Agent-agnostic base image for putting any terminal AI coding agent (claude-code, pi, opencode...) on the network. Bolt on a 20-line adapter, get an HTTP API, OpenAI-compatible /v1/chat/completions, MCP server, Telegram bot, and cron scheduler. One container. Same surfaces. Swap the brain — you don't fork this, you FROM it.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport streamable-http · http counts 5 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
delete_file
-
list_files
-
read_file
-
run_prompt
-
write_file
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 1fdcf85 · analyzer v33 · 2d ago
danger signals1
- suspicious endpoint api.telegram.org
expected for this server's purpose
psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/cron/scheduler.py :71
url = f"https://api.telegram.org/bot{token}/sendMessage"
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 47
filesystem 12
- fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/files.py :12
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/mcp_server.py :19
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/oai.py :28
import shutil - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/workspace.py :10
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/cron/config.py :24
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/cron/scheduler.py :36
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/telegram/bot.py :35
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/telegram/config.py :20
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/telegram/cron_inbox.py :17
from pathlib import Path - fs psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/telegram/overrides.py :13
from pathlib import Path - fs (weak) psyb0t-docker-aicodebox-1fdcf85/aicodebox/tests/test_cron_scheduler.py :7
from pathlib import Path - fs (weak) psyb0t-docker-aicodebox-1fdcf85/aicodebox/tests/test_oai_schema.py :674
from pathlib import Path
shell / exec 5
- shell psyb0t-docker-aicodebox-1fdcf85/aicodebox/adapters/base.py :20
import subprocess - shell psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/runs.py :11
import subprocess - shell psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/telegram/bot.py :30
import subprocess - shell psyb0t-docker-aicodebox-1fdcf85/aicodebox/shared/runner.py :11
import subprocess - shell (weak) psyb0t-docker-aicodebox-1fdcf85/aicodebox/tests/test_runner_stream.py :6
import subprocess
network 2
- net psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/oai.py :29
import socket - net psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/cron/scheduler.py :33
import urllib.parse
secrets 2
- secrets psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/cron/scheduler.py :67
token = os.environ.get("AICODEBOX_TELEGRAM_MODE_TOKEN") - secrets psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/telegram/utils.py :13
BOT_TOKEN = os.environ.get("AICODEBOX_TELEGRAM_MODE_TOKEN", "")
tool registrations 5
- run_prompt psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/mcp_server.py :55
- list_files psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/mcp_server.py :99
- read_file psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/mcp_server.py :121
- write_file psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/mcp_server.py :137
- delete_file psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/mcp_server.py :156
declared dependencies 7
- mcp@==1.27.1
- pyyaml@==6.0.3
- fastapi@==0.136.1
- uvicorn@==0.47.0
- pydantic@==2.13.4
- python-telegram-bot@==21.11.1
- croniter@==3.0.4
transport_posture 2
- binds all interfaces (0.0.0.0) psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/api/server.py :378
uvicorn.run(app, host="0.0.0.0", port=port, log_config=None) - network-listening, binds all interfaces, no auth detected psyb0t-docker-aicodebox-1fdcf85/aicodebox/modes/mcp/__main__.py :30
uvicorn.run(app, host="0.0.0.0", port=port, log_config=None)