github analyzed 8115b77

rustic-ai/codeprism

An experimental, 100% AI-generated, high-performance code intelligence server providing AI assistants with a graph-based understanding of codebases.

Drift inferred · capture-to-capture

HIGH 2026-06-14 code analysis flagged dynamic code execution in rustic-ai/codeprism

capabilities0 tools

transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsgithub-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8115b77 · analyzer v17 · 4h ago

dynamic code executioneval()rustic-ai-codeprism-8115b77/test-projects/security-test.js:13eval('var result = ' + userInput);
credential in logscredential in logrustic-ai-codeprism-8115b77/test-projects/security-test.js:46console.log("User password:", password, "API key:", API_KEY);

code evidencevv0.4.6 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

shell rustic-ai-codeprism-8115b77/test-projects/security-test.js :40 exec("ls -la " + userCommand);

net rustic-ai-codeprism-8115b77/test-projects/js-dependency-test-project/src/components/AdvancedUserDashboard.jsx :371 const response = await fetch(`/api/users?filter=${deferredFilter}&sort=${state.sort}`);
net rustic-ai-codeprism-8115b77/test-projects/js-dependency-test-project/src/components/UserManager.jsx :10 import axios from 'axios';
net rustic-ai-codeprism-8115b77/test-projects/js-dependency-test-project/src/server/app.js :480 const http = require('http');
net rustic-ai-codeprism-8115b77/test-projects/js-dependency-test-project/src/utils/ApiClient.js :5 import axios from 'axios';
net rustic-ai-codeprism-8115b77/test-projects/security-test.js :27 fetch('/api/update', { method: 'POST', body: JSON.stringify(data) });

secrets rustic-ai-codeprism-8115b77/test-projects/js-dependency-test-project/src/server/app.js :45 const JWT_SECRET = process.env.JWT_SECRET || 'your-secret-key';

db rustic-ai-codeprism-8115b77/test-projects/js-dependency-test-project/src/server/app.js :14 const redis = require('redis');