VC Deal Flow Signal — Track 350+ startups across 15 sectors using GitHub engineering velocity data. Open methodology, live dashboard, MCP server.
C elevated
- capability exposure inferred + 35
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 32s ago · see ecosystem CVEs →
Inferred surface — each links to servers holding it:
No known CVEs for this server.
No tool-safety findings — heuristic detectors run on the compute-risk cadence; a finding appears when a tool trips a rule.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit bc564ec · analyzer v32 · 1h ago
skills & prompt files 7
- agent-rules kindrat86-vc-deal-flow-signal-bc564ec/AGENTS.md
- skill kindrat86-vc-deal-flow-signal-bc564ec/claude-skill/SKILL.md
- agent-rules kindrat86-vc-deal-flow-signal-bc564ec/landing/CLAUDE.md
- agent-rules kindrat86-vc-deal-flow-signal-bc564ec/landing/agents.md
- agent-rules kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/AGENTS.md
- agent-rules kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/CLAUDE.md
- agent-rules kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/public/agents.md
danger signals37
- suspicious endpoint eu.i.posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/mcp-server/src/server.ts :49
const POSTHOG_HOST = "https://eu.i.posthog.com"; - suspicious endpoint posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/.well-known/compliance.json/route.ts :112
{ name: "PostHog (EU)", role: "Product analytics, no PII", url: "https://posthog.com/dpa" }, - suspicious endpoint posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/.well-known/subprocessors.json/route.ts :107
url: "https://posthog.com", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/.well-known/wikidata.json/route.ts :154
url: "https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/api/agents.json/route.ts :32
telegram: "https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/api/mcp/rpc/route.ts :1562
intentUrl: `https://t.me/share/url?url=${encodeURIComponent(site)}&text=${encodeURIComponent(body)}`, - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/citations/page.tsx :224
url: "https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/entities.json/route.ts :128
"https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/integrations/[tool]/page.tsx :80
"Join the channel at https://t.me/gitdealflow — no signup, no email.", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/integrations/page.tsx :73
href: "https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/knowledge-graph.json/route.ts :114
"https://t.me/gitdealflow", - suspicious endpoint eu.i.posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/layout.tsx :178
<link rel="preconnect" href="https://eu.i.posthog.com" crossOrigin="anonymous" /> - suspicious endpoint eu-assets.i.posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/layout.tsx :179
<link rel="dns-prefetch" href="https://eu-assets.i.posthog.com" /> - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/layout.tsx :396
<link rel="me" href="https://t.me/gitdealflow" /> - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/llms-full.txt/route.ts :115
Telegram: https://t.me/gitdealflow - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/llms.txt/route.ts :365
- Telegram: https://t.me/gitdealflow - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/page.tsx :437
serviceUrl: "https://t.me/gitdealflow", - suspicious endpoint posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/subprocessors/page.tsx :77
dpa: "https://posthog.com/dpa", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/telegram/page.tsx :15
const TELEGRAM_HREF = "https://t.me/gitdealflow"; - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/thanks/insider/page.tsx :142
href="https://t.me/gitdealflow" - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/welcome/page.tsx :191
href="https://t.me/gitdealflow" - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/app/wikidata/page.tsx :76
href: "https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/components/Footer.tsx :120
<a href="https://t.me/gitdealflow" className="hover:text-gray-200 transition-colors" rel="noopener noreferrer" target="_blank">Telegram</a> - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/components/RootIdentitySchema.tsx :187
"https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/components/TelegramCTA.tsx :68
const TELEGRAM_HREF = "https://t.me/gitdealflow"; - suspicious endpoint www.datadoghq.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/community-signal.ts :288
{ name: "DataDog Community", url: "https://www.datadoghq.com/community", platform: "forum", what: "Observability-customer community. Adjacent buyer pool.", yield: "secondary", status: "read" }, - suspicious endpoint posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/companies.ts :166
homepage: "https://posthog.com", - suspicious endpoint sentry.io (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/companies.ts :362
homepage: "https://sentry.io", - suspicious endpoint www.datadoghq.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/companies.ts :780
homepage: "https://www.datadoghq.com", - suspicious endpoint amplitude.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/companies.ts :1107
homepage: "https://amplitude.com", - suspicious endpoint mixpanel.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/companies.ts :1120
homepage: "https://mixpanel.com", - suspicious endpoint blog.sentry.io (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/from-stars-to-seed.ts :1278
sourceUrl: "https://blog.sentry.io", - suspicious endpoint posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/from-stars-to-seed.ts :1616
sourceUrl: "https://posthog.com/blog", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/content/standalone-faqs.ts :568
sourceHref: "https://t.me/gitdealflow", - suspicious endpoint t.me kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/lib/digest-email.ts :323
<td style="padding:0 8px;"><a href="https://t.me/gitdealflow" style="color:${BRAND.textMut};font-size:13px;font-weight:500;">Telegram</a></td> - suspicious endpoint api.telegram.org kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/lib/telegram/api-client.ts :9
const API_BASE = "https://api.telegram.org"; - suspicious endpoint eu.i.posthog.com (telemetry) kindrat86-vc-deal-flow-signal-bc564ec/pseo-site/next.config.ts :244
"script-src 'self' 'unsafe-inline' https://eu.i.posthog.com https://eu-assets.i.posthog.com https://scripts.refgrowcdn.com",
[](https://mcpobservatory.com/servers/github:kindrat86/vc-deal-flow-signal/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of kindrat86.