github Python re-analysis due deep scan · partial (201/2,702 files)

superdesigndev/treg

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn

maintainer: superdesigndev
licence: NOASSERTION
first seen: 2026-08-11
last seen: 2026-09-10
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-10 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-09 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-08 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-08 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-08 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-08 code analysis flagged dynamic code execution in superdesigndev/treg
HIGH 2026-09-08 code analysis flagged dynamic code execution in superdesigndev/treg

capabilities 1 tools

transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 1 tools · 0 res · 0 prompts permission surface via code analysis

tools

balance

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 1061db3 · analyzer v33 · 1h ago

skills & prompt files 19

danger signals16

dynamic code execution unsafe yaml.load() superdesigndev-treg-1061db3/scripts/catalog_ingest.py :801 spec = yaml.load(raw, Loader=_TolerantLoader)
suspicious endpoint app.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/application/onboard/sandbox.py :139 "key": "POSTHOG_KEY", "base_url": "https://app.posthog.com",
suspicious endpoint eu.i.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/cli_analytics.py :14 POSTHOG_HOST = "https://eu.i.posthog.com"
suspicious endpoint eu.i.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/config.py :378 posthog_host: str = "https://eu.i.posthog.com"
suspicious endpoint api.telegram.org superdesigndev-treg-1061db3/src/treg/providers.py :98 {"provider": "Telegram", "tokens": ["TELEGRAM"], "base_url": "https://api.telegram.org", "auth": {"shape": "query"}},
suspicious endpoint sentry.io (telemetry) superdesigndev-treg-1061db3/src/treg/providers.py :232 {"provider": "Sentry", "tokens": ["SENTRY"], "base_url": "https://sentry.io/api/0", "auth": {"shape": "bearer"},
suspicious endpoint api.datadoghq.com (telemetry) superdesigndev-treg-1061db3/src/treg/providers.py :237 {"provider": "Datadog", "tokens": ["DATADOG"], "base_url": "https://api.datadoghq.com/api/v1", "auth": {"shape": "api_key_header", "header": "DD-API-KEY"}},
suspicious endpoint app.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/providers.py :264 {"provider": "PostHog", "tokens": ["POSTHOG"], "base_url": "https://app.posthog.com", "auth": {"shape": "bearer"}},
suspicious endpoint eu.i.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/tests/test_attribution.py :79 monkeypatch.setattr(get_settings(), "posthog_host", "https://eu.i.posthog.com/", raising=False)
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_bughunt_server.py :605 r = await c.post("/users", json={"email": "ssrf@x.io", "webhook_url": "http://169.254.169.254/latest/meta-data"})
suspicious endpoint treg.ngrok.app superdesigndev-treg-1061db3/tests/test_mcp.py :833 for host in ("https://treg.ngrok.app", "http://127.0.0.1:18790", "https://anything.example"):
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_mcp_oauth.py :248 "https://169.254.169.254/latest/meta", # cloud metadata — the classic SSRF target
suspicious endpoint eu.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/tests/test_providers.py :229 env = _write_env(tmp_path, "POSTHOG_HOST=https://eu.posthog.com\nPOSTHOG_PROJECT_ID=123\nPOSTHOG_API_KEY=phc_x\n")
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_providers.py :307 "https://x.internal/y", "https://169.254.169.254/latest"):
suspicious endpoint app.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/tests/test_sandbox.py :135 assert "/call/https://app.posthog.com" in body # calls through the treg proxy
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_security_round2.py :9 for bad in ("http://169.254.169.254/latest/meta-data/", "http://localhost/x",

code evidence vmeta-consent-notice-evidence · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 382

filesystem 66

fs (weak) superdesigndev-treg-1061db3/.agents/skills/tools-registry-context/scripts/build-map.py :20 from pathlib import Path
fs superdesigndev-treg-1061db3/e2e_check.py :70 with open(os.path.join(here, ".env")) as fh:
fs superdesigndev-treg-1061db3/marketing/landing/build.py :12 HERE = pathlib.Path(__file__).parent
fs superdesigndev-treg-1061db3/marketing/landing/build_html.py :22 HERE = pathlib.Path(__file__).parent
fs superdesigndev-treg-1061db3/marketing/landing/build_preview.py :17 HERE = pathlib.Path(__file__).parent
fs superdesigndev-treg-1061db3/marketing/landing/build_review.py :18 HERE = pathlib.Path(__file__).parent
fs (weak) superdesigndev-treg-1061db3/scripts/backfill_call_archive_links.py :30 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/build_plugin.py :55 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/catalog_cost_provenance.py :34 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/catalog_drift.py :19 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/catalog_fx_update.py :13 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/catalog_ingest.py :36 from pathlib import Path

