lidge-jun/cli-jaw
v2.17.51🦈 2-line install personal AI assistant. 11 AI runtime surfaces (Claude, Codex, Cursor, Gemini, Grok, Antigravity, OpenCode, Copilot), 200+ skills, zero ban risk.
- capability exposure inferred + 35
- tool safety inferred + 17
- supply-chain attested + 6
- trust mitigators mixed − 14
attested inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 1w ago · see ecosystem CVEs →
- C · 39 → C · 44
- C · 44 → C · 39
- D · 64 → C · 44
- C · 57 → D · 64
- D · 64 → C · 57
- C · 56 → D · 64
- A · 0 → C · 56
No known CVEs for this server.
- high dangerous code
committed secret: Slack token, Slack app token · dynamic exec: new Function() · obfuscated payload: dynamic require()/import()
- medium toxic flow (lethal trifecta)
lethal trifecta reachable across this server's tool + source surface: private-data access + untrusted-content ingestion + network exfil (a leg is proven only in the analyzed source)
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
- low dangerous code
env-secret-flows-to-network-js: A process environment value reaches a network call. Review whether it is a credential leaving the process; the ordinary API-wrapper shape (read a ke
analyzed commit 0d6364d · analyzer v33 · 17h ago
skills & prompt files 4
- agent-rules lidge-jun-cli-jaw-0d6364d/AGENTS.md
- agent-rules lidge-jun-cli-jaw-0d6364d/CLAUDE.md
- prompt-file lidge-jun-cli-jaw-0d6364d/prompts/stt-system.md
- agent-rules lidge-jun-cli-jaw-0d6364d/structure/AGENTS.md
danger signals30
- dynamic code execution new Function() lidge-jun-cli-jaw-0d6364d/src/browser/adaptive-fetch/defuddle-extractor.ts :122
new Function(src)(); - suspicious endpoint api.telegram.org
expected for this server's purpose
lidge-jun-cli-jaw-0d6364d/lib/upload.ts :203
const getFileUrl = `https://api.telegram.org/bot${token}/getFile?file_id=${fileId}`; - suspicious endpoint t.me
expected for this server's purpose
lidge-jun-cli-jaw-0d6364d/public/js/features/channel-onboarding-flow.ts :41
telegram: 'https://t.me/BotFather', - suspicious endpoint t.me
expected for this server's purpose
lidge-jun-cli-jaw-0d6364d/public/js/features/help-content.ts :60
{ url: 'https://t.me/BotFather', labelKey: 'help.telegram.link.botfather' }, - suspicious endpoint api.telegram.org
expected for this server's purpose
lidge-jun-cli-jaw-0d6364d/src/messaging/channel-validate.ts :93
const res = await fetchImpl(`https://api.telegram.org/bot${botToken}/getMe`, - suspicious endpoint 169.254.169.254 (cloud metadata) lidge-jun-cli-jaw-0d6364d/tests/unit/browser-adaptive-fetch-ssrf-hops.test.ts :233
for (const target of ['https://169.254.169.254/@user/1', 'https://internal/@user/1']) { - suspicious endpoint api.telegram.org
expected for this server's purpose
lidge-jun-cli-jaw-0d6364d/tests/unit/channel-redaction.test.ts :97
const out = redactChannelSecrets(`POST https://api.telegram.org/bot${TG_TOKEN}/getFile`); - suspicious endpoint discord.com
expected for this server's purpose
lidge-jun-cli-jaw-0d6364d/tests/unit/channel-redaction.test.ts :238
const out = redactChannelSecrets('https://discord.com/api/webhooks/123/SECRETPART'); - suspicious endpoint 93.184.216.34 lidge-jun-cli-jaw-0d6364d/tests/unit/manager-notes-routes.test.ts :245
body: JSON.stringify({ notePath: 'daily/today.md', url: 'https://93.184.216.34/copied.png' }), - over-broad OAuth scope https://www.googleapis.com/auth/cloud-platform lidge-jun-cli-jaw-0d6364d/src/manager/memory/embedding/provider.ts :149
scope: 'https://www.googleapis.com/auth/cloud-platform', - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/fixtures/slack-two-home-lifecycle.ts :62
xoxb-t…(21 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/channel-send-route.test.ts :503
xoxb-f…(15 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/heartbeat-mention-watch-send.test.ts :67
xoxb-m…(18 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/runtime-transport-settings.test.ts :229
xoxb-f…(16 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/settings-corrupt-clobber-guard.test.ts :35
xoxb-r…(15 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/settings-watch.test.ts :203
xoxb-e…(22 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-connection-reset-route.test.ts :114
xoxb-s…(17 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-conversation.test.ts :25
xoxb-n…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-fetch-harness.test.ts :33
xoxb-n…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-history-full-access.test.ts :13
xoxb-f…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-history.test.ts :15
xoxb-n…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-identity-characterization.test.ts :27
xoxb-n…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-identity.test.ts :26
xoxb-n…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-init-behavior.test.ts :114
xoxb-w…(20 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-operator-tooling.test.ts :173
xoxb-d…(24 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-progress-activity.test.ts :28
xoxb-P…(19 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-queue-boot-reply.test.ts :16
xoxb-b…(15 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-roster.test.ts :17
xoxb-n…(25 chars, redacted) - committed secret Slack token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-setup.test.ts :206
xoxb-f…(15 chars, redacted) - committed secret Slack app token lidge-jun-cli-jaw-0d6364d/tests/unit/slack-setup.test.ts :233
xapp-1…(31 chars, redacted)
- supply-chain +6 supply-chain hub →
[](https://mcpobservatory.com/servers/github:lidge-jun/cli-jaw/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of lidge-jun.