github Python re-analysis due deep scan · partial (201/2,702 files)

superdesigndev/treg

OpenRouter for agent tools. Join community here: https://discord.gg/6mQYYfFMAn

maintainer: superdesigndev
licence: NOASSERTION
first seen: 2026-08-11
last seen: 2026-09-10
releases · 30d: 0
short id

risk 61/100 · heuristic grade

D high inferred analyzer v33 (current)

capability exposure inferred + 35
recent drift inferred + 20
tool safety inferred + 17
trust mitigators mixed − 11

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 3d ago · see ecosystem CVEs →

risk trajectory 4 movements

1w ago D · 69 → D · 61
1w ago C · 55 → D · 69
4w ago C · 47 → C · 55
4w ago C · 56 → C · 47

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 2 findings · grade factor +17

high dangerous code

dynamic exec: unsafe yaml.load()
medium toxic flow (lethal trifecta)

lethal trifecta reachable across this server's tool + source surface: private-data access + untrusted-content ingestion + network exfil (a leg is proven only in the analyzed source)

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 1061db3 · analyzer v33 · 1h ago

skills & prompt files 19

danger signals16

dynamic code execution unsafe yaml.load() superdesigndev-treg-1061db3/scripts/catalog_ingest.py :801 spec = yaml.load(raw, Loader=_TolerantLoader)
suspicious endpoint app.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/application/onboard/sandbox.py :139 "key": "POSTHOG_KEY", "base_url": "https://app.posthog.com",
suspicious endpoint eu.i.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/cli_analytics.py :14 POSTHOG_HOST = "https://eu.i.posthog.com"
suspicious endpoint eu.i.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/config.py :378 posthog_host: str = "https://eu.i.posthog.com"
suspicious endpoint api.telegram.org superdesigndev-treg-1061db3/src/treg/providers.py :98 {"provider": "Telegram", "tokens": ["TELEGRAM"], "base_url": "https://api.telegram.org", "auth": {"shape": "query"}},
suspicious endpoint sentry.io (telemetry) superdesigndev-treg-1061db3/src/treg/providers.py :232 {"provider": "Sentry", "tokens": ["SENTRY"], "base_url": "https://sentry.io/api/0", "auth": {"shape": "bearer"},
suspicious endpoint api.datadoghq.com (telemetry) superdesigndev-treg-1061db3/src/treg/providers.py :237 {"provider": "Datadog", "tokens": ["DATADOG"], "base_url": "https://api.datadoghq.com/api/v1", "auth": {"shape": "api_key_header", "header": "DD-API-KEY"}},
suspicious endpoint app.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/src/treg/providers.py :264 {"provider": "PostHog", "tokens": ["POSTHOG"], "base_url": "https://app.posthog.com", "auth": {"shape": "bearer"}},
suspicious endpoint eu.i.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/tests/test_attribution.py :79 monkeypatch.setattr(get_settings(), "posthog_host", "https://eu.i.posthog.com/", raising=False)
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_bughunt_server.py :605 r = await c.post("/users", json={"email": "ssrf@x.io", "webhook_url": "http://169.254.169.254/latest/meta-data"})
suspicious endpoint treg.ngrok.app superdesigndev-treg-1061db3/tests/test_mcp.py :833 for host in ("https://treg.ngrok.app", "http://127.0.0.1:18790", "https://anything.example"):
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_mcp_oauth.py :248 "https://169.254.169.254/latest/meta", # cloud metadata — the classic SSRF target
suspicious endpoint eu.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/tests/test_providers.py :229 env = _write_env(tmp_path, "POSTHOG_HOST=https://eu.posthog.com\nPOSTHOG_PROJECT_ID=123\nPOSTHOG_API_KEY=phc_x\n")
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_providers.py :307 "https://x.internal/y", "https://169.254.169.254/latest"):
suspicious endpoint app.posthog.com (telemetry) expected for this server's purpose superdesigndev-treg-1061db3/tests/test_sandbox.py :135 assert "/call/https://app.posthog.com" in body # calls through the treg proxy
suspicious endpoint 169.254.169.254 (cloud metadata) superdesigndev-treg-1061db3/tests/test_security_round2.py :9 for bad in ("http://169.254.169.254/latest/meta-data/", "http://localhost/x",

other grade factors evidence elsewhere

recent drift +20 capability drift →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:superdesigndev/treg/badge.svg)](https://mcpobservatory.com/servers/github:superdesigndev/treg/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of superdesigndev.

superdesigndev/treg

skills & prompt files 19

danger signals16

Navigate

Stream

Features

Display