DeepSeek Harness plugin for Fly.io Sprites: computers for agents. Sprites MCP tools and packaged workflow guidance for remote builds, tests, and long-running services.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in superfly/sprites-deepseek-plugin
- HIGH code analysis flagged dynamic code execution in superfly/sprites-deepseek-plugin
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 6b7e1c5 · analyzer v33 · 1w ago
skills & prompt files 1
danger signals2
- dynamic code execution unsafe yaml.load() superfly-sprites-deepseek-plugin-6b7e1c5/scripts/check_repository.py :72
return yaml.load(text, Loader=CordisLoader) - dynamic code execution unsafe yaml.load() superfly-sprites-deepseek-plugin-6b7e1c5/tests/test_repository.py :32
return yaml.load(handle, Loader=CordisLoader)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 4
filesystem 2
- fs (weak) superfly-sprites-deepseek-plugin-6b7e1c5/scripts/check_repository.py :10
from pathlib import Path - fs (weak) superfly-sprites-deepseek-plugin-6b7e1c5/tests/test_repository.py :4
import shutil
shell / exec 1
- shell (weak) superfly-sprites-deepseek-plugin-6b7e1c5/tests/test_repository.py :5
import subprocess
network 1
- net (weak) superfly-sprites-deepseek-plugin-6b7e1c5/scripts/check_repository.py :9
import urllib.parse