show 28 more

fs (weak) superdesigndev-treg-1061db3/scripts/catalog_validate.py :46 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/catalog_verify.py :37 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/catalog_verify_extended.py :58 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/contactout_overflow_verify.py :15 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/dump_surface.py :10 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/import_arena_verification.py :10 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/manual_grant.py :71 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/minimax_plugin.py :21 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/provider_balances.py :17 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/screenshot-mobile-sidebar.py :20 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/search_bench.py :23 from pathlib import Path
fs (weak) superdesigndev-treg-1061db3/scripts/usage_report.py :53 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/agents.py :21 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/api.py :19 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/cli.py :29 import shutil
fs superdesigndev-treg-1061db3/src/treg/cli_analytics.py :10 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/convert.py :14 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/domain/capacity/routes.py :14 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/domain/catalog/routing/contracts.py :9 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/domain/catalog/routing/paths.py :194 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/domain/catalog/store.py :23 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/localproxy.py :55 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/mcp_install.py :29 import shutil
fs superdesigndev-treg-1061db3/src/treg/models.py :809 # False while the hold is open (amount is the ESTIMATE), True once settled (amount is CONSUMED).
fs superdesigndev-treg-1061db3/src/treg/providers.py :320 with open(env_path) as f:
fs superdesigndev-treg-1061db3/src/treg/routers/admin.py :543 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/routers/arena.py :2 from pathlib import Path
fs superdesigndev-treg-1061db3/src/treg/routers/resources.py :5 from pathlib import Path

26 more not shown — this panel samples each group; the count above is the real total.

shell / exec 11

shell (weak) superdesigndev-treg-1061db3/scripts/catalog_ingest.py :31 import subprocess
shell (weak) superdesigndev-treg-1061db3/scripts/screenshot-mobile-sidebar.py :17 import subprocess
shell superdesigndev-treg-1061db3/src/treg/cli.py :31 import subprocess
shell superdesigndev-treg-1061db3/src/treg/mcp_install.py :30 import subprocess
shell superdesigndev-treg-1061db3/src/treg/shell.py :27 import subprocess
shell (weak) superdesigndev-treg-1061db3/tests/test_audit.py :4 import subprocess
shell (weak) superdesigndev-treg-1061db3/tests/test_cli_analytics.py :4 import subprocess
shell (weak) superdesigndev-treg-1061db3/tests/test_import_lightness.py :6 import subprocess
shell (weak) superdesigndev-treg-1061db3/tests/test_maintenance.py :9 import subprocess
shell (weak) superdesigndev-treg-1061db3/tests/test_plugin.py :31 import subprocess
shell (weak) superdesigndev-treg-1061db3/tests/test_shell.py :16 import subprocess

network 163

net superdesigndev-treg-1061db3/e2e_check.py :14 import urllib.error
net (weak) superdesigndev-treg-1061db3/scripts/catalog_drift.py :21 import urllib.request
net (weak) superdesigndev-treg-1061db3/scripts/catalog_fx_update.py :11 import urllib.request
net (weak) superdesigndev-treg-1061db3/scripts/catalog_verify.py :38 from urllib.parse import urlsplit
net (weak) superdesigndev-treg-1061db3/scripts/catalog_verify_extended.py :59 from urllib.parse import urlsplit
net (weak) superdesigndev-treg-1061db3/scripts/contactout_overflow_verify.py :20 import httpx
net (weak) superdesigndev-treg-1061db3/scripts/dump_surface.py :157 {"action": "create", "task": "app.state.http (httpx.AsyncClient)"},
net (weak) superdesigndev-treg-1061db3/scripts/indexnow_submit.py :22 import urllib.request
net (weak) superdesigndev-treg-1061db3/scripts/manual_grant.py :103 from urllib.parse import parse_qsl, urlencode, urlsplit, urlunsplit
net (weak) superdesigndev-treg-1061db3/scripts/oauth_acceptance.py :18 import httpx
net (weak) superdesigndev-treg-1061db3/scripts/screenshot-mobile-sidebar.py :52 import httpx
net (weak) superdesigndev-treg-1061db3/scripts/usage_report.py :52 import urllib.request

