github TypeScript analyzed 33d10b0

sergezuber/FABULA-LLM-5

The agent harness that makes small local models finish hard tasks — and prove it. Done is enforced by the engine, not the prompt: gates, rewinds, a judge, and a replayable Proof-of-Done receipt on every finished run. Any model in the socket. Local, sovereign, air-gapped-capable. macOS · Apple Silicon.

maintainer: sergezuber
license: MIT
first seen: 2026-07-16
last seen: 2026-08-02
releases · 30d: 14
short id

risk 64/100 · heuristic grade

D high

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 12
trust mitigators mixed − 3

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

graded 9m ago · see ecosystem CVEs →

risk trajectory 3 movements

3d ago C · 57 → D · 64
5d ago D · 60 → C · 57
2w ago C · 52 → D · 60

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 1 findings · grade factor +12

high dangerous code

dynamic exec: new Function(), indirect eval · obfuscated payload: dynamic require()/import()

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 33d10b0 · analyzer v28 · 3d ago

skills & prompt files 43

danger signals18

dynamic code execution new Function() sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/src/cli/cmd/debug/agent.ts :110 return new Function(`return (${trimmed})`)()
dynamic code execution new Function() sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/test/cli/cmd/receipt-identity.test.ts :50 return new Function("__d", "createHash", `const __canon = JSON.stringify(${expr}); return ${hashExpr}`)(d, createHash) as string
dynamic code execution indirect eval sergezuber-FABULA-LLM-5-33d10b0/plugin/fabula-browser.ts :170 const res = await _page.evaluate((e: string) => { try { return JSON.stringify((0, eval)(e)) } catch (err: any) { return "eval error: " + err.message } }, args.eval)
suspicious endpoint 100.100.100.200 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/test/util/ssrf.test.ts :24 await expect(assertSafeUrl("http://100.100.100.200/")).rejects.toThrow("SSRF protection")
suspicious endpoint 8.8.8.8 sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/test/util/ssrf.test.ts :67 await expect(assertSafeUrl("http://8.8.8.8/")).resolves.toBeUndefined()
suspicious endpoint 172.32.0.1 sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/test/util/ssrf.test.ts :68 await expect(assertSafeUrl("http://172.32.0.1/")).resolves.toBeUndefined()
suspicious endpoint 93.184.216.34 sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/test/util/ssrf.test.ts :69 await expect(assertSafeUrl("http://93.184.216.34/")).resolves.toBeUndefined()
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/engine/packages/opencode/test/util/ssrf.test.ts :86 headers: { Location: "http://169.254.169.254/latest/meta-data/" },
suspicious endpoint us.i.posthog.com (telemetry) sergezuber-FABULA-LLM-5-33d10b0/engine/script/stats.ts :11 const response = await fetch("https://us.i.posthog.com/i/v0/e/", {
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/corner-execute-code.test.ts :279 ["cloud metadata IP", "python", "import urllib.request\nurllib.request.urlopen('http://169.254.169.254/latest/meta-data/')", "cloud_metadata"],
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/corner-hooks-security.test.ts :129 await expectBlocked("web_fetch", { url: "http://169.254.169.254/latest/meta-data/" }, "ssrf:cloud_metadata")
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/corner-security-libs.test.ts :166 expect(checkUrlSync("http://169.254.169.254/latest/meta-data/").code).toBe("cloud_metadata")
suspicious endpoint 8.8.8.8 sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/corner-security-libs.test.ts :175 expect(checkUrlSync("https://8.8.8.8/").blocked).toBe(false)
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/fabula-browser.test.ts :29 expect(out(await T.browser_navigate.execute({ url: "http://169.254.169.254/", description: "x" }))).toContain("BLOCKED")
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/fabula-security.wiring.test.ts :42 await expectBlocked("web_fetch", { url: "http://169.254.169.254/latest/meta-data/" }, "ssrf")
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/__tests__/fabula-tools.safefetch.test.ts :15 res.writeHead(302, { Location: "http://169.254.169.254/latest/meta-data/" }); res.end(); return
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/lib/codeguard.test.ts :9 expect(scanCode("python", "import urllib.request; urllib.request.urlopen('http://169.254.169.254/')").blocked).toBe(true)
suspicious endpoint 169.254.169.254 (cloud metadata) sergezuber-FABULA-LLM-5-33d10b0/plugin/lib/security.test.ts :28 expect(checkUrlSync("http://169.254.169.254/latest/meta-data/").blocked).toBe(true)

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:sergezuber/FABULA-LLM-5/badge.svg)](https://mcpobservatory.com/servers/github:sergezuber/FABULA-LLM-5/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of sergezuber.

sergezuber/FABULA-LLM-5

skills & prompt files 43

danger signals18

Navigate

Stream

Features

Display