github JavaScript analyzed 8684fbf

jeremylongshore/bobs-big-brain-plugin

github

Bob's Big Brain — the governed team brain, as a local-first Claude Code + Cowork plugin. Turn your own files into cited (qmd://) memory with a tamper-evident, SHA-256 hash-chained audit trail. ONE plugin, two modes: local needs no daemon or network; team connects to the one brain over your tailnet.

maintainer
jeremylongshore
license
Apache-2.0
first seen
2026-07-14
last seen
2026-07-20
releases · 30d
1
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8684fbf · analyzer v28 · 1d ago

skills & prompt files 4

code evidence vv1.2.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 37

filesystem 13

  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/bin/init.mjs :30 import { existsSync, rmSync, readFileSync, statSync, readdirSync, mkdirSync, copyFileSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/hooks/enable-autocapture.mjs :19 import { readFileSync, writeFileSync, existsSync, mkdirSync, rmSync, copyFileSync, chmodSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/hooks/session-end-capture.mjs :33 import { existsSync, mkdirSync, openSync, readFileSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/plugin-runtime/bootstrap.cjs :13 const { existsSync, mkdirSync, rmSync, statSync } = require('node:fs');
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/b1-inbox-sweep.mjs :35 import { mkdtempSync, rmSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/bootstrap-clean-install.mjs :10 import { cpSync, existsSync, mkdirSync, mkdtempSync, rmSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/check-lock.mjs :8 import { readFileSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/smoke.mjs :25 import { mkdtempSync, rmSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/src/anchor.ts :3 import { existsSync, mkdirSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/src/local-server.ts :16 import { existsSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/src/remote-server.ts :34 import { mkdir, readdir, readFile, unlink, writeFile } from 'node:fs/promises';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/src/team-config.ts :33 import { readFileSync, statSync } from 'node:fs';
  • fs jeremylongshore-bobs-big-brain-plugin-8684fbf/src/write-lock.ts :1 import { closeSync, mkdirSync, openSync } from 'node:fs';

shell / exec 8

  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/bin/init.mjs :31 import { execFileSync } from 'node:child_process';
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/build.mjs :20 import { execSync } from 'node:child_process';
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/hooks/session-end-capture.mjs :32 import { spawn } from 'node:child_process';
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/plugin-runtime/bootstrap.cjs :16 const { spawnSync } = require('node:child_process');
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/bootstrap-clean-install.mjs :8 import { spawn } from 'node:child_process';
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/smoke.mjs :87 `brain_audit_verify ok (${ver.totalEvents} event(s), ${ver.anchorCount} anchor(s), ${ver.tamperSignatures} tamper, ${ver.chainForks} fork(s))`,
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/src/anchor.ts :2 import { execFile, execFileSync } from 'node:child_process';
  • shell jeremylongshore-bobs-big-brain-plugin-8684fbf/src/local-server.ts :140 parts.push(`${forkCount} benign chain-ordering fork(s) (known artifact)`);

network 3

  • net jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke-team.mjs :7 import { createServer } from 'node:http';
  • net jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/inbox-approve.mjs :21 import { createServer } from 'node:http';
  • net jeremylongshore-bobs-big-brain-plugin-8684fbf/src/remote-server.ts :243 res = await fetch(`${API_URL.replace(/\/+$/, '')}/api/candidates`, {

secrets 3

  • secrets jeremylongshore-bobs-big-brain-plugin-8684fbf/bin/init.mjs :332 if (!args.indexOnly && !process.env.DEEPSEEK_API_KEY) {
  • secrets jeremylongshore-bobs-big-brain-plugin-8684fbf/src/index.ts :62 if (mode === 'team' && !isConfigured(process.env['TEAMKB_API_TOKEN'])) {
  • secrets jeremylongshore-bobs-big-brain-plugin-8684fbf/src/remote-server.ts :43 const API_TOKEN = process.env['TEAMKB_API_TOKEN'];

database 1

  • db jeremylongshore-bobs-big-brain-plugin-8684fbf/smoke/b1-inbox-sweep.mjs :33 import Database from 'better-sqlite3';

declared dependencies 22

  • @modelcontextprotocol/sdk@^1.29.0
  • better-sqlite3@^12.10.0
  • fs-ext@^2.1.1
  • zod@^4.4.3
  • @intentsolutions/audit-harness@^1.3.0
  • @qmd-team-intent-kb/claude-runtime@link:../bobs-big-brain-registrar/packages/claude-runtime
  • @qmd-team-intent-kb/common@link:../bobs-big-brain-registrar/packages/common
  • @qmd-team-intent-kb/curator@link:../bobs-big-brain-registrar/apps/curator
  • @qmd-team-intent-kb/git-exporter@link:../bobs-big-brain-registrar/apps/git-exporter
  • @qmd-team-intent-kb/policy-engine@link:../bobs-big-brain-registrar/packages/policy-engine
  • @qmd-team-intent-kb/qmd-adapter@link:../bobs-big-brain-registrar/packages/qmd-adapter
  • @qmd-team-intent-kb/schema@link:../bobs-big-brain-registrar/packages/schema
  • @qmd-team-intent-kb/store@link:../bobs-big-brain-registrar/packages/store
  • @types/better-sqlite3@^7.6.11
  • @types/fs-ext@^2.0.3
  • @types/node@^22.10.0
  • @vitest/coverage-v8@^4.1.10
  • esbuild@^0.28.1
  • eslint@^10.6.0
  • typescript@^5.7.0
  • typescript-eslint@^8.63.0
  • vitest@^4.1.10

obfuscation 1

  • dynamic require()/import() jeremylongshore-bobs-big-brain-plugin-8684fbf/scripts/anchor-on-transition.test.mjs :96 ({ anchorChainHead } = await import(`file://${outfile}`));