github TypeScript re-analysis due

ucsandman/DashClaw

🛡️ The approval and policy layer for AI agents. Intercept risky actions before they run, block them, or approve them remotely.

maintainer: ucsandman
license: MIT
first seen: 2026-06-11
last seen: 2026-08-22
releases · 30d: 61
short id

risk 31/100 · heuristic grade

B low inferred analyzer v31 (2 behind)

This grade was produced by analyzer v31 , 2 version s behind the one running now. Detectors added since have not been applied here, so it is not directly comparable with a server analyzed at the current version. A re-scan is queued.

capability exposure inferred + 35
tool safety inferred + 12
trust mitigators mixed − 16

inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

graded 5m ago · see ecosystem CVEs →

risk trajectory 6 movements

2w ago C · 39 → B · 31
2w ago C · 44 → C · 39
3w ago C · 56 → C · 44
3w ago D · 64 → C · 56
7w ago C · 56 → D · 64
9w ago A · 0 → C · 56

capability exposure grade factor +35

Inferred surface — each links to servers holding it:

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 1 findings · grade factor +12

high dangerous code

committed secret: Anthropic key · credential logged in 1 file(s) · obfuscated payload: dynamic require()/import()

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 481c747 · analyzer v31 · 2w ago

skills & prompt files 32

danger signals19

suspicious endpoint discord.com ucsandman-DashClaw-481c747/__tests__/unit/connect-complete-discord-alert.test.js :54 process.env.DASHCLAW_NEW_CONNECT_WEBHOOK = 'https://discord.com/api/webhooks/1/abc';
suspicious endpoint discord.com ucsandman-DashClaw-481c747/__tests__/unit/notification-adapters-undici.test.ts :60 const result = await discordAdapter.send(signals, { DISCORD_WEBHOOK_URL: 'https://discord.com/api/webhooks/x/y' });
suspicious endpoint discord.com ucsandman-DashClaw-481c747/__tests__/unit/ssrf-validation.test.js :87 it('allows https://discord.com/api/webhooks/12345/token', () => {
suspicious endpoint api.telegram.org ucsandman-DashClaw-481c747/__tests__/unit/telegram-approvals.test.js :88 expect(url).toBe('https://api.telegram.org/botTBOT/sendMessage');
suspicious endpoint 169.254.169.254 (cloud metadata) ucsandman-DashClaw-481c747/__tests__/unit/url-safety.test.js :78 assertSafeFetchUrl('https://169.254.169.254/latest/meta-data/', {
suspicious endpoint discord.com ucsandman-DashClaw-481c747/__tests__/unit/validate.test.js :190 expect(isValidWebhookUrl('https://discord.com/api/webhooks')).toBe(null);
suspicious endpoint discord.com ucsandman-DashClaw-481c747/__tests__/unit/webhook-format.test.ts :18 ['https://discord.com/api/webhooks/123/abc', 'discord'],
suspicious endpoint discordapp.com ucsandman-DashClaw-481c747/__tests__/unit/webhook-format.test.ts :19 ['https://discordapp.com/api/webhooks/123/abc', 'discord'],
suspicious endpoint discord.com ucsandman-DashClaw-481c747/app/api/settings/test/route.ts :356 if (!webhookUrl || !webhookUrl.startsWith('https://discord.com/api/webhooks/')) {
suspicious endpoint api.telegram.org ucsandman-DashClaw-481c747/app/api/telegram/webhook/route.ts :13 const TELEGRAM_API_BASE = 'https://api.telegram.org';
suspicious endpoint discord.com ucsandman-DashClaw-481c747/app/lib/actionAlerts.ts :81 if (!url || !url.startsWith('https://discord.com/api/webhooks/')) return null;
suspicious endpoint api.telegram.org ucsandman-DashClaw-481c747/app/lib/approvalNotifications.ts :21 const TELEGRAM_API_BASE = 'https://api.telegram.org';
suspicious endpoint discord.com ucsandman-DashClaw-481c747/app/lib/demoWebhooksData.ts :32 url: 'https://discord.com/api/webhooks/123456789/qwert-yuiop',
suspicious endpoint api.telegram.org ucsandman-DashClaw-481c747/app/lib/telegramApprovals.ts :35 const TELEGRAM_API_BASE = 'https://api.telegram.org';
suspicious endpoint api.telegram.org ucsandman-DashClaw-481c747/scripts/telegram-register-webhook.mjs :37 const infoRes = await fetch(`https://api.telegram.org/bot${token}/getWebhookInfo`);
suspicious endpoint api.telegram.org ucsandman-DashClaw-481c747/scripts/telegram-setup-wizard.mjs :24 const TELEGRAM_API = 'https://api.telegram.org';
suspicious endpoint t.me ucsandman-DashClaw-481c747/scripts/telegram-setup-wizard.mjs :85 log(' 2. Message @BotFather: https://t.me/BotFather');
committed secret Anthropic key ucsandman-DashClaw-481c747/__tests__/unit/security-scanner.test.js :63 sk-ant…(33 chars, redacted)
credential in logs credential in log ucsandman-DashClaw-481c747/cli/lib/up/index.js :332 logger.log(`[ok] Dashboard admin password: ${out.adminPassword} (also saved to ${join(appDir, '.env.local')})`);

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/github:ucsandman/DashClaw/badge.svg)](https://mcpobservatory.com/servers/github:ucsandman/DashClaw/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of ucsandman.

ucsandman/DashClaw

skills & prompt files 32

danger signals19

Navigate

Stream

Features

Display