github TypeScript analyzed · update queued 8dfc1a9 (4 behind)

zyx1121/pad

For-agent HackMD: MCP-first collaborative markdown for agents (Bun MCP server, Postgres)

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 7 tools

transport streamable-http · http counts 7 tools · 0 res · 0 prompts permission surface via README inference

comment_reply

Reply to a comment thread, posted as the doc owner
comment_resolve

Mark a comment resolved
comments_list

List comments with live-recomputed trust and re-anchored positions
doc_create

Create a doc you own; defaults to private visibility
doc_list

List your docs, optional status / tag filter
doc_read

Read a doc, returns the current version for the next update
doc_update

Update content; requires base_version, returns version_conflict if stale

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 8dfc1a9 · analyzer v29 · 6d ago

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 17

secrets zyx1121-pad-8dfc1a9/apps/mcp/src/config.ts :5 mcpWriteToken: process.env["MCP_WRITE_TOKEN"] ?? "",