github Python analyzed f5bb315

smixs/eve-assistant

Личный ассистент-агент (Ева) на eve + Ollama Cloud (DeepSeek-V4-Pro): личность, скиллы, субагенты, Telegram, cron

Drift inferred · capture-to-capture

HIGH 2026-08-15 code analysis flagged committed secret in smixs/eve-assistant
HIGH 2026-08-13 code analysis flagged committed secret in smixs/eve-assistant
HIGH 2026-08-11 code analysis flagged committed secret in smixs/eve-assistant
HIGH 2026-08-10 code analysis flagged committed secret in smixs/eve-assistant
HIGH 2026-08-09 code analysis flagged committed secret in smixs/eve-assistant
HIGH 2026-08-07 code analysis flagged committed secret in smixs/eve-assistant
HIGH 2026-07-29 code analysis flagged hidden prompt content, committed secret in smixs/eve-assistant
HIGH 2026-07-18 code analysis flagged hidden prompt content, committed secret in smixs/eve-assistant
HIGH 2026-07-15 code analysis flagged hidden prompt content, committed secret in smixs/eve-assistant
HIGH 2026-07-10 code analysis flagged hidden prompt content, committed secret in smixs/eve-assistant
HIGH 2026-07-06 code analysis flagged hidden prompt content, committed secret in smixs/eve-assistant

capabilities 1 tools

transport streamable-http counts 1 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit f5bb315 · analyzer v33 · 4d ago

suspicious endpoint api.telegram.org smixs-iva-agent-f5bb315/services/telegram-userbot/onboarding.py :77 f"https://api.telegram.org/bot{token}/sendPhoto",

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 508

fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/cleanup.py :21 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/common.py :12 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/daily.py :13 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/dedup.py :24 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/discover.py :13 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/enforce.py :14 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/engine.py :17 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/enrich.py :18 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/generate_schema.py :10 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/graph.py :20 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/link_cleanup.py :16 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/moc.py :14 from pathlib import Path

show 13 more

fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/orchestrate.py :23 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/research.py :16 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/supersede.py :23 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/swarm_prepare.py :13 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/swarm_reduce.py :16 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_autograph.py :14 import shutil
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_dedup_recovery_properties.py :10 import shutil
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_frontmatter_properties.py :11 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_health_history_integrity.py :16 from pathlib import Path
fs (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_supersede_integrity.py :13 from pathlib import Path
fs smixs-iva-agent-f5bb315/services/telegram-userbot/guardrails.py :35 """Raised when the circuit-breaker is open (too many FloodWaits)."""
fs smixs-iva-agent-f5bb315/services/telegram-userbot/serve.py :31 import shutil
fs smixs-iva-agent-f5bb315/services/telegram-userbot/test_session_path.py :6 from pathlib import Path

shell (weak) smixs-iva-agent-f5bb315/scripts/autograph/orchestrate.py :24 import subprocess
shell (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_autograph.py :16 import subprocess
shell (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_health_history_integrity.py :11 import subprocess
shell (weak) smixs-iva-agent-f5bb315/scripts/autograph/tests/test_supersede_integrity.py :9 import subprocess

net (weak) smixs-iva-agent-f5bb315/scripts/autograph/enrich.py :20 from urllib.request import Request, urlopen
net smixs-iva-agent-f5bb315/services/telegram-userbot/onboarding.py :23 import httpx

secrets (weak) smixs-iva-agent-f5bb315/scripts/autograph/enrich.py :46 key = os.environ.get('OPENROUTER_API_KEY', '')
secrets smixs-iva-agent-f5bb315/services/telegram-userbot/onboarding.py :68 token = os.getenv("TELEGRAM_BOT_TOKEN")
secrets smixs-iva-agent-f5bb315/services/telegram-userbot/serve.py :220 env = os.getenv("TELEGRAM_MCP_TOKEN")