github HTML analyzed 6b2ac6e

synthaicode/XRefKit

github

XRefKit is a repository-based AI agent governance harness that runs from its own control repository and operates on target repositories by directory reference.

maintainer
synthaicode
license
MIT
first seen
2026-07-14
last seen
2026-08-27
releases · 30d
5
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 29 tools
transport counts 29 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • bind_skill_run
  • build_knowledge_context
  • check_client_tool_versions
  • check_xrefkit_runtime_version
  • end_skill_run
  • expand_knowledge
  • get_client_tool_bundle
  • get_client_tool_file
  • get_client_tool_manifest
  • get_client_tool_pip_package
  • get_document_by_xid
  • get_knowledge_summary
  • get_repository_identity
  • get_skill
  • get_skill_requirements
  • get_source_structure_entry
  • get_startup_context
  • get_xrefkit_runtime_bundle
  • get_xrefkit_runtime_file
  • get_xrefkit_runtime_manifest
  • get_xrefkit_runtime_pip_package
  • list_knowledge_catalog
  • list_skills
  • list_source_findings
  • list_source_targets
  • list_tool_contracts
  • rank_skills_for_purpose
  • resolve_skill_knowledge
  • search_knowledge_catalog
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 6b2ac6e · analyzer v33 · 5d ago

skills & prompt files 86

code evidence vv0.4.9 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1529

filesystem 18

  • fs synthaicode-XRefKit-6b2ac6e/human-docs/en/assets/055_why_ai_organization_needed/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/en/assets/063_ai_organization_explainer_clear/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/en/assets/064_ai_team_operating_boundary/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/en/assets/065_xrefkit_repository_overview/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/en/assets/073_xrefkit_organization_distribution/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/en/assets/xrefkit_repository_snapshot/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/054_why_ai_organization_needed/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/055_why_ai_organization_needed/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/063_ai_organization_explainer_clear/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/064_ai_team_operating_boundary/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/065_xrefkit_repository_overview/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/068_ai_handoff_continuity/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/070_ai_supportable_maintenance_package/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/072_xid_usage_observability_and_improvement/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/073_xrefkit_organization_distribution/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/human-docs/ja/assets/xrefkit_repository_snapshot/render.mjs :1 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/projects/slides-app/app/api/decks/[deck]/assets/[...assetPath]/route.ts :2 import fs from "node:fs/promises";
  • fs synthaicode-XRefKit-6b2ac6e/projects/slides-app/lib/decks.ts :1 import fs from "node:fs/promises";

shell / exec 1

  • shell synthaicode-XRefKit-6b2ac6e/projects/skill-run-dashboard/lib/dashboard-data.ts :1 import { execFile } from "node:child_process";

network 3

  • net synthaicode-XRefKit-6b2ac6e/projects/skill-run-dashboard/app/skill-run-dashboard.tsx :69 const response = await fetch("/api/runs", { cache: "no-store" });
  • net synthaicode-XRefKit-6b2ac6e/site/assets/inline-svg.js :4 const response = await fetch(source);
  • net synthaicode-XRefKit-6b2ac6e/site/sources/assets/inline-svg.js :4 const response = await fetch(source);

tool registrations 29

  • get_repository_identity synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :290
  • bind_skill_run synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :294
  • end_skill_run synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :376
  • get_startup_context synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :389
  • list_knowledge_catalog synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :408
  • list_source_targets synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :412
  • list_source_findings synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :420
  • get_source_structure_entry synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :433
  • search_knowledge_catalog synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :441
  • get_knowledge_summary synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :456
  • expand_knowledge synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :470
  • get_document_by_xid synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :484
  • build_knowledge_context synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :504
  • list_skills synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :532
  • get_skill synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :546
  • get_skill_requirements synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :577
  • resolve_skill_knowledge synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :592
  • rank_skills_for_purpose synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :597
  • list_tool_contracts synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :611
  • get_client_tool_manifest synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :615
  • get_client_tool_file synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :620
  • get_client_tool_bundle synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :625
  • get_client_tool_pip_package synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :630
  • check_client_tool_versions synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :638
  • get_xrefkit_runtime_manifest synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :645
  • get_xrefkit_runtime_file synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :650
  • get_xrefkit_runtime_bundle synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :655
  • get_xrefkit_runtime_pip_package synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :660
  • check_xrefkit_runtime_version synthaicode-XRefKit-6b2ac6e/xrefkit/mcp/server.py :668

declared dependencies 37

  • lucide-react@^0.475.0
  • next@^16.2.4
  • react@^19.1.0
  • react-dom@^19.1.0
  • @types/node@^22.14.1
  • @types/react@^19.1.2
  • @types/react-dom@^19.1.2
  • eslint@^9.25.1
  • eslint-config-next@^15.3.1
  • typescript@^5.8.3
  • Microsoft.Build.Locator@1.9.1
  • Microsoft.CodeAnalysis.CSharp.Workspaces@4.14.0
  • Microsoft.CodeAnalysis.Workspaces.MSBuild@4.14.0
  • StyleCop.Analyzers@1.2.0-beta.556
  • Hellang.Middleware.ProblemDetails@6.5.1
  • Microsoft.VisualStudio.Azure.Containers.Tools.Targets@1.19.5
  • Swashbuckle.AspNetCore@6.5.0
  • dbup-sqlserver@5.0.37
  • Serilog.AspNetCore@8.0.0
  • MediatR@12.2.0
  • Dapper@2.1.24
  • FluentValidation@11.8.1
  • Newtonsoft.Json@13.0.3
  • Quartz@3.8.0
  • Autofac@7.1.0
  • Autofac.Extensions.DependencyInjection@8.0.0
  • Microsoft.EntityFrameworkCore@8.0.0
  • Microsoft.EntityFrameworkCore.SqlServer@8.0.0
  • System.Data.SqlClient@4.8.6
  • Polly@8.2.0
  • SqlStreamStore.MsSql@1.1.3
  • NetArchTest.Rules@1.3.2
  • NSubstitute@5.1.0
  • nunit@4.0.1
  • NUnit3TestAdapter@4.5.0
  • FluentAssertions@6.12.0
  • Microsoft.NET.Test.Sdk@17.8.0

cursor-plugin 1

  • opaque (low) synthaicode-XRefKit-6b2ac6e/.cursor/rules/filemanager-xid.mdc bundled .cursor/ plugin descriptor (synthaicode-XRefKit-6b2ac6e/.cursor/rules/filemanager-xid.mdc) — presence-detected; review the descriptor