FrontMCP UIpack - HTML shell builder, pluggable import resolver, and NPM component loader for MCP UI (React-free core)
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed v1.5.2 · analyzer v28 · 3d ago
skills & prompt files 1
- agent-rules package/CLAUDE.md
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 18
filesystem 3
- fs package/adapters/index.js :2101
const nodeFs = require("fs"); - fs package/component/index.js :479
const nodeFs = require("fs"); - fs package/index.js :3399
const nodeFs = require("fs");
shell / exec 4
- shell package/esm/index.mjs :1692
const regex = new RegExp(`^${escaped}$`); - shell package/esm/typings/index.mjs :480
const regex = new RegExp(`^${escaped}$`); - shell package/index.js :1809
const regex = new RegExp(`^${escaped}$`); - shell package/typings/index.js :540
const regex = new RegExp(`^${escaped}$`);
network 4
- net package/esm/index.mjs :3210
const response = await fetch(url, { signal: controller.signal }); - net package/esm/shell/index.mjs :1639
const response = await fetch(url, { signal: controller.signal }); - net package/index.js :3327
const response = await fetch(url, { signal: controller.signal }); - net package/shell/index.js :1688
const response = await fetch(url, { signal: controller.signal });
declared dependencies 3
- zod@^4.0.0
- typescript@^5.9.3
- @frontmcp/lazy-zod@1.5.2