Arrange live web pages on an infinite canvas and review your whole site like artboards in a design tool. macOS.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 5ba259d · analyzer v33 · 3d ago
skills & prompt files 9
- skill ryonakae-sheltie-5ba259d/.agents/skills/frontend-design/SKILL.md
- skill ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/SKILL.md
- skill ryonakae-sheltie-5ba259d/.agents/skills/natural-japanese/SKILL.md
- agent-rules ryonakae-sheltie-5ba259d/.agents/skills/react-flow/CLAUDE.md
- skill ryonakae-sheltie-5ba259d/.agents/skills/react-flow/SKILL.md
- agent-rules ryonakae-sheltie-5ba259d/.agents/skills/vercel-react-best-practices/AGENTS.md
- skill ryonakae-sheltie-5ba259d/.agents/skills/vercel-react-best-practices/SKILL.md
- agent-rules ryonakae-sheltie-5ba259d/AGENTS.md
- skill ryonakae-sheltie-5ba259d/skills/sheltie-use/SKILL.md
danger signals1
- dynamic code execution indirect eval ryonakae-sheltie-5ba259d/src-tauri/src/commands/webview/page_automation_script.js :463
const value = await Promise.race([Promise.resolve((0, eval)(source)), timeout]);
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 200
filesystem 6
- fs (weak) ryonakae-sheltie-5ba259d/scripts/mcp-fixtures/serve-semantic-fixtures.mjs :3
import { createReadStream } from 'node:fs'; - fs (weak) ryonakae-sheltie-5ba259d/skills/evals/fixtures/derive-redacted-mcp-trace.mjs :1
import { mkdir, readFile, writeFile } from 'node:fs/promises'; - fs (weak) ryonakae-sheltie-5ba259d/skills/evals/fixtures/serve-local-sites.mjs :1
import { createReadStream } from 'node:fs'; - fs (weak) ryonakae-sheltie-5ba259d/skills/evals/fixtures/verify-eval.test.ts :2
import { mkdtempSync, readFileSync, rmSync, writeFileSync } from 'node:fs'; - fs (weak) ryonakae-sheltie-5ba259d/skills/evals/fixtures/verify-run.mjs :1
import { readFile, writeFile } from 'node:fs/promises'; - fs (weak) ryonakae-sheltie-5ba259d/src/lib/mcp/page-automation-script.test.ts :1
import { readFileSync } from 'node:fs';
shell / exec 1
- shell (weak) ryonakae-sheltie-5ba259d/skills/evals/fixtures/verify-eval.test.ts :1
import { execFileSync } from 'node:child_process';
network 10
- net (weak) ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/scripts/get_component_docs.mjs :48
const response = await fetch(url, options); - net (weak) ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/scripts/get_docs.mjs :37
const response = await fetch(url, { - net (weak) ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/scripts/get_source.mjs :38
const response = await fetch(url, options); - net (weak) ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/scripts/get_styles.mjs :38
const response = await fetch(url, options); - net (weak) ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/scripts/get_theme.mjs :62
const response = await fetch(url, { - net (weak) ryonakae-sheltie-5ba259d/.agents/skills/heroui-react/scripts/list_components.mjs :24
const response = await fetch(url, { - net (weak) ryonakae-sheltie-5ba259d/scripts/mcp-fixtures/serve-semantic-fixtures.mjs :5
import { createServer } from 'node:http'; - net (weak) ryonakae-sheltie-5ba259d/skills/evals/fixtures/serve-local-sites.mjs :3
import { createServer } from 'node:http'; - net ryonakae-sheltie-5ba259d/src/lib/mcp/board-screenshot.ts :386
const response = await fetch(url, { signal: controller.signal }); - net ryonakae-sheltie-5ba259d/src/lib/mcp/webpage-screenshots.ts :49
response = await fetch(assetUrl);
install hooks 1
- prepare ryonakae-sheltie-5ba259d/package.json :14
husky
declared dependencies 62
- rmcp@=2.2.0
- @dnd-kit/react@0.3.2
- @gravity-ui/icons@2.17.0
- @heroui/react@3.1.0
- @heroui/styles@3.1.0
- @tauri-apps/api@2.11.1
- @tauri-apps/plugin-dialog@2.7.2
- @tiptap/extension-placeholder@3.22.3
- @tiptap/pm@3.22.3
- @tiptap/react@3.22.3
- @tiptap/starter-kit@3.22.3
- @xyflow/react@12.10.1
show 28 more
- motion@12.34.3
- react@19.2.4
- react-dom@19.2.4
- tailwind-merge@3.5.0
- tailwindcss@4.2.0
- zustand@5.0.11
- @eslint/js@9.39.2
- @tailwindcss/vite@4.2.0
- @tauri-apps/cli@2.11.4
- @types/jsdom@28.0.3
- @types/node@25.4.0
- @types/react@19.2.14
- @types/react-dom@19.2.3
- @typescript-eslint/parser@8.56.1
- @vitejs/plugin-react@5.1.4
- eslint@9.39.2
- eslint-config-prettier@10.1.8
- eslint-import-resolver-typescript@4.4.4
- eslint-plugin-better-tailwindcss@4.3.0
- eslint-plugin-import@2.32.0
- eslint-plugin-react-hooks@7.0.1
- globals@15.15.0
- husky@9.1.7
- jsdom@29.1.1
- lint-staged@16.2.7
- prettier@3.8.1
- prettier-plugin-tailwindcss@0.7.2
- typescript@5.7.3
22 more not shown — this panel samples each group; the count above is the real total.