github re-analysis due unconfirmed MCP

undivisible/folk-around

github

MCP computer control tool for remote or local agents like Folk, Hermes or OpenClaw.

maintainer
undivisible
license
MPL-2.0
first seen
2026-06-05
last seen
2026-06-17
releases · 30d
7
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 16 tools
transport counts 16 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • folk_app

    list/launch/activate/quit apps

  • folk_click

    click coordinates

  • folk_clipboard_read

    read clipboard

  • folk_clipboard_write

    write to clipboard

  • folk_hotkey

    press key combinations

  • folk_list_apps

    running processes

  • folk_menu

    inspect/click menu items

  • folk_screen_capture

    capture display, window, or region

  • folk_scroll

    scroll

  • folk_shell

    run commands (mode-restricted)

  • folk_spawn

    spawn background (full mode)

  • folk_system_info

    hardware, OS, arch

  • folk_type

    type text

  • folk_ui_snapshot

    inspect app/window context

  • folk_window

    list/focus/window actions

  • tool

    does

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 0b3a726 · analyzer v17 · 1d ago

skills & prompt files 1

code evidence vv0.3.3 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

network 1

  • net undivisible-folk-around-0b3a726/signal-server/src/index.ts :42 async fetch(request: Request, env: Env): Promise<Response> {

declared dependencies 8

  • itty-router@^5.0.0
  • @cloudflare/workers-types@^4.0.0
  • @types/bun@^1.3.14
  • astro@^6.4.3
  • prettier@^3.5.3
  • prettier-plugin-astro@^0.14.1
  • typescript@^5.0.0
  • wrangler@^4.97.0