MCP Observatory
3m ago Tracked 59,469 Last 3m ago 24h 2,466
github analyzed 27f86de deep scan unknown

smallcloudai/refact

github
maintainer
smallcloudai
licence
—
first seen
2026-05-22
last seen
2026-07-09
releases · 30d
0
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged committed secret in smallcloudai/refact
  2. HIGH code analysis flagged committed secret ×3 in smallcloudai/refact
capabilities 0 tools
transport http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 27f86de · analyzer v33 · 2w ago

skills & prompt files 4

danger signals4

code evidence vHEAD · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1943

filesystem 6

  • fs (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/__tests__/buddy.test.ts :11 import * as fs from "fs";
  • fs (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/__tests__/buddy_home.test.tsx :9 import { readFile } from "node:fs/promises";
  • fs (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/__tests__/buddy_ui_polish.test.tsx :2 import { readFile } from "node:fs/promises";
  • fs (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/__tests__/streamingTokenCounter.test.tsx :2 import * as fs from "fs";
  • fs (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/__tests__/userInputProcessing.test.tsx :2 import * as fs from "fs";
  • fs (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/features/Tasks/TaskMemories/MemoryCard.test.tsx :1 import { readFileSync } from "node:fs";

shell / exec 3

  • shell smallcloudai-refact-27f86de/plugins/vscode/assets/hl.min.js :133 }),!0),this.lastIndex=0}exec(e){this.matcherRe.lastIndex=this.lastIndex
  • shell smallcloudai-refact-27f86de/plugins/vscode/src/sidebar.ts :46 import { execFile } from "child_process";
  • shell (weak) smallcloudai-refact-27f86de/refact-agent/gui/vite.config.ts :10 import { execSync } from "child_process";

network 15

  • net smallcloudai-refact-27f86de/plugins/vscode/src/codeLens.ts :72 const response = await fetchH2.fetch(request);
  • net smallcloudai-refact-27f86de/plugins/vscode/src/fetchAPI.ts :363 let promise = ctx.fetch(req, init);
  • net smallcloudai-refact-27f86de/plugins/vscode/src/launchRust.ts :7 import * as net from 'net';
  • net smallcloudai-refact-27f86de/refact-agent/gui/public/mockServiceWorker.js :216 return fetch(requestClone, { headers })
  • net (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/__tests__/integration/chatSubscription.integration.test.ts :30 const response = await fetch(`${LSP_URL}/v1/ping`, {
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/components/ChatContent/ToolCard/ExecToolCard.tsx :314 const response = await fetch(path);
  • net (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/components/ComboBox/ComboBox.stories.tsx :9 return fetch("/v1/at-command-completion", {
  • net (weak) smallcloudai-refact-27f86de/refact-agent/gui/src/components/ComboBox/ComboBox.test.tsx :17 // return fetch("http://127.0.0.1:8001/v1/at-command-completion", {
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/features/Documentation.tsx :50 const response = await fetch(docsEndpoint, {
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/services/refact/buddy.ts :282 const response = await fetch(
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/services/refact/chatCommands.ts :107 const response = await fetch(url, {
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/services/refact/chatSubscription.ts :403 void fetch(url, {
show 3 more
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/services/refact/exec.ts :26 const response = await fetch(url, {
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/services/refact/sidebarSubscription.ts :441 void fetch(url, {
  • net smallcloudai-refact-27f86de/refact-agent/gui/src/services/refact/voice.ts :38 const response = await fetch(`${getVoiceApiBase(port)}/transcribe`, {

install hooks 2

  • prepublishOnly smallcloudai-refact-27f86de/refact-agent/gui/package.json :50 npm run build
  • postinstall smallcloudai-refact-27f86de/refact-agent/gui/package.json :53 patch-package

declared dependencies 141

  • rmcp@*
  • @astrojs/starlight@^0.21.5
  • @docsearch/css@^3.5.2
  • @docsearch/js@^3.5.2
  • astro@^4.6.4
  • sharp@^0.32.6
  • serde@1
  • serde_json@1
  • tokio@1.43.0
  • tracing@0.1
  • heed@0.22.0
  • indexmap@1.9.1
show 28 more
  • itertools@0.14.0
  • lazy_static@1.4.0
  • md5@0.7
  • regex@1.9.5
  • ropey@1.6
  • serde_cbor@0.11.2
  • tempfile@3.8.1
  • tokenizers@0.21.0
  • tree-sitter@0.25
  • tree-sitter-cpp@0.23
  • tree-sitter-java@0.23
  • tree-sitter-javascript@0.23
  • tree-sitter-kotlin-ng@1.1.0
  • tree-sitter-python@0.23
  • tree-sitter-rust@0.23
  • tree-sitter-typescript@0.23
  • uuid@1
  • shadow-rs@1.1.0
  • refact-core@*
  • refact-ast@*
  • refact-chat-api@*
  • refact-vecdb@*
  • refact-llm@*
  • refact-knowledge-graph@*
  • refact-git@*
  • refact-postprocessing@*
  • refact-stats@*
  • refact-scratchpads@*

101 more not shown — this panel samples each group; the count above is the real total.

jetbrains-plugin 1

  • opaque (low) smallcloudai-refact-27f86de/plugins/intellij/src/main/resources/META-INF/plugin.xml bundled JetBrains plugin "com.smallcloud.codify" (smallcloudai-refact-27f86de/plugins/intellij/src/main/resources/META-INF/plugin.xml) — presence-detected; review the plugin descriptor

perm:untrusted 1

  • untrusted smallcloudai-refact-27f86de/plugins/vscode/src/fetchAPI.ts :682 fetchH2.fetch(req).then((response) => {