github HTML analyzed · update queued 2e0e974

kindrat86/sipi-bot

sipi.bot — Spend Firewall for AI Agents. Pre-spend transaction governance for autonomous agents. MCP server, HTTP API, CLI. 53/53 eval, MIT.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 2e0e974 · analyzer v28 · 1w ago

suspicious endpoint eu.i.posthog.com (telemetry) kindrat86-sipi-bot-2e0e974/public/analytics.js :6 var POSTHOG_HOST = "https://eu.i.posthog.com";

code evidence vv0.1.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 46

net kindrat86-sipi-bot-2e0e974/integrations/sipiGuard.ts :24 const res = await fetch(`${SIPI_URL}/v1/transactions/evaluate`, {

secrets kindrat86-sipi-bot-2e0e974/integrations/sipiGuard.ts :15 const SIPI_API_KEY = process.env.SIPI_API_KEY; // optional, for hosted tiers