Open Source 24/7 Autonomous Agentic AI System
D high
- capability exposure inferred + 35
- recent drift inferred + 20
- tool safety inferred + 19
inferred
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
graded 3m ago · see ecosystem CVEs →
- C · 59 → D · 74
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
dynamic exec: eval()/exec(), pickle.loads(), __import__(), __import__ sink
- medium toxic flow (lethal trifecta)
lethal trifecta reachable across this server's tools: private-data access + untrusted-content ingestion + network exfil
- low exfiltration combo
sensitive read and network capabilities split across this server's tools
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit e74d5de · analyzer v28 · 3d ago
skills & prompt files 16
- agent-rules marc-shade-agentic-system-oss-e74d5de/AGENTS.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/CLAUDE.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/GEMINI.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/arduino-surface/AGENTS.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/arduino-surface/CLAUDE.md
- skill marc-shade-agentic-system-oss-e74d5de/browser-tester.zip!/browser-tester/SKILL.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/intelligent-agents/CLAUDE.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/mcp-servers/CLAUDE.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/mcp-servers/coral-tpu-mcp/AGENTS.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/mcp-servers/coral-tpu-mcp/GEMINI.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/CLAUDE.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/mcp-servers/synthetic-data-mcp/CLAUDE.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/plugins/plugins/agi-core/CLAUDE.md
- agent-rules marc-shade-agentic-system-oss-e74d5de/scripts/CLAUDE.md
- prompt-file marc-shade-agentic-system-oss-e74d5de/web-worker-orchestrator/workers/code-migration.prompt
- prompt-file marc-shade-agentic-system-oss-e74d5de/web-worker-orchestrator/workers/security-audit.prompt
danger signals27
- dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/cluster-deployment/evaluation/graders/code_grader.py :61
exec(code, exec_globals) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/evaluation/graders/code_grader.py :61
exec(code, exec_globals) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/intelligent-agents/agentic_patterns.py :968
best_solution = eval(solution_counts.most_common(1)[0][0]) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/intelligent-agents/darwin_godel_machine.py :688
validator = eval(constraint.validator) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/intelligent-agents/empirical_capability_discovery.py :305
result = eval(expr, {"__builtins__": {}}, {}) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/intelligent-agents/proactive_memory_loader.py :56
return pickle.loads(decompressed) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/mcp-servers/code-execution-mcp/src/code_execution_mcp/server.py :428
exec(compile(code, '<sandbox>', 'exec'), safe_globals) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/memory_db_service.py :108
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/memory_db_service_v2.py :475
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/migrate_direct.py :60
data = pickle.loads(decompressed) # Use pickle, not JSON - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/migrate_direct_sqlite.py :89
entity_data = pickle.loads(decompressed_bytes) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/sandbox/executor.py :222
exec(code_obj, exec_globals) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server/compression.py :53
return pickle.loads(decompressed) - dynamic code execution __import__() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server/modules.py :214
mod = __import__(module_name) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_backup_20250830_135313.py :287
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_fastmcp.py :112
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_fixed.py :102
return pickle.loads(zlib.decompress(compressed)) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_git_enhanced.py :200
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_legacy_20251108_090108.py :214
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_original_backup.py :112
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_otel.py :112
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/server_resources.py :169
return pickle.loads(decompressed) - dynamic code execution pickle.loads() marc-shade-agentic-system-oss-e74d5de/mcp-servers/enhanced-memory-mcp/test_decompression.py :66
data = pickle.loads(decompressed) - dynamic code execution __import__() marc-shade-agentic-system-oss-e74d5de/mcp-servers/synthetic-data-mcp/src/synthetic_data_mcp/cli.py :606
__import__(module) - dynamic code execution eval()/exec() marc-shade-agentic-system-oss-e74d5de/mcp-servers/synthetic-data-mcp/tests/test_ingestion_demo.py :22
exec(open('src/synthetic_data_mcp/ingestion/data_ingestion.py').read(), globals()) - dynamic code execution __import__ sink marc-shade-agentic-system-oss-e74d5de/shared/providers/model_discovery.py :69
env = dict(__import__('os').environ) - suspicious endpoint 169.254.169.254 (cloud metadata) marc-shade-agentic-system-oss-e74d5de/mcp-servers/software-planning-mcp/src/core/system_awareness.py :297
env_details["instance_id"] = self._get_command_output(["curl", "-s", "http://169.254.169.254/latest/meta-data/instance-id"])
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:marc-shade/agentic-system-oss/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of marc-shade.