show 28 more

net superdesigndev-treg-1061db3/src/treg/analytics.py :46 import httpx
net superdesigndev-treg-1061db3/src/treg/application/arena.py :17 from urllib.parse import urlencode
net superdesigndev-treg-1061db3/src/treg/application/arena_insights.py :11 from urllib.parse import parse_qs, urlsplit
net superdesigndev-treg-1061db3/src/treg/application/asynctasks.py :11 import httpx
net superdesigndev-treg-1061db3/src/treg/application/auth.py :13 from urllib.parse import quote
net superdesigndev-treg-1061db3/src/treg/application/call/evidence.py :10 from urllib.parse import quote, quote_plus, unquote
net superdesigndev-treg-1061db3/src/treg/application/call/overflow.py :30 import httpx
net superdesigndev-treg-1061db3/src/treg/application/call/resolve.py :10 from urllib.parse import quote, urlsplit
net superdesigndev-treg-1061db3/src/treg/application/call/route.py :26 from urllib.parse import urlencode
net superdesigndev-treg-1061db3/src/treg/application/call/service.py :11 from urllib.parse import parse_qsl, urlencode, urlsplit
net superdesigndev-treg-1061db3/src/treg/application/connect.py :9 from urllib.parse import parse_qsl, urlsplit, urlunsplit
net superdesigndev-treg-1061db3/src/treg/application/signup.py :4 from urllib.parse import unquote
net superdesigndev-treg-1061db3/src/treg/archive.py :34 from urllib.parse import parse_qsl
net superdesigndev-treg-1061db3/src/treg/bootstrap.py :13 import httpx
net superdesigndev-treg-1061db3/src/treg/bootstrap_http.py :7 from urllib.parse import urlsplit
net superdesigndev-treg-1061db3/src/treg/cli.py :40 from urllib.parse import parse_qsl, quote, urlsplit
net superdesigndev-treg-1061db3/src/treg/config.py :8 from urllib.parse import urlsplit
net superdesigndev-treg-1061db3/src/treg/convert.py :15 from urllib.parse import urlsplit
net superdesigndev-treg-1061db3/src/treg/domain/arena.py :7 from urllib.parse import urlsplit, urlunsplit
net superdesigndev-treg-1061db3/src/treg/domain/arena_insights.py :4 from urllib.parse import parse_qs, urlsplit, unquote
net superdesigndev-treg-1061db3/src/treg/domain/asynctasks/__init__.py :8 from urllib.parse import urlsplit
net superdesigndev-treg-1061db3/src/treg/domain/capacity/collectors.py :13 import httpx
net superdesigndev-treg-1061db3/src/treg/domain/capacity/routes.py :15 from urllib.parse import urlsplit
net superdesigndev-treg-1061db3/src/treg/domain/capacity/sweep.py :18 import httpx
net superdesigndev-treg-1061db3/src/treg/domain/capacity/verify.py :16 import httpx
net superdesigndev-treg-1061db3/src/treg/domain/connections/oauth_flow.py :8 from urllib.parse import urlencode
net superdesigndev-treg-1061db3/src/treg/domain/governance/access.py :3 from urllib.parse import urlsplit
net superdesigndev-treg-1061db3/src/treg/domain/identity/mcp_oauth.py :32 from urllib.parse import urljoin

123 more not shown — this panel samples each group; the count above is the real total.

secrets 6

secrets (weak) superdesigndev-treg-1061db3/scripts/catalog_ingest.py :1175 token = os.environ.get("REPLICATE_API_TOKEN", "").strip()
secrets (weak) superdesigndev-treg-1061db3/scripts/dump_surface.py :22 os.environ["TREG_RESEND_API_KEY"] = ""
secrets superdesigndev-treg-1061db3/src/treg/cli.py :23 import getpass
secrets superdesigndev-treg-1061db3/src/treg/cli_analytics.py :61 key = os.environ.get("TREG_CLI_POSTHOG_KEY", POSTHOG_KEY if hosted else "")
secrets (weak) superdesigndev-treg-1061db3/tests/conftest.py :32 os.environ["TREG_RESEND_API_KEY"] = "" # never fire a real Resend send from the test suite (send_otp/send_invite skip when empty)
secrets (weak) superdesigndev-treg-1061db3/tests/test_skills.py :34 _skill(tmp_path, "render", script='API = "https://api.render.com/v1"\nimport os\nk=os.environ.get("RENDER_API_KEY")\n')

