Docker-first, single-repo private developer platform: remote dev (Coder), AI coding agents, GitHub automation, Temporal durable orchestration, OPA/OpenBao governance, and Prometheus/Grafana observability — one Linux server, no paid cloud.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 9 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
flash_device
-
get_architecture
-
get_build_instructions
-
get_logs
-
list_devices
-
release_device
-
reserve_device
-
run_test
-
search_docs
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit ce7dff3 · analyzer v33 · 3d ago
skills & prompt files 2
danger signals1
- committed secret GitHub token tbrandenburg-cade-ce7dff3/docs/plan/demo/phase1-remote-dev-agent/05-workspace-create.txt :1
gho_Tl…(40 chars, redacted)
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 78
filesystem 1
- fs tbrandenburg-cade-ce7dff3/coder/devcontainer/merge-devcontainer-runargs.js :20
const fs = require('fs');
secrets 1
- secrets tbrandenburg-cade-ce7dff3/coder/workspace-apps/node-red-settings.js :30
credentialSecret: process.env.NODE_RED_CREDENTIAL_SECRET || undefined,
tool registrations 9
- search_docs tbrandenburg-cade-ce7dff3/mcp/docs-server/src/docs_server/server.py :47
- get_architecture tbrandenburg-cade-ce7dff3/mcp/docs-server/src/docs_server/server.py :76
- get_build_instructions tbrandenburg-cade-ce7dff3/mcp/docs-server/src/docs_server/server.py :84
- list_devices tbrandenburg-cade-ce7dff3/mcp/lab-sim/src/lab_sim/server.py :75
- reserve_device tbrandenburg-cade-ce7dff3/mcp/lab-sim/src/lab_sim/server.py :83
- flash_device tbrandenburg-cade-ce7dff3/mcp/lab-sim/src/lab_sim/server.py :95
- run_test tbrandenburg-cade-ce7dff3/mcp/lab-sim/src/lab_sim/server.py :110
- get_logs tbrandenburg-cade-ce7dff3/mcp/lab-sim/src/lab_sim/server.py :125
- release_device tbrandenburg-cade-ce7dff3/mcp/lab-sim/src/lab_sim/server.py :136