MCP Observatory
4m ago Tracked 59,479 Last 4m ago 24h 2,575
github TypeScript analyzed 7e954c4

modelstudioai/OpenAgentPack

github

Manage, review, and migrate cloud AI agents with Git and YAML. The open-source IaC control plane for managed AI agents.

maintainer
modelstudioai
licence
Apache-2.0
first seen
2026-07-16
last seen
2026-09-11
releases · 30d
5
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 7e954c4 · analyzer v33 · 3d ago

skills & prompt files 40

code evidence vv0.7.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 550

filesystem 74

  • fs modelstudioai-OpenAgentPack-7e954c4/apps/server/src/lib/agents-config.ts :1 import { mkdir, readFile, writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/apps/server/src/lib/state-scope.ts :1 import { copyFileSync, existsSync, mkdirSync, renameSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/apps/server/src/services/deployments/manage.ts :1 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/apps/server/src/services/project-declarations.ts :2 import { mkdir, readFile, rename, stat, unlink, writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/apps/server/src/services/project-manager.ts :2 import { existsSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/apps/server/src/services/project-runtime-registry.ts :1 import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/agents-config.test.ts :2 import { mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/deployments-manage.test.ts :2 import { mkdtemp, readFile, rm } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-declarations.test.ts :2 import { chmod, mkdir, mkdtemp, readdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-manager.test.ts :2 import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-versions.test.ts :2 import { chmod, mkdir, mkdtemp, readFile, rm, stat, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/apps/webui/tests/api-types-freshness.test.ts :2 import { mkdtemp, readFile, rm } from "node:fs/promises";
show 28 more
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/init.ts :1 import { readFile, writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/memory.ts :1 import { readFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/migrate.ts :1 import { writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/playground.ts :3 import { existsSync, readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/sync.ts :1 import { copyFileSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/program.ts :1 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/utils/file-utils.ts :1 import { existsSync } from "node:fs";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/packages/cli/tests/unit/cli-contracts.test.ts :2 import { mkdtemp, readFile, realpath, rm, stat, symlink, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/packages/cli/tests/unit/sync-file.test.ts :2 import { mkdtemp, rm } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/packages/cli/tests/unit/sync-force.test.ts :2 import { mkdtemp, rm, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/packages/cli/tests/unit/version.test.ts :2 import { chmod, mkdir, mkdtemp, readFile, rm, stat, writeFile } from "node:fs/promises";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/packages/playground/scripts/build-web.ts :1 import { cpSync, existsSync, readFileSync, rmSync, writeFileSync } from "node:fs";
  • fs (weak) modelstudioai-OpenAgentPack-7e954c4/packages/playground/src/server.ts :6 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/core/migrate-runtime.ts :1 import { readFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/core/skill-source.ts :1 import { readFileSync, statSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/parser/file-resolver.ts :1 import { readFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/parser/yaml-loader.ts :1 import { readFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/planner/hasher.ts :1 import { readFileSync, statSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/project-versions/directory.ts :2 import { mkdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/project-versions/index.ts :2 import { constants } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/project-workspace/index.ts :15 } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/project-workspace/vault-secrets.ts :2 import { chmod, lstat, readFile, rename, rm, writeFile } from "node:fs/promises";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/provider-config.ts :1 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/providers/ark/adapter.ts :1 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/providers/bailian/adapter.ts :1 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/providers/claude/adapter.ts :1 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/providers/qoder/adapter.ts :1 import { readFileSync } from "node:fs";
  • fs modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/state/state-manager.ts :1 import { mkdir, readFile, rename, unlink, writeFile } from "node:fs/promises";

34 more not shown — this panel samples each group; the count above is the real total.

shell / exec 18

  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/module-isolation.test.ts :24 const child = Bun.spawnSync([process.execPath, "test", ...files], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/apps/webui/tests/api-types-freshness.test.ts :17 const process = Bun.spawn(
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/apps/webui/tests/i18n.test.ts :14 const result = Bun.spawnSync({
  • shell modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/playground.ts :1 import { spawn } from "node:child_process";
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/packages/cli/tests/unit/cli-contracts.test.ts :119 const proc = Bun.spawn([process.execPath, "run", entry, ...args], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/packages/cli/tests/unit/version.test.ts :167 const processHandle = Bun.spawn([process.execPath, "run", join(REPO_ROOT, "packages/cli/bin/agents.ts"), ...args], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/packages/playground/scripts/build-web.ts :13 const build = Bun.spawnSync(["bun", "run", "build"], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/drift-live.ts :12 const proc = spawn({
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/unit/project-versions.test.ts :2 import { execFile } from "node:child_process";
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/audit.ts :1 import { spawnSync } from "node:child_process";
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/open-source.test.ts :36 const result = Bun.spawnSync(command, { cwd: root, stdout: "pipe", stderr: "pipe" });
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/pr-evidence.ts :43 const result = Bun.spawnSync(["git", "diff", "--name-only", "--diff-filter=ACMR", base, head], {
show 6 more
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/build.ts :12 const proc = Bun.spawnSync(["bun", "run", "build"], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/consumer-smoke.ts :48 const result = Bun.spawnSync(command, { cwd, stdout, stderr: "inherit" });
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/publish.ts :69 const result = Bun.spawnSync(["npm", "view", publishedPackageSpec(name, version), "version", "--json"], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/smoke-packed.ts :43 const result = Bun.spawnSync(command, { cwd, stdout, stderr: "inherit" });
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/version.ts :6 const version = Bun.spawnSync(["bunx", "changeset", "version"], {
  • shell (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/verify.ts :32 const child = Bun.spawnSync(command, {

