github analyzed cda2bf9 unconfirmed MCP

kossov-it/cakeagent

Minimal, secure personal AI agent — Claude Agent SDK + Telegram + MCP

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 1 tools

transport — counts 1 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit cda2bf9 · analyzer v20 · 10h ago

suspicious endpointapi.telegram.orgkossov-it-cakeagent-cda2bf9/channels/telegram.ts:4const res = await fetch(`https://api.telegram.org/bot${token}/${method}`, {

code evidence v1.2.2 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs kossov-it-cakeagent-cda2bf9/src/agent.ts :3 import { readFileSync, existsSync } from 'node:fs';
fs kossov-it-cakeagent-cda2bf9/src/hooks.ts :4 import { mkdirSync, writeFileSync, realpathSync, existsSync } from 'node:fs';
fs kossov-it-cakeagent-cda2bf9/src/index.ts :7 import { existsSync, writeFileSync, readFileSync, mkdirSync, statSync, chmodSync } from 'node:fs';
fs kossov-it-cakeagent-cda2bf9/src/store.ts :2 import { readFileSync, writeFileSync, existsSync, mkdirSync, renameSync } from 'node:fs';
fs kossov-it-cakeagent-cda2bf9/src/tools.ts :3 import { readFileSync, writeFileSync, existsSync, mkdirSync, unlinkSync, renameSync } from 'node:fs';
fs kossov-it-cakeagent-cda2bf9/src/voice.ts :2 import { writeFileSync, readFileSync, unlinkSync, existsSync } from 'node:fs';

shell kossov-it-cakeagent-cda2bf9/src/index.ts :8 import { execFile } from 'node:child_process';
shell kossov-it-cakeagent-cda2bf9/src/voice.ts :1 import { execFile } from 'node:child_process';

net kossov-it-cakeagent-cda2bf9/channels/telegram.ts :4 const res = await fetch(`https://api.telegram.org/bot${token}/${method}`, {
net kossov-it-cakeagent-cda2bf9/src/tools.ts :15 // endpoints so prompt-injected inputs can't turn our fetch() calls into an

db kossov-it-cakeagent-cda2bf9/src/store.ts :1 import Database from 'better-sqlite3';