :3 import { readFileSync } from 'node:fs'

shell inite-ai-inite-visibility-79624df/src/auth.ts :4 import { spawn } from "node:child_process";

net inite-ai-inite-visibility-79624df/src/auth.ts :2 import { createServer } from "node:http";
net inite-ai-inite-visibility-79624df/src/checks.ts :82 const res = await fetch(url, {

secrets inite-ai-inite-visibility-79624df/src/auth.ts :265 const fromEnv = process.env.INITE_TOKEN?.trim();
secrets inite-ai-inite-visibility-79624df/src/bin.ts :26 ? `Signed in. Token from ${process.env.INITE_TOKEN ? "INITE_TOKEN" : TOKEN_PATH}.\n`
secrets (weak) inite-ai-inite-visibility-79624df/test/auth.test.js :22 process.env.INITE_TOKEN = 'from-env'

prepublishOnly inite-ai-inite-visibility-79624df/package.json :40 npm run build
prepare inite-ai-inite-visibility-79624df/package.json :41 npm run build