network 18

  • net (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/scripts/emit-openapi.ts :3 const res = await server.fetch(new Request("http://local/openapi.json"));
  • net modelstudioai-OpenAgentPack-7e954c4/apps/server/src/services/skills/manage.ts :110 const res = await fetch(url);
  • net modelstudioai-OpenAgentPack-7e954c4/apps/webui/src/lib/api/stream.ts :22 const response = await fetch(url, {
  • net modelstudioai-OpenAgentPack-7e954c4/apps/webui/src/lib/api/transports/rest.ts :75 response = await fetch(url, init);
  • net modelstudioai-OpenAgentPack-7e954c4/apps/webui/src/lib/hooks/useHtmlArtifactPreview.ts :32 const res = await fetch(url);
  • net modelstudioai-OpenAgentPack-7e954c4/apps/webui/src/lib/project-api.ts :241 const response = await fetch(url, { ...init, headers, cache: "no-store" });
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/examples/bailian/basic/run-session.ts :53 const sessionRes = await fetch(`${BASE}/sessions`, {
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/examples/runtime/run-session-complex.ts :27 await fetch(`${BASE}/sessions`, {
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/examples/runtime/run-session.ts :54 const sessionRes = await fetch(`${BASE}/sessions`, {
  • net modelstudioai-OpenAgentPack-7e954c4/packages/cli/src/commands/playground.ts :114 const res = await fetch(`http://localhost:${port}/health`);
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/packages/playground/src/resolve-port.ts :1 import { createServer } from "node:net";
  • net modelstudioai-OpenAgentPack-7e954c4/packages/sdk/src/internal/transport.ts :18 * globalThis.fetch (resolved per call, so test-time fetch mocks keep working).
show 6 more
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/bailian-official-skill-live.ts :43 const res = await fetch(`${BASE_URL}/skills?source=official&limit=100`, {
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/bailian-smoke.ts :37 const res = await fetch(`${BASE_URL}/sessions/${id}/archive`, {
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/bailian-vault-live.ts :50 const res = await fetch(`${BASE_URL}/vaults/${vaultId}/credentials`, {
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/drift-live.ts :28 const res = await fetch(`${base}${path}`, {
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/consumer-smoke.ts :9 import { createServer } from "node:net";
  • net (weak) modelstudioai-OpenAgentPack-7e954c4/scripts/release/smoke-packed.ts :10 import { createServer } from "node:net";

secrets 15

  • secrets modelstudioai-OpenAgentPack-7e954c4/apps/server/src/app.ts :23 const expected = process.env.AGENTS_PLAYGROUND_TOKEN?.trim();
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/agents-config.test.ts :55 const prevKey = process.env.DASHSCOPE_API_KEY;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-declarations.test.ts :20 process.env.DASHSCOPE_API_KEY ??= "test-bailian-api-key";
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-manager.test.ts :15 process.env.DASHSCOPE_API_KEY ??= "test-bailian-api-key";
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-security.test.ts :4 const originalToken = process.env.AGENTS_PLAYGROUND_TOKEN;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/apps/server/tests/project-versions.test.ts :20 process.env.DASHSCOPE_API_KEY ??= "test-bailian-api-key";
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/examples/bailian/basic/run-session.ts :21 const API_KEY = process.env.DASHSCOPE_API_KEY;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/playground/src/server.ts :21 const accessToken = process.env.AGENTS_PLAYGROUND_TOKEN?.trim() ?? "";
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/bailian-official-skill-live.ts :6 const API_KEY = process.env.DASHSCOPE_API_KEY;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/bailian-smoke.ts :5 const API_KEY = process.env.DASHSCOPE_API_KEY;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/bailian-vault-live.ts :20 const API_KEY = process.env.DASHSCOPE_API_KEY;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/e2e/memory-live.ts :12 else if (provider === "claude" && process.env.ANTHROPIC_API_KEY)
show 3 more
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/unit/project-environment.test.ts :30 const previous = process.env.AGENTS_TEST_SCOPED_SECRET;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/unit/provider-config.test.ts :19 const prev = process.env.DASHSCOPE_API_KEY;
  • secrets (weak) modelstudioai-OpenAgentPack-7e954c4/packages/sdk/tests/unit/resolve-from-object.test.ts :30 const previous = process.env.OPENAGENTPACK_TEST_API_KEY;

install hooks 1

  • prepare modelstudioai-OpenAgentPack-7e954c4/package.json :20 bash scripts/setup-githooks.sh

declared dependencies 8

  • @ast-grep/cli@^0.44.1
  • @biomejs/biome@^2.5.3
  • @changesets/cli@^2.31.0
  • @types/bun@^1.3.14
  • dependency-cruiser@^17.4.3
  • js-yaml@4.3.2
  • tsup@^8.5.1
  • typescript@^6.0.3

obfuscation 1

  • dynamic require()/import() modelstudioai-OpenAgentPack-7e954c4/apps/webui/tests/i18n.test.ts :28 const { i18n, LANGUAGE_STORAGE_KEY } = await import(${JSON.stringify(entryUrl)});