github Python analyzed 5a4175f

maleon17/codex-ask

Standalone Codex Jarvis Telegram userbot and CodexAsk backend

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 22 tools

transport — counts 22 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 5a4175f · analyzer v33 · 17h ago

suspicious endpoint t.me maleon17-codex-ask-5a4175f/codex_ask.py :1736 return f"https://t.me/c/{chat_id[4:]}/{message.id}"

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 15

fs maleon17-codex-ask-5a4175f/codex_ask.py :565 stdout=open("/tmp/tailscaled.log", "a"),
fs maleon17-codex-ask-5a4175f/codex_ask_watcher.py :27 from pathlib import Path
fs maleon17-codex-ask-5a4175f/telegram_actions_mcp.py :72 with open(path, encoding="utf-8") as handle:
fs (weak) maleon17-codex-ask-5a4175f/tests/test_backend_failure_detection.py :5 from pathlib import Path
fs (weak) maleon17-codex-ask-5a4175f/tests/test_review_x_regressions.py :14 from pathlib import Path
fs (weak) maleon17-codex-ask-5a4175f/tests/test_trigger_authorization.py :5 from pathlib import Path
fs (weak) maleon17-codex-ask-5a4175f/tests/test_worker_reliability.py :3 from pathlib import Path

net maleon17-codex-ask-5a4175f/codex_ask.py :44 import asyncio, html, json, os, re, secrets, shutil, subprocess, tempfile, time, urllib.request, urllib.parse, uuid
net maleon17-codex-ask-5a4175f/telegram_actions_mcp.py :31 import urllib.request

secrets maleon17-codex-ask-5a4175f/codex_ask.py :88 RELAY_TOKEN = os.environ.get("CODEX_JARVIS_RELAY_TOKEN", "")
secrets maleon17-codex-ask-5a4175f/telegram_actions_mcp.py :37 RELAY_TOKEN = os.environ.get("JARVIS_RELAY_TOKEN", "")

show 10 more