database 131

db superdesigndev-treg-1061db3/e2e_check.py :11 import sqlite3
db (weak) superdesigndev-treg-1061db3/scripts/backfill_call_archive_links.py :92 import asyncpg
db (weak) superdesigndev-treg-1061db3/scripts/manual_grant.py :113 from sqlalchemy.ext.asyncio import AsyncSession, async_sessionmaker, create_async_engine
db (weak) superdesigndev-treg-1061db3/scripts/provider_balances.py :21 from sqlalchemy.exc import OperationalError # noqa: E402
db (weak) superdesigndev-treg-1061db3/scripts/usage_report.py :255 import asyncpg
db superdesigndev-treg-1061db3/src/treg/adsconv.py :48 from sqlalchemy import or_
db superdesigndev-treg-1061db3/src/treg/alembic/env.py :7 from sqlalchemy import text
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0001_baseline_current_schema.py :11 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0002_archive_tables.py :15 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0003_callrecord_cached.py :19 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0004_archivekey_request_shape.py :20 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0005_capacity_policy_snapshot.py :13 import sqlalchemy as sa

show 28 more

db superdesigndev-treg-1061db3/src/treg/alembic/versions/0006_overflow_route.py :10 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0007_overflow_spend.py :10 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0008_org_platform_overflow_disabled.py :16 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0009_callrecord_hit.py :12 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0010_oauth_authorization_method.py :17 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0011_callrecord_archive_link.py :14 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0012_callrecord_cached_index.py :14 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0013_archive_endpoint_stats.py :18 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0014_archivesnapshot_enc.py :13 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0017_async_task_record.py :13 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0018_async_resource_ownership.py :10 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0019_async_poll_failures.py :7 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0020_callrecord_created_at_indexes.py :48 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0021_ledgerentry_org_created_at_index.py :45 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0022_org_spent_today_counter.py :38 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0023_callrecord_org_user_created_at_index.py :25 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0024_membership_calls_today_counter.py :33 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0025_feedback.py :8 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0026_callreview.py :7 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0027_enrich_arena.py :7 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0028_arena_insights.py :7 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0029_arena_verification_snapshot.py :7 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/alembic/versions/0030_feedback_handling.py :7 import sqlalchemy as sa
db superdesigndev-treg-1061db3/src/treg/api.py :24 from sqlalchemy.exc import IntegrityError
db superdesigndev-treg-1061db3/src/treg/application/arena.py :19 from sqlalchemy import delete, or_, update
db superdesigndev-treg-1061db3/src/treg/application/arena_insights.py :13 from sqlalchemy import Integer, String, case, column, delete, func, select, values
db superdesigndev-treg-1061db3/src/treg/application/arena_verification_insights.py :8 from sqlalchemy import select
db superdesigndev-treg-1061db3/src/treg/application/asynctasks.py :13 from sqlalchemy import select, update

91 more not shown — this panel samples each group; the count above is the real total.

tool registrations 1

balance superdesigndev-treg-1061db3/src/treg/mcp.py :1281

declared dependencies 15

httpx@>=0.27
posthog@>=7.47.3
questionary@>=2.0
alembic@>=1.16.5
fastapi@>=0.115
uvicorn@>=0.32
sqlmodel@>=0.0.22
sqlalchemy@>=2.0.42
aiosqlite@>=0.20
asyncpg@>=0.30
cryptography@>=43
pydantic-settings@>=2.5

show 3 more

pyyaml@>=6
s@data files (src/treg/catalog/*.yaml) — server-side only
redis@>=5

perm:untrusted 1

untrusted superdesigndev-treg-1061db3/src/treg/cli.py :833 me = httpx.get(f"{base}/auth/me", headers={"X-Treg-Token": cfg["token"], "ngrok-skip-browser-warning": "1"}, timeout=10).json()

transport_posture 1

network-listening, binds all interfaces, no auth detected superdesigndev-treg-1061db3/src/treg/__main__.py :50 uvicorn.run("treg.api:app", host="0.0.0.0", port=port, reload="--reload" in sys.argv)

superdesigndev/treg

Drift inferred · capture-to-capture

tools

skills & prompt files 19

danger signals16

filesystem 66

shell / exec 11

network 163

secrets 6

database 131

tool registrations 1

declared dependencies 15

perm:untrusted 1

transport_posture 1

Navigate

Stream

Features

Display