MCP Observatory
1m ago Tracked 60,020 Last 1m ago 24h 2,463
github JavaScript re-analysis due deep scan · partial (197/293 files)

onetapstudiogames/1f3d9-citylife

github

Universal agent skill for moving into and living in 1F3D9.

maintainer
onetapstudiogames
licence
AGPL-3.0
first seen
2026-08-25
last seen
2026-09-13
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · streamable-http · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit a9a4543 · analyzer v33 · 5d ago

skills & prompt files 16

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 134

filesystem 54

  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/docs/archive/evidence/follow-actions-1.8.1/make-scene.mjs :3 import { readFile, writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/docs/archive/evidence/follow-looking/make-scene.mjs :1 import { readFile, writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/docs/archive/evidence/follow-names/make-scene.mjs :1 import { readFile, writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/docs/archive/evidence/follow-polish/make-scene.mjs :4 import { readFile, writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/docs/archive/evidence/follow-polish/replay-chat.mjs :2 import { writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/docs/archive/evidence/follow/make-action-scene.mjs :3 import { readFile, writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/check-live-truth.mjs :3 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/check-release-version.mjs :2 import { readFile, readdir } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/join.mjs :4 import { existsSync, lstatSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/identity-input.mjs :1 import { readFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/identity-state.mjs :9 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/live-source.mjs :1 import { readFile } from 'node:fs/promises'
show 28 more
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/live-view.mjs :1 import { writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/paths.mjs :1 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/promote.mjs :1 import { mkdirSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/recovery-file.mjs :1 import { lstatSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/register.mjs :1 import { lstatSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/rotate-recover.mjs :1 import { mkdirSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/vault-backends.mjs :2 import { chmodSync, mkdirSync, readFileSync, readdirSync, rmSync, statSync, unlinkSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/vault-index.mjs :2 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/vault-locks.mjs :1 import { closeSync, openSync, statSync, unlinkSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/record-live-scene.mjs :3 import { writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/run-tests-with-home-guard.mjs :39 import { readdirSync, statSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/schedule.mjs :11 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/commands.test.mjs :3 import { access, copyFile, mkdir, mkdtemp, readFile, rm } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/docs-index.test.mjs :2 import { readdir, readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/follow-complete-replay.test.mjs :2 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/follow-looking.test.mjs :3 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/follow-name-scroll.test.mjs :7 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/follow-replay.test.mjs :2 import { mkdtemp, readFile, rm } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/follow-source.test.mjs :2 import { readFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/helpers/file-vault-backends.mjs :4 import { mkdirSync, readFileSync, readdirSync, rmSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/helpers/join-cli-stub.mjs :1 import { existsSync, readFileSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/helpers/run-identity-cli.mjs :7 import { mkdtempSync, rmSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/helpers/stub-city-server.mjs :17 import { existsSync, readFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-client.test.mjs :3 import { mkdtemp, rm, writeFile } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-commands.test.mjs :10 import { closeSync, mkdirSync, mkdtempSync, openSync, readdirSync, readFileSync, rmSync, unlinkSync, writeFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-probe.test.mjs :3 import { readFileSync } from 'node:fs'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-safety.test.mjs :2 import { access, readFile, readdir } from 'node:fs/promises'
  • fs (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/join.test.mjs :2 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs'

14 more not shown — this panel samples each group; the count above is the real total.

shell / exec 17

  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/check-release-version.mjs :1 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/connect.mjs :23 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/join.mjs :3 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/key.mjs :19 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/legacy-console.mjs :1 import { spawn } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/terminal.mjs :21 import { spawn } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/vault-backends.mjs :1 import { execFileSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/run-tests-with-home-guard.mjs :38 import { execFileSync, spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/setup.mjs :59 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/update.mjs :8 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/commands.test.mjs :2 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/follow-replay.test.mjs :6 import { execFileSync } from 'node:child_process'
show 5 more
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/helpers/run-identity-cli.mjs :6 import { spawn } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-client.test.mjs :2 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/live-view.test.mjs :2 import { execFile } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/release-version.test.mjs :2 import { spawnSync } from 'node:child_process'
  • shell (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/setup-windows-abort.test.mjs :14 // -- the crash reproduced whether or not a spawnSync (`listVaultLabels`'s

network 13

  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/identity-http.mjs :27 response = await fetch(url, { ...init, redirect: 'manual' })
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/identity-probe.mjs :32 const response = await fetch(`${safeOrigin}/api/me`, {
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/net.mjs :2 // Uses Node's built-in global fetch (Node 24, matching this repo's CI runtime).
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/scripts/lib/official-doors.mjs :39 const response = await fetch(`${safeOrigin}/api/official`, {
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/helpers/stub-city-server.mjs :15 import { createServer as createHttpsServer } from 'node:https'
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-commands.test.mjs :1124 const confirmResponse = await fetch(`${stub.origin}/api/rotate`, {
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-doors-live.test.mjs :49 t.skip('SKIP: AGENT_1F3D9_STUB_ONLY=1 is set; this probe calls fetch() directly and is not confined by ' +
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-probe.test.mjs :2 import { createServer as createHttpsServer } from 'node:https'
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/key-adopt-round3.test.mjs :21 import { createServer as createHttpsServer } from 'node:https'
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/key-adopt-round4.test.mjs :35 import { createServer as createHttpsServer } from 'node:https'
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/key-adopt-round5.test.mjs :39 import { createServer as createHttpsServer } from 'node:https'
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/setup-repair-exit-code.test.mjs :28 import { createServer as createHttpsServer } from 'node:https'
show 1 more
  • net (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/setup-windows-abort.test.mjs :42 import { createServer as createHttpsServer } from 'node:https'

secrets 1

  • secrets (weak) onetapstudiogames-1f3d9-citylife-a9a4543/test/identity-commands.test.mjs :2597 "process.stdout.write(JSON.stringify({ secret: process.env.AGENT_1F3D9_SECRET ?? null, origin: process.env.IDENTITY_ORIGIN ?? null }))\n",