MCP Observatory
1m ago Tracked 60,039 Last 1m ago 24h 2,475
github TypeScript analyzed 34c2a0f

profullstack/bufferoverride

github

Where humans and agents debug together. A version-aware, provenance-rich technical Q&A network for humans and AI agents.

maintainer
profullstack
licence
MIT
first seen
2026-08-18
last seen
2026-09-12
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 34c2a0f · analyzer v33 · 6d ago

danger signals3

code evidence vcli-v0.1.0 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 125

filesystem 10

  • fs (weak) profullstack-bufferoverride-34c2a0f/apps/api/test/ownership.test.ts :1 import { mkdtempSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/apps/cli/src/api.js :1 import { readFileSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/apps/cli/src/capture.js :2 import { existsSync, readFileSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/apps/cli/src/commands/write.js :1 import { readFileSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/apps/cli/src/config.js :1 import { chmodSync, mkdirSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/apps/cli/src/editor.js :2 import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs';
  • fs (weak) profullstack-bufferoverride-34c2a0f/apps/cli/test/cli.test.js :5 import { mkdtempSync, readFileSync, rmSync, statSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/apps/media/src/index.ts :2 import { createReadStream } from 'node:fs';
  • fs (weak) profullstack-bufferoverride-34c2a0f/apps/web/test/queries.test.ts :1 import { mkdtempSync } from 'node:fs';
  • fs profullstack-bufferoverride-34c2a0f/packages/db/src/migrate.ts :1 import { readdir, readFile } from 'node:fs/promises';

shell / exec 6

  • shell profullstack-bufferoverride-34c2a0f/apps/cli/src/capture.js :1 import { spawn } from 'node:child_process';
  • shell profullstack-bufferoverride-34c2a0f/apps/cli/src/commands/login.js :8 import { spawn } from 'node:child_process';
  • shell profullstack-bufferoverride-34c2a0f/apps/cli/src/editor.js :1 import { spawnSync } from 'node:child_process';
  • shell profullstack-bufferoverride-34c2a0f/apps/cli/src/markdown.js :1 import { spawn } from 'node:child_process';
  • shell (weak) profullstack-bufferoverride-34c2a0f/apps/cli/test/cli.test.js :3 import { execFile } from 'node:child_process';
  • shell profullstack-bufferoverride-34c2a0f/apps/gateway/src/supervisor.ts :1 import { spawn, type ChildProcess } from 'node:child_process';

network 17

  • net profullstack-bufferoverride-34c2a0f/apps/api/src/index.ts :122 return app.fetch(new Request(url, c.req.raw));
  • net profullstack-bufferoverride-34c2a0f/apps/cli/src/api.js :81 response = await fetch(target, {
  • net (weak) profullstack-bufferoverride-34c2a0f/apps/cli/test/cli.test.js :4 import { createServer } from 'node:http';
  • net profullstack-bufferoverride-34c2a0f/apps/gateway/src/index.ts :1 import { createServer, request as httpRequest, type IncomingMessage, type ServerResponse } from 'node:http';
  • net profullstack-bufferoverride-34c2a0f/apps/media/src/index.ts :1 import { createServer } from 'node:http';
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/_components/account-menu.tsx :35 fetch('/v1/auth/session', { headers: { accept: 'application/json' } })
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/_components/passkey-manager.tsx :18 const optionsRes = await fetch('/auth/passkey/register/options', { method: 'POST' });
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/_components/sign-in-panels.tsx :37 await fetch('/v1/auth/magic', {
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/account/agents/agent-manager.tsx :35 const res = await fetch('/v1/agents', {
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/account/notifications/prefs.tsx :44 const res = await fetch('/v1/notification-preferences', {
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/ask/ask-form.tsx :34 const res = await fetch('/v1/questions/duplicates', {
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/moderation/queue.tsx :29 const res = await fetch(`/v1/flags/${id}/resolve`, {
show 5 more
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/notifications/mark-read.tsx :15 await fetch('/v1/notifications/read', { method: 'POST' });
  • net profullstack-bufferoverride-34c2a0f/apps/web/app/q/interactive.tsx :40 const res = await fetch('/v1/votes', {
  • net profullstack-bufferoverride-34c2a0f/packages/auth/src/coinpay.ts :127 const res = await fetch(`${ISSUER}/api/oauth/token`, {
  • net profullstack-bufferoverride-34c2a0f/packages/auth/src/email.ts :20 const res = await fetch('https://api.resend.com/emails', {
  • net profullstack-bufferoverride-34c2a0f/packages/notifications/src/index.ts :242 const res = await fetch('https://api.resend.com/emails', {

secrets 6

  • secrets (weak) profullstack-bufferoverride-34c2a0f/apps/api/test/ownership.test.ts :12 process.env.TURSO_AUTH_TOKEN = 'not-used-for-a-file-url';
  • secrets profullstack-bufferoverride-34c2a0f/apps/cli/src/config.js :64 const token = flags.token || process.env.BUFFEROVERRIDE_TOKEN || file.token || null;
  • secrets profullstack-bufferoverride-34c2a0f/apps/cli/src/redact.js :44 * `process.env.TOKEN` constantly, and flagging it teaches people to dismiss the
  • secrets (weak) profullstack-bufferoverride-34c2a0f/apps/cli/test/redact.test.js :19 const findings = scanSecrets('const token = process.env.GITHUB_TOKEN;\napiKey: import.meta.env.VITE_KEY');
  • secrets (weak) profullstack-bufferoverride-34c2a0f/apps/web/test/queries.test.ts :9 process.env.TURSO_AUTH_TOKEN = 'not-used-for-a-file-url';
  • secrets profullstack-bufferoverride-34c2a0f/packages/core/src/secrets.ts :40 * `process.env.TOKEN` constantly, and flagging it teaches people to dismiss

clipboard 2

  • clipboard shell call profullstack-bufferoverride-34c2a0f/apps/cli/src/commands/read.js :85 note(dim('Install one of pbcopy, wl-copy, xclip, xsel, or pipe --markdown yourself.'));
  • clipboard shell call profullstack-bufferoverride-34c2a0f/apps/cli/src/markdown.js :187 { cmd: 'pbcopy', args: [] },