MCP Observatory
42s ago Tracked 55,861 Last 42s ago 24h 2,736
github TypeScript analyzed d1f3071 deep scan unknown unconfirmed MCP

njfuzrs/sid-code

github

跑在终端的 coding agent —— 多 provider 可插拔、harness 全可改、数据不出门、每轮留轨迹

maintainer
njfuzrs
licence
MIT
first seen
2026-09-04
last seen
2026-09-08
releases · 30d
22
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  2. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  3. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  4. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  5. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  6. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  7. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  8. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  9. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  10. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  11. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  12. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  13. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  14. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  15. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  16. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  17. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  18. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  19. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
  20. HIGH code analysis flagged committed secret, dynamic code execution in njfuzrs/sid-code
capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit d1f3071 · analyzer v33 · 1d ago

skills & prompt files 16

danger signals16

code evidence vv0.1.603 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1976

filesystem 376

  • fs njfuzrs-sid-code-d1f3071/evals/bench-runner/adapters/sid-code-live.ts :22 import { existsSync, readdirSync, statSync, readFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/bench-runner/capability-shared.ts :22 import { existsSync, readdirSync, readFileSync, statSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/bench-runner/runner.ts :24 import { readdir } from "node:fs/promises";
  • fs njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/grade.ts :32 import { existsSync, readFileSync, writeFileSync, mkdirSync, readdirSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/mini-adapt.ts :56 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/preflight.ts :46 import { existsSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/record.ts :20 import { writeFileSync, mkdirSync, readFileSync, existsSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/runner.ts :31 import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs (weak) njfuzrs-sid-code-d1f3071/evals/providers/_test_fixtures/fake-provider.ts :17 import { existsSync, readFileSync, writeFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/providers/claude-code.ts :4 import { writeFileSync, mkdirSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/providers/sid-code-live.ts :5 import { readFileSync, existsSync, writeFileSync } from "node:fs";
  • fs (weak) njfuzrs-sid-code-d1f3071/evals/scripts/distill-skill-rules.ts :38 import { existsSync, readFileSync, readdirSync, mkdirSync, writeFileSync } from "node:fs";
show 28 more
  • fs (weak) njfuzrs-sid-code-d1f3071/evals/scripts/migrate-cost-formula.ts :24 import { existsSync, readFileSync, writeFileSync } from "node:fs";
  • fs (weak) njfuzrs-sid-code-d1f3071/evals/scripts/run-external-baseline.ts :20 import { existsSync, mkdirSync, writeFileSync } from "node:fs";
  • fs (weak) njfuzrs-sid-code-d1f3071/evals/scripts/self-vs-external-report.ts :22 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/evals/verify-judge-stability.ts :14 import { readFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/app.ts :97 import { readFile } from "fs/promises";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/cli.ts :34 import { readFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/builtins.ts :1099 await fs.mkdir(fullPath, { recursive: true });
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/doctor/doctor.ts :14 import { existsSync, readFileSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/export/export.ts :10 import { writeFileSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/keybindings/keybindings.ts :2 import { existsSync, writeFileSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/terminal-setup/terminal-setup.ts :4 import { existsSync, readFileSync, writeFileSync, copyFileSync, mkdirSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/custom.ts :13 import { readFileSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/daemon.ts :23 import { existsSync, readFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/mcp-cli.ts :22 import { existsSync, readFileSync, writeFileSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/mcp-enhanced.ts :9 import { readFileSync, writeFileSync, existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/permissions.ts :228 const { existsSync, statSync } = require("fs");
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/review.ts :19 import { readFileSync, existsSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/self-check.ts :20 import { chmodSync, unlinkSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/command/usage-tracking.ts :16 import { existsSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/installed.ts :8 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/loadPluginAgents.ts :8 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/loadPluginCommands.ts :13 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/loadPluginMcp.ts :13 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/loader.ts :13 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/manifest.ts :5 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/plugin/operations.ts :11 import { existsSync } from "fs";
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/ui/hooks/useAtCompletion.ts :5 * 使用 fs.readdir 做路径补全。
  • fs njfuzrs-sid-code-d1f3071/packages/cli/src/ui/keybindings/loadUserBindings.ts :16 import { existsSync } from "fs";

336 more not shown — this panel samples each group; the count above is the real total.

