github Python analyzed 1a7c05c

matteopasseri407/NeXgen-Engine

Configure your AI coding CLIs from one Git repo you can diff and revert: author AGENTS.md, MCP config, and Markdown memory once, render them to each tool's native format, check for drift, and sync across machines fail-closed. Linux stable, Windows beta.

maintainer: matteopasseri407
license: NOASSERTION
first seen: 2026-07-10
last seen: 2026-08-02
releases · 30d: 31
short id

Drift inferred · capture-to-capture

HIGH 2026-08-02 code analysis flagged dynamic code execution in matteopasseri407/NeXgen-Engine

capabilities 11 tools

transport stdio · streamable-http · http counts 11 tools · 0 res · 0 prompts permission surface via code analysis

tools

append_note
create_note
get_start_here
list_related
map_overview
read_note
recent_activity
search_notes
semantic_search
update_note
update_section

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 1a7c05c · analyzer v28 · 11h ago

skills & prompt files 16

danger signals2

dynamic code execution __import__ sink matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/tests/test_council_seat_env_isolation.py :158 if hasattr(__import__("os"), "name") and __import__("os").name != "nt":
suspicious endpoint api.telegram.org matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/scripts/agent_sync.py :2818 sent = _post_form(f"https://api.telegram.org/bot{token}/sendMessage", {"chat_id": chat, "text": msg})

code evidence vv0.97.6 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 120

filesystem 9

fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/council/council.py :18 import shutil
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/council/routing.py :14 import shutil
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/leak-scan/leak_scan.py :33 from pathlib import Path
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/mcp/render.py :38 from pathlib import Path
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/firecrawl/searxng/render-settings.py :10 from pathlib import Path
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/ocr/api/app.py :90 with Image.open(io.BytesIO(data)) as img:
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/ocr/mcp/vault_ocr_mcp.py :28 from pathlib import Path
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/config.py :4 from pathlib import Path
fs matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/vault.py :7 from pathlib import Path

shell / exec 4

shell matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/council/council.py :20 import subprocess
shell matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/council/routing.py :15 import subprocess
shell matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/leak-scan/leak_scan.py :209 r = subprocess.run(["git", "-C", repo, *args], capture_output=True, text=True)
shell matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/vault.py :12 import subprocess

network 2

net matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/ocr/mcp/vault_ocr_mcp.py :25 import urllib.error
net matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :7 import urllib.request

secrets 5

secrets matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/agent-universal-layer/council/council.py :1277 env["OPENAI_API_KEY"] = os.environ["OPENAI_API_KEY"]
secrets matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/ocr/api/app.py :30 VAULT_OCR_TOKEN = os.getenv("VAULT_OCR_TOKEN", "").strip()
secrets matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/ocr/mcp/vault_ocr_mcp.py :38 API_TOKEN = os.environ.get("VAULT_OCR_TOKEN", "").strip()
secrets matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/ci-smoke.py :27 TOKEN = os.environ["SMOKE_TOKEN"]
secrets matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/config.py :91 vault_token = os.getenv("VAULT_TOKEN", "").strip() or None

tool registrations 11

get_start_here matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :167
read_note matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :173
search_notes matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :179
list_related matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :185
map_overview matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :191
recent_activity matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :197
semantic_search matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :205
create_note matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :224
append_note matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :230
update_note matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :236
update_section matteopasseri407-NeXgen-Engine-1a7c05c/03-INFRA/deploy/vault-mcp/src/vault_mcp_server/server.py :247

declared dependencies 3

mcp@>=2.0.0,<3.0.0
starlette@>=0.37.2,<1.0.0
uvicorn@>=0.30.0,<1.0.0