Example MCP app with interactive React views — Chess.com player, game & puzzle tools for ChatGPT & Claude (Skybridge)
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 90a52c0 · analyzer v33 · 6d ago
skills & prompt files 1
- agent-rules nbialk-chess-mcp-90a52c0/AGENTS.md
danger signals1
- suspicious endpoint eu.i.posthog.com (telemetry)
expected for this server's purpose
nbialk-chess-mcp-90a52c0/src/analytics.ts :6
const host = process.env.POSTHOG_HOST ?? "https://eu.i.posthog.com";
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 18
filesystem 1
- fs nbialk-chess-mcp-90a52c0/src/server.ts :7
import { readFile } from "node:fs/promises";
network 1
- net nbialk-chess-mcp-90a52c0/src/chess-com.ts :6
const res = await fetch(url, {
secrets 1
- secrets nbialk-chess-mcp-90a52c0/src/analytics.ts :5
const apiKey = process.env.POSTHOG_API_KEY;
declared dependencies 26
- @modelcontextprotocol/sdk@^1.29.0
- @alpic-ai/ui@^1.136.3
- chess.js@^1.4.0
- lucide-react@^1.18.0
- posthog-node@^5.37.0
- react@^19.2.4
- react-dom@^19.2.4
- skybridge@^1.1.0
- sonner@^2.0.7
- tw-animate-css@^1.4.0
- vite@^8.0.3
- zod@^4.3.6
show 14 more
- @eslint/js@^10.0.1
- @skybridge/devtools@^1.1.0
- @tailwindcss/vite@^4.3.1
- @types/node@^26.0.0
- @types/react@^19.2.17
- @types/react-dom@^19.2.3
- @vitejs/plugin-react@^6.0.1
- eslint@^10.5.0
- eslint-plugin-react-hooks@^7.1.1
- tailwindcss@^4.3.1
- tsx@^4.21.0
- typescript@^6.0.2
- typescript-eslint@^8.61.0
- vitest@^4.1.8