github TypeScript analyzed 410ead3

tathagat22/slipstream

github

Shared distillation cache for AI agents — every web/doc fetch ~73-89% fewer tokens via a shared MCP cache.

maintainer
tathagat22
licence
first seen
2026-06-25
last seen
2026-06-27
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 8 tools
transport stdio · streamable-http · http verified reported listed in the official MCP registry counts 8 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • cached_fetch
  • cached_outline
  • slipstream_flag
  • slipstream_note
  • slipstream_recall
  • slipstream_stats
  • slipstream_vote
  • whats_new
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 410ead3 · analyzer v33 · 2w ago

danger signals1

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 37

network 5

  • net tathagat22-slipstream-410ead3/app/page.tsx :50 const r = await fetch("/api/stats", { cache: "no-store" });
  • net tathagat22-slipstream-410ead3/lib/distill.ts :453 * fetch (knownHash), heading-level temporal diffs, content-address dedup +
  • net tathagat22-slipstream-410ead3/lib/render.ts :24 const res = await fetch("https://api.firecrawl.dev/v1/scrape", {
  • net tathagat22-slipstream-410ead3/lib/security.ts :116 res = await fetch(current, { headers, redirect: "manual", signal: ctrl.signal });
  • net (weak) tathagat22-slipstream-410ead3/scripts/prewarm-backtest.mjs :106 const r = await fetch(`https://registry.npmjs.org/${id.replace("/", "%2F")}`);

secrets 3

  • secrets tathagat22-slipstream-410ead3/lib/cache.ts :152 token: process.env.UPSTASH_REDIS_REST_TOKEN ?? process.env.KV_REST_API_TOKEN,
  • secrets tathagat22-slipstream-410ead3/lib/render.ts :12 return Boolean(process.env.FIRECRAWL_API_KEY);
  • secrets (weak) tathagat22-slipstream-410ead3/scripts/prewarm-backtest.mjs :32 const token = process.env.UPSTASH_REDIS_REST_TOKEN ?? process.env.KV_REST_API_TOKEN;

tool registrations 8

  • cached_fetch tathagat22-slipstream-410ead3/app/api/mcp/route.ts :117
  • cached_outline tathagat22-slipstream-410ead3/app/api/mcp/route.ts :198
  • slipstream_note tathagat22-slipstream-410ead3/app/api/mcp/route.ts :225
  • slipstream_recall tathagat22-slipstream-410ead3/app/api/mcp/route.ts :268
  • slipstream_vote tathagat22-slipstream-410ead3/app/api/mcp/route.ts :290
  • slipstream_flag tathagat22-slipstream-410ead3/app/api/mcp/route.ts :303
  • whats_new tathagat22-slipstream-410ead3/app/api/mcp/route.ts :320
  • slipstream_stats tathagat22-slipstream-410ead3/app/api/mcp/route.ts :352

declared dependencies 25

  • @modelcontextprotocol/sdk@^1.12.0
  • @gsap/react@^2.1.2
  • @mozilla/readability@^0.5.0
  • @react-three/drei@^10.7.7
  • @react-three/fiber@^9.6.1
  • @react-three/postprocessing@^3.0.4
  • @upstash/redis@^1.34.3
  • gsap@^3.15.0
  • jsdom@^25.0.1
  • lenis@^1.3.24
  • mcp-handler@^1.0.1
  • next@^15.3.0
show 13 more
  • react@^19.0.0
  • react-dom@^19.0.0
  • three@^0.171.0
  • turndown@^7.2.0
  • turndown-plugin-gfm@^1.0.2
  • zod@^3.24.1
  • @types/jsdom@^21.1.7
  • @types/node@^22.10.0
  • @types/react@^19.0.0
  • @types/react-dom@^19.0.0
  • @types/three@^0.171.0
  • @types/turndown@^5.0.5
  • typescript@^5.7.0

obfuscation 2

  • dynamic require()/import() tathagat22-slipstream-410ead3/scripts/unit-cache.cjs :5 const c = require(`${dir}/cache.js`);
  • dynamic require()/import() tathagat22-slipstream-410ead3/scripts/unit-upgrades.cjs :7 const sd = require(`${dir}/secdiff.js`);