github Python re-analysis due

sandraschi/deepfang

github

Execution sandbox for AI agents with three-stage sanitize, adjudicate, execute pipeline

maintainer
sandraschi
licence
MIT
first seen
2026-06-30
last seen
2026-09-06
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 7 tools
transport stdio · sse counts 7 tools · 0 res · 0 prompts permission surface via README inference

tools

  • deepfang_adjudicate

    Stage 2 only — LLM verdict with rationale

  • deepfang_agentic_workflow

    Multi-step goal via FastMCP 3.2 sampling

  • deepfang_audit

    Query the adjudication log

  • deepfang_dispatch

    Stage 3 only — requires prior approval in audit log

  • deepfang_pipeline

    Full pipeline in one call — the main entry point

  • deepfang_sanitize

    Stage 1 only — fast regex scan, returns threat score

  • deepfang_status

    Health check across all pipeline services

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 23

filesystem 5

  • fs sandraschi-deepfang-f8a49ea/containers/sanitizer.py :22 from pathlib import Path
  • fs sandraschi-deepfang-f8a49ea/containers/worker.py :34 from pathlib import Path
  • fs (weak) sandraschi-deepfang-f8a49ea/scripts/cua-smoke.py :47 with open(p) as f:
  • fs (weak) sandraschi-deepfang-f8a49ea/scripts/cua-webapp-test.py :33 from pathlib import Path
  • fs sandraschi-deepfang-f8a49ea/src/deepfang/main.py :10 from pathlib import Path

shell / exec 2

  • shell (weak) sandraschi-deepfang-f8a49ea/scripts/cua-smoke.py :31 import subprocess
  • shell (weak) sandraschi-deepfang-f8a49ea/scripts/cua-webapp-test.py :27 import subprocess

network 8

  • net sandraschi-deepfang-f8a49ea/containers/deepseek_bridge.py :5 import httpx
  • net sandraschi-deepfang-f8a49ea/containers/sanitizer.py :25 import httpx
  • net sandraschi-deepfang-f8a49ea/containers/worker.py :37 import httpx
  • net (weak) sandraschi-deepfang-f8a49ea/scripts/cua-smoke.py :34 import urllib.error
  • net (weak) sandraschi-deepfang-f8a49ea/scripts/cua-webapp-test.py :30 import urllib.error
  • net sandraschi-deepfang-f8a49ea/src/deepfang/main.py :13 import httpx
  • net (weak) sandraschi-deepfang-f8a49ea/tests/test_sanitizer.py :9 from httpx import ASGITransport, AsyncClient
  • net (weak) sandraschi-deepfang-f8a49ea/tests/test_worker.py :7 from httpx import ASGITransport, AsyncClient

secrets 1

  • secrets sandraschi-deepfang-f8a49ea/containers/deepseek_bridge.py :9 DEEPSEEK_API_KEY = os.getenv("DEEPSEEK_API_KEY", "")

declared dependencies 11

  • fastmcp@>=3.4.4,<4
  • fastapi@>=0.115
  • uvicorn@>=0.32
  • httpx@>=0.27
  • websockets@>=12
  • pydantic@>=2.7
  • structlog@>=24.0
  • prometheus-fastapi-instrumentator@>=7.0
  • pyyaml@>=6.0
  • pytest@>=8
  • pytest-asyncio@>=0.23