AI-powered terminal coding assistant with 21+ coding models, persistent agent memory, MCP servers, and semantic code search. Hobbyist tier starting at $5/mo.
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v0.12.85 · analyzer v33 · 1w ago
skills & prompt files 12
- skill package/.cody/skills/ainative-api-reference/SKILL.md
- skill package/.cody/skills/ainative-growth-metrics/SKILL.md
- skill package/.cody/skills/ainative-provisioning/SKILL.md
- skill package/.cody/skills/ci-cd-compliance/SKILL.md
- skill package/.cody/skills/code-quality/SKILL.md
- skill package/.cody/skills/database-best-practices/SKILL.md
- skill package/.cody/skills/delivery-checklist/SKILL.md
- skill package/.cody/skills/file-placement/SKILL.md
- skill package/.cody/skills/git-workflow/SKILL.md
- skill package/.cody/skills/local-environment-check/SKILL.md
- skill package/.cody/skills/mandatory-tdd/SKILL.md
- skill package/.cody/skills/mcp-builder/SKILL.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 7
filesystem 4
- fs package/bin/cody.js :13
const { existsSync } = require('fs') - fs package/bin/postinstall.cjs :14
const fs = require('fs') - fs package/bin/postinstall.js :12
const fs = require('fs') - fs package/dist/cli.js :3599
import { realpathSync } from "fs";
shell / exec 1
- shell package/bin/cody.js :12
const { execSync, spawn } = require('child_process')
network 1
- net package/bin/postinstall.cjs :102
// Use built-in fetch (Node 18+) or skip silently on older Node
secrets 1
- secrets package/bin/postinstall.cjs :97
if (process.env.ANTHROPIC_API_KEY || process.env.CODY_API_KEY) return
install hooks 2
- postinstall package/package.json :26
node bin/postinstall.cjs - prepublishOnly package/package.json :33
bun test && bash build.sh && bash postbuild.sh
declared dependencies 70
- @modelcontextprotocol/sdk@^1.29.0
- @ainative/cody-for-chrome-mcp@^0.1.1
- @anthropic-ai/bedrock-sdk@^0.26.4
- @ainative/sandbox-runtime@0.0.49
- @anthropic-ai/sdk@^0.82.0
- @anthropic-ai/vertex-sdk@^0.14.4
- @aws-sdk/client-bedrock@^3.1021.0
- @aws-sdk/client-sts@^3.1021.0
- @azure/identity@^4.13.1
- @commander-js/extra-typings@^14.0.0
- @growthbook/growthbook@^1.6.5
- @opentelemetry/api@^1.9.1
show 28 more
- @opentelemetry/exporter-logs-otlp-grpc@^0.214.0
- @opentelemetry/exporter-logs-otlp-http@^0.214.0
- @opentelemetry/exporter-logs-otlp-proto@^0.214.0
- @opentelemetry/exporter-metrics-otlp-grpc@^0.214.0
- @opentelemetry/exporter-metrics-otlp-http@^0.214.0
- @opentelemetry/exporter-metrics-otlp-proto@^0.214.0
- @opentelemetry/exporter-prometheus@^0.214.0
- @opentelemetry/exporter-trace-otlp-grpc@^0.214.0
- @opentelemetry/exporter-trace-otlp-http@^0.214.0
- @opentelemetry/exporter-trace-otlp-proto@^0.214.0
- @opentelemetry/resources@^2.6.1
- @opentelemetry/sdk-logs@^0.214.0
- @opentelemetry/semantic-conventions@^1.40.0
- asciichart@^1.5.25
- axios@^1.7.0
- bidi-js@^1.0.3
- chalk@^5.3.0
- chokidar@^5.0.0
- cli-spinners@^3.4.0
- color-diff-napi@file:./packages/color-diff-napi
- commander@^14.0.0
- diff@^8.0.4
- env-paths@^4.0.0
- execa@^9.6.1
- fast-xml-parser@^5.5.9
- fflate@^0.8.2
- figures@^6.0.0
- fuse.js@^7.1.0
30 more not shown — this panel samples each group; the count above is the real total.