A multi-agent AI system for conversational data analysis — built with LangGraph, MCP, and RAG
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in rit-ops14/nexus-analyst
- HIGH code analysis flagged dynamic code execution in rit-ops14/nexus-analyst
transport stdio counts 4 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
describe_dataframe
-
generate_chart
-
run_pandas_code
-
send_email_report
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 1cb6784 · analyzer v28 · 2h ago
danger signals1
- dynamic code execution eval()/exec() rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :81
exec(code, safe_globals)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 8
filesystem 3
- fs rit-ops14-nexus-analyst-1cb6784/app.py :58
with open(csv_path, "wb") as f: - fs rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :43
with open(CURRENT_PATH_FILE, "w") as f: - fs rit-ops14-nexus-analyst-1cb6784/test_debug.py :11
with open(CURRENT_PATH_FILE) as f:
secrets 2
- secrets rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :118
smtp_key = os.environ.get("BREVO_SMTP_KEY") - secrets rit-ops14-nexus-analyst-1cb6784/test_email.py :10
smtp_key = os.environ.get("BREVO_SMTP_KEY")
tool registrations 4
- describe_dataframe rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :58
- run_pandas_code rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :72
- generate_chart rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :88
- send_email_report rit-ops14-nexus-analyst-1cb6784/mcp_server/server.py :110
declared dependencies 13
- mcp@*
- langchain@*
- langgraph@*
- langchain-mcp-adapters@*
- langchain-groq@*
- chromadb@*
- sentence-transformers@*
- torchvision@*
- pandas@*
- matplotlib@*
- plotly@*
- streamlit@*
- python-dotenv@*