shell / exec 117

  • shell njfuzrs-sid-code-d1f3071/evals/bench-runner/adapters/claude-code.ts :50 const proc = Bun.spawn([cliPath, ...args], {
  • shell njfuzrs-sid-code-d1f3071/evals/bench-runner/adapters/sid-code-live.ts :496 const proc = Bun.spawn(["bun", ...args], {
  • shell njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/preflight.ts :892 const p = Bun.spawnSync({
  • shell njfuzrs-sid-code-d1f3071/evals/external-benchmarks/swe-bench/runner.ts :749 const p = Bun.spawnSync(cmd, {
  • shell njfuzrs-sid-code-d1f3071/evals/providers/claude-code.ts :3 import { spawn } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/evals/providers/sid-code-live.ts :3 import { spawn } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/app.ts :96 import { execSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/advanced.ts :108 const { execFileSync } = await import("child_process");
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/bug/bug.ts :27 const { execSync } = require("child_process") as typeof import("child_process");
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/diff/diff.ts :11 import { execFileSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/doctor/doctor.ts :13 import { execFileSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/custom.ts :12 import { execSync } from "child_process";
show 28 more
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/review.ts :20 import { spawn } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/self-check.ts :231 const proc = Bun.spawnSync([tmp, "--version"], { stdout: "pipe", stderr: "pipe" });
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/command/update.ts :14 import { execFileSync } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/ui/statusline/run-statusline.ts :14 import { spawn } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/ui/utils/clipboard-image.ts :19 import { spawnSync } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/cli/src/ui/utils/external-editor.ts :13 import { spawn } from "node:child_process";
  • shell (weak) njfuzrs-sid-code-d1f3071/packages/cli/tests/cli/flag-e2e.test.ts :68 const proc = Bun.spawn(["bun", BOOTSTRAP, ...args], {
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/agent/sub-agent.ts :1080 const subprocess = Bun.spawn(["bun", ...spawnArgs], {
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/analytics/metadata.ts :9 import { execFileSync } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/checkpoint/bash-affected-files.ts :17 import { execFile } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/config/attachments.ts :6 import { execFileSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/config/gitignore.ts :20 import { spawnSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/config/rules.ts :18 import { execFileSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/daemon/headless-executor.ts :21 import { spawn } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/daemon/service.ts :17 import { execFileSync } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/daemon/worker.ts :51 const { execFileSync } = await import("node:child_process");
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/daemon/workspace.ts :8 import { execFileSync } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/hook/runner.ts :248 const proc = spawn({
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/ide/extension-install.ts :6 import { execSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/lsp/client.ts :10 import { spawn, type ChildProcess } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/lsp/config.ts :138 const { execSync } = await import("child_process");
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/mcp/transport.ts :65 this.proc = spawn({
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/memory/paths.ts :23 import { execSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/plan/slug.ts :10 import { execFileSync } from "child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/session/from-pr.ts :14 import { execFile } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/skill/builtin-embedded.generated.ts :306 t filename = req.body.filename;\n + exec(`cp /data/users.db /backup/${filename}`, (err) => res.json({ err }));\n +}\n ```\n repo: sid-code\n repo_commit: \"\"\n\nexpected:\n outcome: dete
  • shell (weak) njfuzrs-sid-code-d1f3071/packages/core/src/skill/builtin/code-review/scripts/coverage-check.ts :19 import { execSync } from "node:child_process";
  • shell njfuzrs-sid-code-d1f3071/packages/core/src/skill/prompt-processor.ts :19 import { exec } from "node:child_process";

77 more not shown — this panel samples each group; the count above is the real total.

