github analyzed cde1c83 unconfirmed MCP

sanjay3290/ai-skills

github

Collection of agent skills for AI coding assistants

maintainer: sanjay3290
license: Apache-2.0
first seen: 2026-06-01
last seen: 2026-06-04
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-06-14 code analysis flagged hidden prompt content in sanjay3290/ai-skills

capabilities0 tools

transport — counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signalsgithub-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit cde1c83 · analyzer v17 · 1d ago

skills & prompt files 20

⚠ hidden: skill: skill-exfilsanjay3290-ai-skills-cde1c83/skills/jules/SKILL.md:135secret→sink: while true; do

danger signals6

over-broad OAuth scopehttps://www.googleapis.com/auth/documentssanjay3290-ai-skills-cde1c83/skills/google-docs/scripts/auth.py:33"https://www.googleapis.com/auth/documents",
over-broad OAuth scopehttps://www.googleapis.com/auth/drivesanjay3290-ai-skills-cde1c83/skills/google-docs/scripts/auth.py:34"https://www.googleapis.com/auth/drive",
over-broad OAuth scopehttps://www.googleapis.com/auth/drivesanjay3290-ai-skills-cde1c83/skills/google-drive/scripts/auth.py:35"https://www.googleapis.com/auth/drive",
over-broad OAuth scopehttps://www.googleapis.com/auth/spreadsheetssanjay3290-ai-skills-cde1c83/skills/google-sheets/scripts/auth.py:35"https://www.googleapis.com/auth/spreadsheets",
over-broad OAuth scopehttps://www.googleapis.com/auth/drivesanjay3290-ai-skills-cde1c83/skills/google-sheets/scripts/auth.py:36"https://www.googleapis.com/auth/drive",
over-broad OAuth scopehttps://www.googleapis.com/auth/drivesanjay3290-ai-skills-cde1c83/skills/google-slides/scripts/auth.py:36"https://www.googleapis.com/auth/drive",

code evidencevHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 26

fs sanjay3290-ai-skills-cde1c83/skills/atlassian/scripts/auth.py :39 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/azure-devops/scripts/attachments.py :21 with open(file_path, "rb") as f:
fs sanjay3290-ai-skills-cde1c83/skills/deep-research/scripts/research.py :16 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/elevenlabs/scripts/elevenlabs.py :22 import shutil
fs sanjay3290-ai-skills-cde1c83/skills/elevenlabs/scripts/extract.py :19 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/gmail/scripts/auth.py :237 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/gmail/scripts/gmail.py :89 with open(filepath, 'rb') as f:
fs sanjay3290-ai-skills-cde1c83/skills/google-calendar/scripts/auth.py :265 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/google-chat/scripts/auth.py :255 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/google-chat/scripts/chat.py :75 with open(file_path, 'rb') as f:
fs sanjay3290-ai-skills-cde1c83/skills/google-docs/scripts/auth.py :260 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/google-drive/scripts/auth.py :246 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/google-drive/scripts/drive.py :292 with open(abs_path, 'wb') as f:
fs sanjay3290-ai-skills-cde1c83/skills/google-sheets/scripts/auth.py :239 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/google-slides/scripts/auth.py :239 webbrowser.open(auth_url)
fs sanjay3290-ai-skills-cde1c83/skills/google-tts/scripts/extract.py :19 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/google-tts/scripts/google_tts.py :23 import shutil
fs sanjay3290-ai-skills-cde1c83/skills/imagen/scripts/generate_image.py :24 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/mssql/scripts/query.py :13 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/mysql/scripts/query.py :13 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/notebooklm/scripts/ask_question.py :15 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/notebooklm/scripts/auth_manager.py :10 import shutil
fs sanjay3290-ai-skills-cde1c83/skills/notebooklm/scripts/common.py :12 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/notebooklm/scripts/remote_manager.py :18 import shutil
fs sanjay3290-ai-skills-cde1c83/skills/outline/scripts/outline.py :31 from pathlib import Path
fs sanjay3290-ai-skills-cde1c83/skills/postgres/scripts/query.py :13 from pathlib import Path

