github Rust re-analysis due deep scan · partial (252/1,078 files) unconfirmed MCP

jeikl/jeikcode

github

极速、自主的终端开源 AI Coding Agent (Rust 驱动) | AST 微结构检索 · 稳定 KV Cache · 五级工具自愈

maintainer
jeikl
licence
MIT
first seen
2026-08-25
last seen
2026-09-15
releases · 30d
95
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in jeikl/jeikcode
  2. HIGH code analysis flagged committed secret in jeikl/jeikcode
  3. HIGH code analysis flagged committed secret in jeikl/jeikcode
  4. HIGH code analysis flagged committed secret in jeikl/jeikcode
  5. HIGH code analysis flagged committed secret in jeikl/jeikcode
  6. HIGH code analysis flagged committed secret in jeikl/jeikcode
  7. HIGH code analysis flagged committed secret in jeikl/jeikcode
  8. HIGH code analysis flagged committed secret in jeikl/jeikcode
  9. HIGH code analysis flagged committed secret in jeikl/jeikcode
  10. HIGH code analysis flagged committed secret in jeikl/jeikcode
  11. HIGH code analysis flagged committed secret in jeikl/jeikcode
  12. HIGH code analysis flagged committed secret in jeikl/jeikcode
  13. HIGH code analysis flagged committed secret in jeikl/jeikcode
  14. HIGH code analysis flagged committed secret in jeikl/jeikcode
  15. HIGH code analysis flagged committed secret in jeikl/jeikcode
  16. HIGH code analysis flagged committed secret in jeikl/jeikcode
  17. HIGH code analysis flagged committed secret in jeikl/jeikcode
  18. HIGH code analysis flagged committed secret in jeikl/jeikcode
  19. HIGH code analysis flagged committed secret in jeikl/jeikcode
  20. HIGH code analysis flagged committed secret in jeikl/jeikcode
capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 921082f · analyzer v33 · 1h ago

skills & prompt files 3

danger signals1

code evidence v6.9.11 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 691

filesystem 17

  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/scripts/bundle-daemon.js :2 const fs = require('fs');
  • fs jeikl-jeikcode-921082f/extensions/vscode/src/chat/provider.ts :4 import * as fs from 'fs';
  • fs jeikl-jeikcode-921082f/extensions/vscode/src/daemon/process.ts :4 import * as fs from 'fs';
  • fs jeikl-jeikcode-921082f/extensions/vscode/webview-ui/esbuild.js :2 const fs = require('fs');
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/at-mention.test.ts :3 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/i18n-regression.test.ts :2 import { existsSync, readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/mode-selector-style.test.ts :2 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/provider-queue-regression.test.ts :3 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/rendering-regression.test.ts :2 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/run-tests.js :2 const { mkdtempSync, rmSync } = require('node:fs');
  • fs (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/slash-picker-regression.test.ts :3 import { readFileSync } from 'node:fs';
  • fs jeikl-jeikcode-921082f/packages/npm/bin/atomcode.js :5 const { existsSync } = require("fs");
show 5 more
  • fs jeikl-jeikcode-921082f/site/build-search-index.mjs :11 import { promises as fs } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/webui/src/lib/composerStyles.test.ts :3 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/webui/src/lib/menuStyles.test.ts :3 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/webui/src/lib/userInputCard.test.ts :3 import { readFileSync } from 'node:fs';
  • fs (weak) jeikl-jeikcode-921082f/webui/vite.config.ts :3 import fs from 'node:fs';

shell / exec 4

  • shell jeikl-jeikcode-921082f/extensions/jetbrains/src/main/resources/markdown/highlight.min.js :133 }),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex
  • shell jeikl-jeikcode-921082f/extensions/vscode/src/daemon/process.ts :2 import * as child_process from 'child_process';
  • shell (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/run-tests.js :1 const { spawnSync } = require('node:child_process');
  • shell jeikl-jeikcode-921082f/packages/npm/bin/atomcode.js :4 const { spawn } = require("child_process");

network 6

  • net jeikl-jeikcode-921082f/extensions/vscode/src/daemon/client.ts :1 import * as http from 'http';
  • net (weak) jeikl-jeikcode-921082f/extensions/vscode/webview-ui/test/daemon-client-error.test.ts :2 import * as http from 'node:http';
  • net (weak) jeikl-jeikcode-921082f/site/docs/docs.js :178 LOAD_PROMISE=fetch(resolveIndexUrl(),{cache:'no-cache'})
  • net jeikl-jeikcode-921082f/webui/src/api.ts :61 return fetch(input, { ...init, credentials: 'include', headers });
  • net jeikl-jeikcode-921082f/webui/src/components/Chat.tsx :335 return fetch(dataUrl).then((r) => r.blob());
  • net jeikl-jeikcode-921082f/webui/src/components/Sidebar.tsx :830 // Reopening forces a fresh fetch (and restarts the connecting poll) so a

declared dependencies 11

  • puppeteer@^24.40.0
  • tailwindcss@^3.4.19
  • agent-client-protocol@=1.0.1
  • anyhow@1
  • similar@2
  • com.google.code.gson:gson@2.11.0
  • org.jetbrains.kotlinx:kotlinx-serialization-json@1.8.1
  • org.jetbrains.kotlinx:kotlinx-coroutines-core@1.10.2
  • org.jetbrains.kotlinx:kotlinx-coroutines-swing@1.10.2
  • org.jetbrains.kotlinx:kotlinx-collections-immutable@0.3.8
  • junit:junit@4.13.2

jetbrains-plugin 1

  • opaque (low) jeikl-jeikcode-921082f/extensions/jetbrains/src/main/resources/META-INF/plugin.xml bundled JetBrains plugin "AtomCode" (jeikl-jeikcode-921082f/extensions/jetbrains/src/main/resources/META-INF/plugin.xml) — presence-detected; review the plugin descriptor

perm:untrusted 1

  • untrusted jeikl-jeikcode-921082f/webui/src/components/Chat.tsx :335 return fetch(dataUrl).then((r) => r.blob());