github Java re-analysis due no deep scan

spectrayan/spector

Cognitive memory backbone for AI agents. Biologically-inspired 4-tier memory, it remembers, forgets, consolidates, and forms associations across a memory graph — Hebbian co-activation, temporal chains, and entity links.

maintainer: spectrayan
licence: Apache-2.0
first seen: 2026-06-06
last seen: 2026-09-17
releases · 30d: 2
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 23714a6 · analyzer v33 · 1d ago

skills & prompt files 15

danger signals2

committed secret Slack token spectrayan-spector-23714a6/synapse/spector-synapse/src/test/java/com/spectrayan/spector/synapse/connector/api/CredentialControllerTest.java :131 xoxb-i…(23 chars, redacted)
committed secret Slack token spectrayan-spector-23714a6/synapse/spector-synapse/src/test/java/com/spectrayan/spector/synapse/connector/service/CredentialServiceTest.java :65 xoxb-s…(23 chars, redacted)

code evidence vv0.1.0-alpha.2 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3257

filesystem 8

fs spectrayan-spector-23714a6/deploy/npm/spector/bin/spector.js :8 const fs = require('fs');
fs (weak) spectrayan-spector-23714a6/deploy/npm/spector/test/launcher.test.js :7 const fs = require('node:fs');
fs spectrayan-spector-23714a6/plugins/openclaw/src/bridge.ts :21 import { existsSync } from "node:fs";
fs spectrayan-spector-23714a6/plugins/openclaw/src/index.ts :32 import { writeFileSync, mkdirSync, existsSync } from "node:fs";
fs spectrayan-spector-23714a6/plugins/openclaw/src/jar-manager.ts :10 import { createWriteStream, existsSync, mkdirSync, readFileSync, writeFileSync, renameSync } from "node:fs";
fs spectrayan-spector-23714a6/plugins/openclaw/src/jdk-manager.ts :17 } from "node:fs";
fs spectrayan-spector-23714a6/plugins/openclaw/src/setup.ts :15 import { existsSync, writeFileSync, readFileSync, mkdirSync, renameSync } from "node:fs";
fs (weak) spectrayan-spector-23714a6/plugins/openclaw/tests/security-guards.test.ts :2 import { existsSync, mkdirSync, readFileSync, writeFileSync, rmSync } from "node:fs";

shell / exec 3

shell spectrayan-spector-23714a6/deploy/npm/spector/bin/spector.js :12 const { spawn, spawnSync } = require('child_process');
shell spectrayan-spector-23714a6/plugins/openclaw/src/bridge.ts :18 import { spawn, type ChildProcess } from "node:child_process";
shell spectrayan-spector-23714a6/plugins/openclaw/src/jdk-manager.ts :19 import { spawnSync, execFileSync } from "node:child_process";

network 8

net spectrayan-spector-23714a6/cortex/spector-cortex/src/app/core/services/event-stream.service.ts :96 fetch(url, {
net spectrayan-spector-23714a6/deploy/npm/spector/bin/spector.js :6 const http = require('http');
net (weak) spectrayan-spector-23714a6/deploy/npm/spector/test/launcher.test.js :10 const http = require('node:http');
net spectrayan-spector-23714a6/plugins/openclaw/src/jar-manager.ts :88 const response = await fetch(RELEASE_API_URL, {
net spectrayan-spector-23714a6/plugins/openclaw/src/jdk-manager.ts :250 const apiResponse = await fetch(apiUrl, {
net spectrayan-spector-23714a6/plugins/openclaw/src/setup.ts :150 const response = await fetch(`${baseUrl}/api/tags`);
net spectrayan-spector-23714a6/sdks/typescript/spector-client/src/transports/mcp-transport.ts :43 const res = await fetch(this.endpoint, {
net spectrayan-spector-23714a6/sdks/typescript/spector-client/src/transports/rest-transport.ts :80 const res = await fetch(url, {

install hooks 2

prepublishOnly spectrayan-spector-23714a6/plugins/openclaw/package.json :20 npm run build
prepublishOnly spectrayan-spector-23714a6/sdks/typescript/spector-client/package.json :45 npm run build

declared dependencies 76

io.modelcontextprotocol.sdk:mcp@*
com.spectrayan:spector-config@*
com.spectrayan:spector-core@*
com.spectrayan:spector-hdc@*
com.spectrayan:spector-index@*
com.spectrayan:spector-ingestion@*
com.spectrayan:spector-commons@*
com.spectrayan:spector-kernel@*
com.spectrayan:spector-provider-api@*
com.spectrayan:spector-providers@*
com.spectrayan:spector-test-support@*
com.spectrayan:spector-gpu@*

show 28 more

com.spectrayan:spector-cpu@*
com.spectrayan:spector-cluster@*
com.spectrayan:spring-ai-starter-spector-store@*
com.spectrayan:spector-mcp@*
com.spectrayan:spector-synapse@*
com.spectrayan:spector-connector@*
com.spectrayan:spector-memory@*
com.spectrayan:spector-events@*
com.spectrayan:spector-metrics@*
com.spectrayan:spector-cli@*
com.spectrayan:spector-batch@*
com.spectrayan:spector-bench@*
io.micrometer:micrometer-core@*
io.micrometer:micrometer-observation@*
io.micrometer:micrometer-observation-test@*
io.micrometer:context-propagation@*
io.micrometer:micrometer-tracing@*
io.micrometer:micrometer-tracing-test@*
io.micrometer:micrometer-registry-prometheus@*
tools.jackson.core:jackson-databind@*
com.fasterxml.jackson:jackson-bom@*
dev.langchain4j:langchain4j-bom@*
dev.langchain4j:langchain4j-embeddings-all-minilm-l6-v2-q@*
dev.langchain4j:langchain4j-embeddings-bge-small-en-v15-q@*
org.apache.commons:commons-configuration2@*
commons-beanutils:commons-beanutils@*
org.yaml:snakeyaml@*
com.github.jknack:handlebars@*

36 more not shown — this panel samples each group; the count above is the real total.