Sandboxed dev container for running Claude Code in yolo mode: filtered egress, local-only git, taint detection, full audit trail
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport streamable-http · http · sse counts 14 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
audit_get
-
file_get
-
file_put
-
session_create
-
session_exec
-
session_invoke
-
session_invoke_async
-
session_list
-
session_resend
-
session_send
-
session_status
-
session_unwatch
-
session_watch
-
taint_mark
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 61187f4 · analyzer v33 · 2d ago
skills & prompt files 1
- agent-rules pacepace-aidc-61187f4/CLAUDE.md
danger signals1
- committed secret Anthropic key pacepace-aidc-61187f4/tests/unit/test-claude-state-seed.sh :43
sk-ant…(34 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 76
filesystem 8
- fs pacepace-aidc-61187f4/mcp/src/aidc_mcp/audit.py :12
from pathlib import Path - fs pacepace-aidc-61187f4/mcp/src/aidc_mcp/auth.py :15
from pathlib import Path - fs pacepace-aidc-61187f4/mcp/src/aidc_mcp/resources.py :13
from pathlib import Path - fs pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :23
from pathlib import Path - fs pacepace-aidc-61187f4/mcp/src/aidc_mcp/transcript.py :32
from pathlib import Path - fs (weak) pacepace-aidc-61187f4/mcp/tests/test_aidc_claude_wrapper.py :14
from pathlib import Path - fs (weak) pacepace-aidc-61187f4/mcp/tests/test_resources.py :8
from pathlib import Path - fs (weak) pacepace-aidc-61187f4/mcp/tests/test_transcript.py :8
from pathlib import Path
shell / exec 4
- shell pacepace-aidc-61187f4/mcp/src/aidc_mcp/resources.py :12
import subprocess - shell pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :21
import subprocess - shell (weak) pacepace-aidc-61187f4/mcp/tests/test_aidc_claude_wrapper.py :13
import subprocess - shell (weak) pacepace-aidc-61187f4/mcp/tests/test_tools.py :12
import subprocess
network 2
- net pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :26
import httpx - net (weak) pacepace-aidc-61187f4/mcp/tests/test_transcript_delivery.py :553
patch("aidc_mcp.tools.httpx.AsyncClient", return_value=_http_client(post_side_effect)),
tool registrations 14
- session_create pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1473
- session_list pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1515
- session_status pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1526
- session_exec pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1561
- session_invoke pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1580
- session_invoke_async pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1646
- session_send pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :1769
- session_watch pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2023
- session_resend pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2057
- session_unwatch pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2162
- file_get pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2185
- file_put pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2211
show 2 more
- audit_get pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2231
- taint_mark pacepace-aidc-61187f4/mcp/src/aidc_mcp/tools.py :2264
declared dependencies 9
- mcp@>=1.2,<2
- httpx@>=0.27
- starlette@>=0.37
- uvicorn@>=0.30
- pydantic@>=2.5
- pytest@>=8
- pytest-asyncio@>=0.24
- ruff@>=0.6
- mypy@>=1.11
transport_posture 1
- binds all interfaces (0.0.0.0) pacepace-aidc-61187f4/mcp/src/aidc_mcp/server.py :68
uvicorn.run(wrapped, host="0.0.0.0", port=port, log_level="info")