Pre-indexed code knowledge graph via treesitter, enchanced query with RAG, MCP server, private and local storage. Agent ready.
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
- HIGH code analysis flagged committed secret in jrollin/cartog
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 2eeb61a · analyzer v30 · 2w ago
skills & prompt files 3
danger signals1
- committed secret GitHub fine-grained PAT jrollin-cartog-2eeb61a/crates/cartog-indexer/src/redact.rs :273
github…(47 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 714
filesystem 2
- fs (weak) jrollin-cartog-2eeb61a/editors/vscode/src/resolve.test.ts :6
import * as fs from "fs"; - fs jrollin-cartog-2eeb61a/editors/vscode/src/resolve.ts :4
import * as fs from "fs";
secrets 1
- secrets (weak) jrollin-cartog-2eeb61a/benchmarks/fixtures/webapp_ts/src/config.ts :28
jwtSecret: process.env["JWT_SECRET"] ?? "dev-secret",
declared dependencies 70
- rmcp@1.7
- @pagefind/default-ui@^1.5.2
- astro@^6.4.2
- astro-pagefind@^1.8.6
- mermaid@^11.15.0
- cartog-core@0.32.2
- cartog-db@0.32.2
- cartog-languages@0.32.2
- cartog-indexer@0.32.2
- cartog-rag@0.32.2
- cartog-lsp@0.32.2
- cartog-watch@0.32.2
- cartog-mcp@0.32.2
- cartog-process-lock@0.32.2
- anyhow@1
- serde@1
- serde_json@1
- serde_norway@0.9
- schemars@1.2
- tracing@0.1
- tracing-subscriber@0.3
- thiserror@2
- globset@0.4
- ignore@0.4
- rusqlite@0.40
- sqlite-vec@0.1
- tree-sitter@0.26
- streaming-iterator@0.1
- tree-sitter-python@0.25
- tree-sitter-javascript@0.25
- tree-sitter-typescript@0.23
- tree-sitter-rust@0.24
- tree-sitter-go@0.25
- tree-sitter-ruby@0.23
- tree-sitter-java@0.23
- tree-sitter-php@0.24
- tree-sitter-dart@0.2
- tree-sitter-swift@0.7.3
- tree-sitter-kotlin-sg@0.4.1
- tree-sitter-c-sharp@0.23.5
- tree-sitter-c@0.24
- tree-sitter-cpp@0.23
- tree-sitter-vue-updated@0.1
- tree-sitter-svelte-ng@1
- tree-sitter-astro-next@0.1
- sha2@0.10
- regex@1
- notify@8
- notify-debouncer-mini@0.7
- ctrlc@3
- clap@4
- clap_complete@4
- clap_mangen@0.2
- rayon@1.10
- toml@0.8
- toml_edit@0.22
- dialoguer@0.11
- self_update@0.42
- directories@5
- libc@0.2
- windows-sys@0.59
- fastembed@5
- reqwest@0.12
- rust-s3@0.37
- tokio@1
- url@2
- criterion@0.5
- tempfile@3
- serial_test@3
- proptest@1