github not analyzable

scopeblind/scopeblind-gateway

Signed receipts and Cedar policies for AI agent tool calls. Claude Code hooks, MCP gateway.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio · http verified reported listed in the official MCP registry counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed analyzer v18 · 27m ago

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

last analysis: fetch-failed · showing evidence from the last successful analysis (3d ago)

fs ScopeBlind-scopeblind-gateway-2f99e55/src/cedar-evaluator.ts :13 import { readFileSync, readdirSync, existsSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/evidence-store.ts :12 import { readFileSync, writeFileSync, existsSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/gateway.ts :4 import { appendFileSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/hook-server.ts :29 import { appendFileSync, readFileSync, existsSync, readdirSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/http-server.ts :18 import { readFileSync, existsSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/policy.ts :2 import { readFileSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/report.ts :12 import { readFileSync, existsSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/signing.ts :12 import { readFileSync, existsSync } from 'node:fs';
fs ScopeBlind-scopeblind-gateway-2f99e55/src/simulate.ts :12 import { readFileSync } from 'node:fs';

shell ScopeBlind-scopeblind-gateway-2f99e55/src/cli.ts :1620 const { execSync } = await import('node:child_process');
shell ScopeBlind-scopeblind-gateway-2f99e55/src/gateway.ts :1 import { spawn, type ChildProcess } from 'node:child_process';
shell ScopeBlind-scopeblind-gateway-2f99e55/src/sandbox.ts :221 const { execSync } = await import('node:child_process');
shell ScopeBlind-scopeblind-gateway-2f99e55/src/types.ts :283 /** Command to spawn (first element of child process) */

net ScopeBlind-scopeblind-gateway-2f99e55/src/cli.ts :756 response = await fetch('https://api.scopeblind.com/sandbox/create', { method: 'POST' });
net ScopeBlind-scopeblind-gateway-2f99e55/src/external-pdp.ts :38 const response = await fetch(config.endpoint, {
net ScopeBlind-scopeblind-gateway-2f99e55/src/hook-server.ts :27 import { createServer, type IncomingMessage, type ServerResponse, type Server } from 'node:http';
net ScopeBlind-scopeblind-gateway-2f99e55/src/http-server.ts :17 import { createServer, type Server, type IncomingMessage, type ServerResponse } from 'node:http';
net ScopeBlind-scopeblind-gateway-2f99e55/src/http-transport.ts :16 import { createServer, type IncomingMessage, type ServerResponse } from 'node:http';
net ScopeBlind-scopeblind-gateway-2f99e55/src/notifications.ts :90 const response = await fetch(
net ScopeBlind-scopeblind-gateway-2f99e55/src/rekor-anchor.ts :86 const response = await fetch(`${REKOR_API}/log/entries`, {
net ScopeBlind-scopeblind-gateway-2f99e55/src/sandbox.ts :237 const response = await fetch('https://api.e2b.dev/sandboxes', {

secrets ScopeBlind-scopeblind-gateway-2f99e55/src/notifications.ts :241 const twilioToken = process.env.TWILIO_AUTH_TOKEN;