Daemon-less OS security boundary & sandbox for AI coding agents (Codex, Claude Code, Cursor, Aider)
Drift inferred · capture-to-capture
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×14 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
- HIGH code analysis flagged committed secret ×8 in shleder/vetto
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 70b3cf7 · analyzer v33 · 1h ago
skills & prompt files 2
danger signals15
- committed secret Anthropic key shleder-vetto-70b3cf7/src/cli/mask.rs :84
sk-ant…(49 chars, redacted) - committed secret OpenAI key shleder-vetto-70b3cf7/src/cli/mask.rs :85
sk-pro…(44 chars, redacted) - committed secret npm token shleder-vetto-70b3cf7/src/cli/mask.rs :87
npm_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/cli/mask.rs :89
gho_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/logger/sanitizer.rs :411
ghp_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/pty/ansi.rs :195
ghp_01…(40 chars, redacted) - committed secret OpenAI key shleder-vetto-70b3cf7/src/pty/redact.rs :581
sk-pro…(44 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/pty/redact.rs :591
ghp_01…(40 chars, redacted) - committed secret Anthropic key shleder-vetto-70b3cf7/src/pty/redact.rs :613
sk-ant…(49 chars, redacted) - committed secret npm token shleder-vetto-70b3cf7/src/pty/redact.rs :655
npm_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/report/html.rs :180
ghp_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/report/json.rs :46
ghp_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/report/mod.rs :453
ghp_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/src/tui/app.rs :601
ghp_01…(40 chars, redacted) - committed secret GitHub token shleder-vetto-70b3cf7/tests/integration/secret_masking.rs :53
ghp_01…(40 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 259
filesystem 2
- fs shleder-vetto-70b3cf7/npm/bin/vetto.js :5
const fs = require("fs"); - fs shleder-vetto-70b3cf7/plugins/vscode/src/extension.ts :1
import * as fs from "node:fs";
shell / exec 1
- shell shleder-vetto-70b3cf7/npm/bin/vetto.js :7
const { spawn } = require("child_process");
declared dependencies 24
- anyhow@1
- chrono@0.4
- clap@4
- clap_complete@4
- clap_mangen@0.2
- crossterm@0.27
- glob@0.3
- opentelemetry@0.27
- opentelemetry-otlp@0.27
- opentelemetry_sdk@0.27
- ratatui@0.26
- rusqlite@0.31
show 12 more
- serde@1
- serde_json@1
- ed25519-dalek@2.1
- rand_core@0.6
- sha2@0.10
- thiserror@1
- tokio@1
- toml@0.8
- toml_edit@0.22
- tracing@0.1
- tracing-subscriber@0.3
- criterion@0.5
jetbrains-plugin 1
- opaque (low) shleder-vetto-70b3cf7/plugins/jetbrains/src/main/resources/META-INF/plugin.xml
bundled JetBrains plugin "vetto" (shleder-vetto-70b3cf7/plugins/jetbrains/src/main/resources/META-INF/plugin.xml) — presence-detected; review the plugin descriptor