shell / exec 2

shell sanjay3290-ai-skills-cde1c83/skills/elevenlabs/scripts/elevenlabs.py :23 import subprocess
shell sanjay3290-ai-skills-cde1c83/skills/google-tts/scripts/google_tts.py :24 import subprocess

network 25

net sanjay3290-ai-skills-cde1c83/skills/atlassian/scripts/api_client.py :29 import httpx as _httpx # type: ignore[no-redef]
net sanjay3290-ai-skills-cde1c83/skills/atlassian/scripts/auth.py :35 import urllib.error
net sanjay3290-ai-skills-cde1c83/skills/atlassian/scripts/mcp_client.py :19 import urllib.error
net sanjay3290-ai-skills-cde1c83/skills/azure-devops/scripts/api_client.py :9 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/azure-devops/scripts/attachments.py :10 import urllib.error
net sanjay3290-ai-skills-cde1c83/skills/azure-devops/scripts/auth.py :18 import urllib.error
net sanjay3290-ai-skills-cde1c83/skills/deep-research/scripts/research.py :20 import httpx
net sanjay3290-ai-skills-cde1c83/skills/elevenlabs/scripts/elevenlabs.py :26 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/gmail/scripts/auth.py :13 import socket
net sanjay3290-ai-skills-cde1c83/skills/gmail/scripts/gmail.py :13 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-calendar/scripts/auth.py :11 import socket
net sanjay3290-ai-skills-cde1c83/skills/google-calendar/scripts/gcal.py :10 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-chat/scripts/auth.py :12 import socket
net sanjay3290-ai-skills-cde1c83/skills/google-chat/scripts/chat.py :12 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-docs/scripts/auth.py :11 import socket
net sanjay3290-ai-skills-cde1c83/skills/google-docs/scripts/docs.py :11 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-drive/scripts/auth.py :11 import socket
net sanjay3290-ai-skills-cde1c83/skills/google-drive/scripts/drive.py :12 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-sheets/scripts/auth.py :11 import socket
net sanjay3290-ai-skills-cde1c83/skills/google-sheets/scripts/sheets.py :11 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-slides/scripts/auth.py :11 import socket
net sanjay3290-ai-skills-cde1c83/skills/google-slides/scripts/slides.py :11 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/google-tts/scripts/google_tts.py :27 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/imagen/scripts/generate_image.py :22 import urllib.request
net sanjay3290-ai-skills-cde1c83/skills/outline/scripts/outline.py :34 import httpx

secrets 13

secrets sanjay3290-ai-skills-cde1c83/skills/atlassian/scripts/auth.py :57 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/azure-devops/scripts/auth.py :15 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/elevenlabs/scripts/elevenlabs.py :69 api_key = os.environ.get("ELEVENLABS_API_KEY")
secrets sanjay3290-ai-skills-cde1c83/skills/gmail/scripts/auth.py :11 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-calendar/scripts/auth.py :22 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-chat/scripts/auth.py :22 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-docs/scripts/auth.py :9 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-drive/scripts/auth.py :22 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-sheets/scripts/auth.py :22 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-slides/scripts/auth.py :22 import keyring
secrets sanjay3290-ai-skills-cde1c83/skills/google-tts/scripts/google_tts.py :79 api_key = os.environ.get("GOOGLE_TTS_API_KEY")
secrets sanjay3290-ai-skills-cde1c83/skills/imagen/scripts/generate_image.py :42 api_key = os.environ.get("GEMINI_API_KEY")
secrets sanjay3290-ai-skills-cde1c83/skills/outline/scripts/outline.py :307 api_key = os.environ.get("OUTLINE_API_KEY", "")

database 1

db sanjay3290-ai-skills-cde1c83/skills/postgres/scripts/query.py :17 import psycopg2

declared dependencies 3

httpx@>=0.25.0
keyring@>=24.0.0
python-dotenv@>=1.0.0