Aggregate 3 image/diagram MCP servers (openai-image, excalidraw, mermaid) behind a single OAuth 2.1-protected subdomain via Docker Compose
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 1 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
generate_image
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit fb7c9cb · analyzer v33 · 1w ago
skills & prompt files 1
- agent-rules kitepon-image-generator-fb7c9cb/CLAUDE.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 9
filesystem 4
- fs kitepon-image-generator-fb7c9cb/server/image-hub-app/src/auth.ts :5
import { mkdirSync } from 'node:fs'; - fs kitepon-image-generator-fb7c9cb/server/image-hub-app/src/index.ts :9
import { createReadStream } from 'node:fs'; - fs kitepon-image-generator-fb7c9cb/server/image-hub-app/src/intercept.ts :22
import { copyFileSync, existsSync, mkdirSync, readFileSync, statSync } from 'node:fs'; - fs kitepon-image-generator-fb7c9cb/server/image-hub-app/src/storage.ts :4
import { mkdirSync } from 'node:fs';
network 1
- net kitepon-image-generator-fb7c9cb/server/image-hub-app/src/index.ts :181
const upstreamRes = await fetch(upstream, init);
secrets 1
- secrets kitepon-image-generator-fb7c9cb/server/image-hub-app/src/config.ts :47
const rawStaticToken = process.env.IMAGEHUB_STATIC_BEARER_TOKEN ?? '';
database 2
- db kitepon-image-generator-fb7c9cb/server/image-hub-app/src/auth.ts :9
import Database from 'better-sqlite3'; - db kitepon-image-generator-fb7c9cb/server/image-hub-app/src/storage.ts :6
import Database from 'better-sqlite3';
tool registrations 1
- generate_image kitepon-image-generator-fb7c9cb/server/openai-image-mcp/server.py :212
declared dependencies 10
- @modelcontextprotocol/sdk@^1.29.0
- better-sqlite3@^12.9.0
- express@^5.2.1
- http-proxy-middleware@^3.0.5
- jose@^5.9.6
- @types/better-sqlite3@^7.6.13
- @types/express@^5.0.0
- @types/node@^22.10.0
- tsx@^4.19.2
- typescript@^5.7.2
transport_posture 1
- binds all interfaces (0.0.0.0) kitepon-image-generator-fb7c9cb/server/image-hub-app/src/index.ts :234
app.listen(config.port, '0.0.0.0', () => {