network 40

  • net njfuzrs-sid-code-d1f3071/evals/bench-runner/process-grader.ts :40 const resp = await fetch(`${config.baseUrl}/chat/completions`, {
  • net njfuzrs-sid-code-d1f3071/packages/cli/src/command/commands/model/discover.ts :221 const resp = await fetch(url, {
  • net njfuzrs-sid-code-d1f3071/packages/cli/src/entrypoints/preconnect.ts :49 void fetch(origin, { method: "HEAD", signal: controller.signal })
  • net njfuzrs-sid-code-d1f3071/packages/core/src/analytics/exporters/http.ts :130 const response = await fetch(this.endpoint, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/analytics/exporters/otlp.ts :155 const response = await fetch(this.endpoint, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/analytics/feature-flags.ts :154 const response = await fetch(endpoint, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/config/policy-limits.ts :19 * | `network_access` | ⛔ **无单一咽喉**。egress 散在 web 工具、MCP 远程传输、遥测上传、以及 LLM 请求本身（光 core 就 ~39 处 `fetch(`）。只关掉 web 工具却叫 `network_access`，是个兜不住的安全承诺 |
  • net njfuzrs-sid-code-d1f3071/packages/core/src/daemon/server.ts :63 async fetch(req: Request): Promise<Response> {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/hook/runner.ts :390 const response = await fetch(hookConfig.url, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/hook/ssrf-guard.ts :159 return fetch(url, { ...fetchOptions, headers });
  • net njfuzrs-sid-code-d1f3071/packages/core/src/ide/lockfile.ts :11 import { createConnection } from "net";
  • net njfuzrs-sid-code-d1f3071/packages/core/src/llm/gateway-pricing.ts :864 const resp = await fetch(url, {
show 28 more
  • net njfuzrs-sid-code-d1f3071/packages/core/src/llm/keepalive.ts :66 const underlying = baseFetch ?? ((input: any, init?: RequestInit) => fetch(input, init));
  • net njfuzrs-sid-code-d1f3071/packages/core/src/llm/model-capabilities.ts :1323 const resp = await fetch(src.url, { method: "GET", headers, signal: ctl.signal });
  • net njfuzrs-sid-code-d1f3071/packages/core/src/llm/openai.ts :125 * 背景：`await fetch(...)` 只挂了外层 signal，自身无连接/响应头超时；SSE 的 idle
  • net njfuzrs-sid-code-d1f3071/packages/core/src/llm/sse-event-line-shim.ts :162 const underlying: FetchLike = baseFetch ?? ((input, init) => fetch(input as any, init));
  • net njfuzrs-sid-code-d1f3071/packages/core/src/mcp/oauth-callback-server.ts :14 import { createServer, type Server } from "node:http";
  • net njfuzrs-sid-code-d1f3071/packages/core/src/mcp/oauth.ts :94 return fetch(url, { ...init, signal });
  • net njfuzrs-sid-code-d1f3071/packages/core/src/mcp/transport.ts :318 const response = await fetch(this.url, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/telemetry/cache-bench-core.ts :238 const res = await fetch(url, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/telemetry/cache-trust-probe-core.ts :414 const res = await fetch(url, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/telemetry/exporters/otlp.ts :414 const response = await fetch(url, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/telemetry/provider-health.ts :478 const res = await fetch(webhookUrl, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/tool/omission-detector.ts :57 * `await fetch(...)`、`$(...)`、`[...new Set(...)]`、注释里画的数据结构 `{ cells: [...] }`
  • net njfuzrs-sid-code-d1f3071/packages/core/src/tool/search-backends/duckduckgo.ts :42 const response = await fetch(url.toString(), {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/tool/search-backends/searxng.ts :39 const response = await fetch(url.toString(), {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/tool/web-fetch.ts :503 const hopResponse = await fetch(currentUrl, {
  • net njfuzrs-sid-code-d1f3071/packages/core/src/trace/uploader.ts :169 const resp = await fetch(`${this.opts.baseUrl}/api/v1/health`, {
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/bridge/ws-transport-resilience.test.ts :20 fetch(req, srv) {
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/ide/robustness.test.ts :13 import { createServer, type Server } from "net";
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/llm/errors.test.ts :263 "The socket connection was closed unexpectedly. For more information, pass `verbose: true` in the second argument to fetch()",
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/llm/fetch-absolute-timeout-cuts-progressing-stream.test.ts :31 async fetch() {
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/mcp/oauth-callback-server.test.ts :39 await fetch(callbackUrl);
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/mcp/oauth-core.test.ts :8 import { createServer, type Server } from "node:http";
  • net (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/tool/omission-detector.test.ts :394 test("代码里的 (...) 默认不拦（合法代码如 await fetch(...)）", () => {
  • net (weak) njfuzrs-sid-code-d1f3071/scripts/catalog-coverage.ts :108 const resp = await fetch(src.url);
  • net (weak) njfuzrs-sid-code-d1f3071/scripts/check-tavily.ts :51 const res = await fetch("https://api.tavily.com/usage", {
  • net (weak) njfuzrs-sid-code-d1f3071/scripts/fetch-ripgrep.ts :129 const shaResp = await fetch(shaUrl);
  • net (weak) njfuzrs-sid-code-d1f3071/scripts/fetch-vendor-src.ts :343 const shaResp = await fetch(shaUrl);
  • net (weak) njfuzrs-sid-code-d1f3071/scripts/gen-model-catalog-snapshot.ts :92 const resp = await fetch(url, { signal: ctl.signal });

