github Swift re-analysis due

macitkaraca/brampp

github

The XAMPP & MAMP alternative for macOS — one native app that runs the Homebrew services you already have. Apple Silicon, signed & notarized.

maintainer
macitkaraca
license
MIT
first seen
2026-08-08
last seen
2026-08-14
releases · 30d
12
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 23 tools
transport stdio · http counts 23 tools · 0 res · 0 prompts permission surface via README inference

tools

  • app_status

    Run state of the app: running or not, PIDs, command, CPU, memory

  • create_domain

    Creates a domain: site folder, vhost, SSL certificate and /etc/hosts entry

  • db_create

    Creates a database (leaves an existing one alone)

  • db_export

    Dumps a database to .sql (mysqldump --single-transaction --routines --triggers / pg_dump). Writes to ~/Library/Application Support/BRAMPP/backups when no path is given; a failed dump deletes the parti

  • db_import

    Applies a .sql dump to a target database, creating it if missing

  • db_list

    Lists MariaDB/MySQL or PostgreSQL databases

  • db_query

    Runs a single SQL statement. Read-only by default (SELECT/SHOW/DESCRIBE/EXPLAIN/WITH); anything that modifies data needs allow_write: true and write permission

  • health_check

    Sends a real HTTP request to the domain to see whether the site actually answers (end-to-end, not just "the service is running")

  • install_service

    Installs a service from BRAMPP's catalogue through Homebrew. An arbitrary formula name is refused

  • list_domains

    Lists every registered domain (platform, web server, port, enabled/running, SSL, URL)

  • list_shares

    Lists the Cloudflare tunnels open right now, with their public addresses

  • read_domain_log

    A domain's error/access log, or the app log for Node.js/Python/.NET domains (default 100 lines, max 1000)

  • read_log

    Lines from the BRAMPP console, filtered by level, search and since_minutes. source: "file" reads the daily log on disk instead of the live buffer — the only way to see anything older than the last ~30

  • restart_service

    Restarts a service to apply a config change (expect a short outage)

  • service_status

    Status of every service (id, name, state, port, version)

  • set_domain_enabled

    Enables/disables a domain — the record and files stay, only vhost + hosts entry are removed/regenerated

  • start_app

    Starts the background app of a Node.js/Python/.NET domain (dependency install and start.sh included)

  • start_service

    Starts a brew service (httpd, nginx, mariadb, php@8.3, redis…)

  • start_share

    Opens a Cloudflare Quick Tunnel for a domain and returns a public trycloudflare.com address

  • stop_app

    Stops that app

  • stop_service

    Stops a brew service

  • stop_share

    Closes the tunnel; the public address dies immediately

  • update_domain

    Changes an existing domain — PHP version, port, SSL, web server, document root, service dependencies. Only the fields you pass change; the vhost is regenerated

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit eff9775 · analyzer v29 · 6d ago

skills & prompt files 2

code evidence vv1.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 52

No code evidence — the analyzed source reached for no tracked permissions, tools, or hooks.