File comparison, multimedia management, and developer workspace tools using Beyond Compare
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 2 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
beyondcompare_agentic_workflow
-
beyondcompare_sampling_hint
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit fd0b284 · analyzer v33 · 1w ago
skills & prompt files 10
- agent-rules sandraschi-beyondcompare-mcp-fd0b284/.cursor/rules/architect.mdc
- skill sandraschi-beyondcompare-mcp-fd0b284/.cursor/skills/full-stack-developer/SKILL.md
- skill sandraschi-beyondcompare-mcp-fd0b284/.cursor/skills/mcp-server-developer/SKILL.md
- agent-rules sandraschi-beyondcompare-mcp-fd0b284/.cursorrules
- agent-rules sandraschi-beyondcompare-mcp-fd0b284/AGENTS.md
- agent-rules sandraschi-beyondcompare-mcp-fd0b284/CLAUDE.md
- prompt-file sandraschi-beyondcompare-mcp-fd0b284/mcpb/assets/prompts/system.md
- prompt-file sandraschi-beyondcompare-mcp-fd0b284/mcpb/assets/prompts/user.md
- prompt-file sandraschi-beyondcompare-mcp-fd0b284/mcpb/src/beyondcompare_mcp/prompts/init.txt
- prompt-file sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/prompts/init.txt
danger signals2
- dynamic code execution eval()/exec() sandraschi-beyondcompare-mcp-fd0b284/setup.py :24
exec(f.read()) - dynamic code execution __import__() sandraschi-beyondcompare-mcp-fd0b284/tests/test_toml.py :58
__import__(module)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 99
filesystem 24
- fs sandraschi-beyondcompare-mcp-fd0b284/HelloWorld30/cli.py :10
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/HelloWorld30/server.py :9
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/mcpb/mcpb_build.py :11
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/mcpb/src/beyondcompare_mcp/config.py :4
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/mcpb/src/beyondcompare_mcp/multimedia_scanner.py :13
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/mcpb/src/beyondcompare_mcp/server.py :11
import shutil - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/scripts/cua-smoke.py :16
from pathlib import Path - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/scripts/cua-webapp-test.py :32
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/setup.py :8
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/config.py :3
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/multimedia_scanner.py :14
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/server.py :128
import shutil
show 12 more
- fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/tools/developer/analyzer.py :13
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/tools/developer/backup.py :10
import shutil - fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/tools/developer/duplicates.py :13
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/tools/developer/health.py :9
import shutil - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_gateway.py :5
from pathlib import Path - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_gold_standard.py :18
from pathlib import Path - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_integration.py :11
from pathlib import Path - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_mcp_server.py :12
from pathlib import Path - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_mocked_integration.py :18
from pathlib import Path - fs (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_toml.py :15
with open("pyproject.toml", "rb") as f: - fs sandraschi-beyondcompare-mcp-fd0b284/web_sota/backend/log_buffer.py :8
from pathlib import Path - fs sandraschi-beyondcompare-mcp-fd0b284/web_sota/backend/server.py :3
from pathlib import Path
shell / exec 9
- shell sandraschi-beyondcompare-mcp-fd0b284/mcpb/src/beyondcompare_mcp/server.py :12
import subprocess - shell (weak) sandraschi-beyondcompare-mcp-fd0b284/scripts/cua-smoke.py :49
subprocess.run(["taskkill", "/F", "/IM", name, "/T"], capture_output=True, timeout=10) - shell (weak) sandraschi-beyondcompare-mcp-fd0b284/scripts/cua-webapp-test.py :27
import subprocess - shell sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/server.py :129
import subprocess - shell sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/tools/developer/analyzer.py :10
import subprocess - shell sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/tools/developer/health.py :295
import subprocess - shell (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_integration.py :295
import subprocess - shell (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_mcp_server.py :9
import subprocess - shell (weak) sandraschi-beyondcompare-mcp-fd0b284/tests/test_server.py :5
import subprocess
network 4
- net (weak) sandraschi-beyondcompare-mcp-fd0b284/scripts/cua-smoke.py :15
import argparse, json, glob, os, subprocess, sys, time, urllib.request, urllib.error - net (weak) sandraschi-beyondcompare-mcp-fd0b284/scripts/cua-webapp-test.py :30
import urllib.error - net sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/server.py :1702
import httpx - net sandraschi-beyondcompare-mcp-fd0b284/web_sota/backend/server.py :34
import httpx
tool registrations 2
- beyondcompare_sampling_hint sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/agentic.py :26
- beyondcompare_agentic_workflow sandraschi-beyondcompare-mcp-fd0b284/src/beyondcompare_mcp/agentic.py :36
declared dependencies 32
- mcp@>=1.12.4
- fastmcp@>=3.4.4,<4
- fastapi@>=0.115.0
- uvicorn@>=0.32.0
- httpx@>=0.27.0
- python-dotenv@>=1.0.0
- pydantic@>=2.5.0
- anyio@>=4.0.0
- structlog@>=23.0.0
- ruff@>=0.16.0,<0.17
- prefab-ui@>=0.14.0
- pytest@>=7.4.0
show 20 more
- pytest-cov@>=4.1.0
- pytest-asyncio@>=0.21.0
- pytest-mock@>=3.11.0
- black@>=23.9.0
- isort@>=5.12.0
- mypy@>=1.6.0
- pre-commit@>=3.4.0
- build@>=1.0.0
- wheel@>=0.41.0
- twine@>=4.0.0
- mkdocs@>=1.5.0
- mkdocs-material@>=9.4.0
- mkdocstrings@>=0.23.0
- tauri-build@2
- tauri@2
- tauri-plugin-shell@2
- tauri-plugin-fs@2
- tauri-plugin-process@2
- serde@1
- serde_json@1
cursor-plugin 6
- opaque (low) sandraschi-beyondcompare-mcp-fd0b284/.cursor/prompt_template.md
bundled .cursor/ plugin descriptor (sandraschi-beyondcompare-mcp-fd0b284/.cursor/prompt_template.md) — presence-detected; review the descriptor - opaque (low) sandraschi-beyondcompare-mcp-fd0b284/.cursor/rules.md
bundled .cursor/ plugin descriptor (sandraschi-beyondcompare-mcp-fd0b284/.cursor/rules.md) — presence-detected; review the descriptor - opaque (low) sandraschi-beyondcompare-mcp-fd0b284/.cursor/rules/architect.mdc
bundled .cursor/ plugin descriptor (sandraschi-beyondcompare-mcp-fd0b284/.cursor/rules/architect.mdc) — presence-detected; review the descriptor - opaque (low) sandraschi-beyondcompare-mcp-fd0b284/.cursor/settings.json
bundled .cursor/ plugin descriptor (sandraschi-beyondcompare-mcp-fd0b284/.cursor/settings.json) — presence-detected; review the descriptor - opaque (low) sandraschi-beyondcompare-mcp-fd0b284/.cursor/skills/full-stack-developer/SKILL.md
bundled .cursor/ plugin descriptor (sandraschi-beyondcompare-mcp-fd0b284/.cursor/skills/full-stack-developer/SKILL.md) — presence-detected; review the descriptor - opaque (low) sandraschi-beyondcompare-mcp-fd0b284/.cursor/tasks.json
bundled .cursor/ plugin descriptor (sandraschi-beyondcompare-mcp-fd0b284/.cursor/tasks.json) — presence-detected; review the descriptor
transport_posture 1
- network-listening, binds all interfaces, no auth detected sandraschi-beyondcompare-mcp-fd0b284/HelloWorld30/server.py :214
host="0.0.0.0",