secrets 20

  • secrets njfuzrs-sid-code-d1f3071/packages/cli/src/command/auth.ts :48 const effectiveKey = activeModel?.apiKey || providerKey || process.env.ANTHROPIC_API_KEY;
  • secrets njfuzrs-sid-code-d1f3071/packages/core/src/daemon/daemon.ts :226 const secret = process.env.SID_CODE_WEBHOOK_SECRET ?? "";
  • secrets njfuzrs-sid-code-d1f3071/packages/core/src/daemon/server.ts :20 webhook_secret: process.env.SID_CODE_WEBHOOK_SECRET ?? "",
  • secrets njfuzrs-sid-code-d1f3071/packages/core/src/tool/search-backends/factory.ts :36 // if (config.braveApiKey || process.env.BRAVE_API_KEY) return "brave";
  • secrets (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/config/patch-settings.test.ts :78 process.env.DEEPSEEK_API_KEY = "sk-real-secret-12345";
  • secrets (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/migrations/backfill-team-defaults.test.ts :132 process.env.MY_API_KEY = "sk-real-secret-should-not-leak";
  • secrets (weak) njfuzrs-sid-code-d1f3071/packages/core/tests/skill/security-audit-scripts.test.ts :88 `const password = process.env.DB_PASSWORD;\nconst apiKey = "<TODO>";`,
  • secrets njfuzrs-sid-code-d1f3071/packages/eval-framework/graders/binary-redline-grader.ts :182 const apiKey = process.env.ANTHROPIC_API_KEY;
  • secrets (weak) njfuzrs-sid-code-d1f3071/packages/eval-framework/graders/registry.test.ts :195 const saved = process.env.ANTHROPIC_API_KEY;
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/calibrate-judge.ts :60 const apiKey = process.env.ANTHROPIC_AUTH_TOKEN || process.env.ANTHROPIC_API_KEY || "";
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/paired-trajectory-diff.ts :299 const apiKey = process.env.ANTHROPIC_API_KEY;
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-bench.ts :78 apiKey: process.env.ANTHROPIC_API_KEY || "",
show 8 more
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-context-capability.ts :153 apiKey: process.env.ANTHROPIC_API_KEY || "",
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-cross-baseline.ts :120 apiKey: process.env.ANTHROPIC_AUTH_TOKEN || "",
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-harness-capability.ts :119 apiKey: process.env.ANTHROPIC_API_KEY || "",
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-memory-capability.ts :316 apiKey: process.env.ANTHROPIC_API_KEY || "",
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-plan-capability.ts :147 apiKey: process.env.ANTHROPIC_API_KEY || "",
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/eval/run-router-capability.ts :130 apiKey: process.env.ANTHROPIC_API_KEY || "",
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/provider-canary.ts :85 getApiKey: () => process.env.OPENAI_API_KEY,
  • secrets (weak) njfuzrs-sid-code-d1f3071/scripts/provider-stress.ts :95 const key = process.env.OPENAI_API_KEY;

declared dependencies 59

  • @alcalzone/ansi-tokenize@^0.3.0
  • @anthropic-ai/sdk@^0.120.0
  • @sid-code/cli@workspace:*
  • @sid-code/core@workspace:*
  • @sid-code/shared@workspace:*
  • @sid-code/tui-renderer@workspace:*
  • auto-bind@^5.0.1
  • bidi-js@^1.0.3
  • chalk@6.0.0
  • cli-boxes@4.0.1
  • cli-highlight@2.1.11
  • cli-truncate@^6.1.1
show 28 more
  • code-excerpt@^4.0.0
  • diff@^9.0.0
  • emoji-regex@^10.6.0
  • fuse.js@^7.5.0
  • get-east-asian-width@^1.6.0
  • glob@^13.0.6
  • indent-string@^5.0.0
  • lodash-es@^4.17.21
  • lowlight@^3.3.0
  • marked@^18.0.10
  • minimatch@^10.2.6
  • mnemonist@0.40.4
  • react@^19.2.8
  • react-devtools-core@^7.0.1
  • react-reconciler@0.33.0
  • scheduler@0.27.0
  • semver@^7.8.5
  • signal-exit@^4.1.0
  • stack-utils@^2.0.6
  • string-width@^8.2.2
  • strip-ansi@^7.2.0
  • supports-hyperlinks@4.5.0
  • tinycolor2@^1.6.0
  • tinygradient@^2.0.1
  • usehooks-ts@^3.1.0
  • wrap-ansi@^10.0.1
  • yaml@^2.9.0
  • zod@^4.4.3

19 more not shown — this panel samples each group; the count above is the real total.

clipboard 2

  • clipboard shell call njfuzrs-sid-code-d1f3071/packages/cli/src/ui/InputArea.tsx :488 "剪贴板无图片（或缺 pngpaste/xclip/wl-paste）",
  • clipboard shell call njfuzrs-sid-code-d1f3071/packages/cli/src/ui/utils/clipboard-image.ts :96 if (commandExists("wl-paste")) {

obfuscation 1

  • dynamic require()/import() njfuzrs-sid-code-d1f3071/packages/core/tests/session/history-index.test.ts :28 const mod = await import("@sid-code/core/session/history-index.ts?t=" + Date.now());