npm JavaScript analyzed 1.0.24

@aikidosec/mcp

v1.0.24

npm

Aikido MCP server

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v1.0.24 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1

fs package/dist/index.js :11 var ev=_((Yse,Qy)=>{"use strict";var Qe=require("fs"),OM=require("events"),FM=require("util").inherits,Hy=require("path"),J2=G2(),LM=require("assert"),jl=100,Ml=Buffer.allocUnsafe(0),BM=16*1024,Gy="bu

shell package/dist/index.js :52 =q(require("fs"));qr();DA();({spawn:RQ}=require("child_process")),RA=async t=>{let e=CA(),r=V3.join(__dirname,"assets","gitleaks.aikido.toml"),i=Se.getTempDir();if(!i)throw new Error("No temporary dir

net package/dist/index.js :52 ath(a);return}let o=i.url,s;try{s=await fetch(o)}catch(d){throw new Error(`Failed to fetch Opengrep binary: ${d}`)}if(!s.ok)throw new Error(`Failed to fetch Opengrep binary: HTTP ${s.status}`);let p=r

secrets package/dist/index.js :32 ace(/\/$/,"")}async function Zi(){let t=process.env.AIKIDO_API_KEY;if(t)return t;let e=await Zp();if(e)return e;throw new Go}async function Ga(t){try{let e=await t.clone().json(),r=e?.reason_phrase??e