MCP Observatory
2m ago Tracked 55,861 Last 2m ago 24h 2,736
github Rust re-analysis due deep scan unknown unconfirmed MCP

leolilley/ryeos

github

A data-driven, cryptographically signed, registry-backed AI operating system, with capability-scoped execution and graph-executable workflows — living inside your projects, running through a recursive MCP that goes as deep as you dare.

maintainer
leolilley
licence
MIT
first seen
2026-06-04
last seen
2026-07-18
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in leolilley/ryeos
  2. HIGH code analysis flagged committed secret in leolilley/ryeos
  3. HIGH code analysis flagged committed secret in leolilley/ryeos
  4. HIGH code analysis flagged committed secret in leolilley/ryeos
  5. HIGH code analysis flagged committed secret in leolilley/ryeos
  6. HIGH code analysis flagged committed secret in leolilley/ryeos
  7. HIGH code analysis flagged committed secret in leolilley/ryeos
  8. HIGH code analysis flagged committed secret in leolilley/ryeos
capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit ec30f8c · analyzer v33 · 1w ago

danger signals1

code evidence vv0.5.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 922

filesystem 2

  • fs leolilley-ryeos-ec30f8c/crates/tools/browser-tools/src/runner.mjs :1 import fs from 'node:fs';
  • fs (weak) leolilley-ryeos-ec30f8c/tests/e2e/execute-stream-latency/run-latency-matrix.mjs :4 import fs from "node:fs";

shell / exec 1

  • shell (weak) leolilley-ryeos-ec30f8c/tests/e2e/execute-stream-latency/run-latency-matrix.mjs :6 import { spawnSync } from "node:child_process";

network 4

  • net leolilley-ryeos-ec30f8c/crates/clients/web/pkg/ryeos_effects.js :179 const response = await fetch(url);
  • net leolilley-ryeos-ec30f8c/crates/clients/web/pkg/ryeos_shell.js :422 fetch("/ui/api/invocations/dispatch", {
  • net leolilley-ryeos-ec30f8c/crates/clients/web/pkg/ryeos_web.js :598 module_or_path = fetch(module_or_path);
  • net (weak) leolilley-ryeos-ec30f8c/tests/e2e/execute-stream-latency/run-latency-matrix.mjs :215 const response = await fetch(`${RYEOSD_URL}/public-key`, {

declared dependencies 72

  • lillux@*
  • ryeos-accounting@*
  • ryeos-api@*
  • ryeos-app@*
  • ryeos-bundle@*
  • ryeos-cli@*
  • ryeos-client-base@*
  • ryeos-directive-core@*
  • ryeos-expression@*
  • ryeos-engine@*
  • ryeos-executor@*
  • ryeos-handler-protocol@*
show 28 more
  • ryeos-isolation-protocol@*
  • ryeos-node@*
  • ryeos-runtime@*
  • ryeos-scheduler@*
  • ryeos-state@*
  • ryeos-core-tools@*
  • ryeos-tracing@*
  • ryeos-ui@*
  • ryeos-vault@*
  • anyhow@1.0.103
  • arc-swap@1.9
  • async-stream@0.3
  • async-trait@0.1
  • axum@0.7
  • base64@0.22
  • bytes@1
  • chrono@0.4
  • chrono-tz@0.10
  • clap@4
  • cron@0.16
  • crossterm@0.29
  • directories@5
  • dirs@6
  • ed25519-dalek@2
  • form_urlencoded@1
  • futures-util@0.3
  • glob@0.3
  • hex@0.4

32 more not shown — this panel samples each group; the count above is the real total.