Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit c3d97ce · analyzer v18 · 8h ago
danger signals1
- credential in logscredential in logfilipecalegario-mcp-server-strateegia-c3d97ce/src/debug.ts:55
console.log(accessToken);
evidence-backed
findings quoted directly from the published source artifact — not inferred
network 2
- net filipecalegario-mcp-server-strateegia-c3d97ce/src/debug.ts :37
const response = await fetch(API_AUTH_BASE, options); - net filipecalegario-mcp-server-strateegia-c3d97ce/src/index.ts :71
const response = await fetch(API_AUTH_BASE, options);
secrets 2
- secrets filipecalegario-mcp-server-strateegia-c3d97ce/src/debug.ts :24
const api_key = process.env.STRATEEGIA_API_KEY; - secrets filipecalegario-mcp-server-strateegia-c3d97ce/src/index.ts :58
const api_key = process.env.STRATEEGIA_API_KEY;
declared dependencies 4
- @modelcontextprotocol/sdk@^0.6.1
- zod@^3.22.4
- @types/node@^20.10.0
- typescript@^5.3.2