npm JavaScript analyzed 0.45.12 unconfirmed MCP

@tangle-network/agent-app

v0.45.12

npm

Build agent applications with typed chat, tools, sandboxes, integrations, billing, and evaluation.

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.45.12 · analyzer v28 · 2h ago

code evidence v0.45.12 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 150

fs package/bin/preflight.mjs :16 import { existsSync } from 'node:fs'
fs package/dist/chunk-RT5RKAFX.js :2 import { existsSync, readFileSync, readdirSync } from "fs";
fs package/dist/chunk-S24VVLKV.js :2 import { existsSync, readFileSync } from "fs";
fs package/dist/preflight/cli.js :10 import { existsSync } from "fs";

shell package/dist/chunk-AIZZU6ZW.js :1081 var TRANSIENT_EXEC_MESSAGE_RE = /\b(408|409|425|429|500|502|503|504)\b|rate.?limit|too many requests|\bfetch failed\b|network error|connection reset|socket hang up|timed? out|service unavailable|bad g
shell package/dist/integrations/index.js :24 async exec(input) {

net package/dist/assistant/index.js :298 const res = await fetch(url(path), {
net package/dist/brand-extraction/index.js :340 const doFetch = fetchImpl ?? (typeof globalThis.fetch === "function" ? (u, init) => globalThis.fetch(u, init) : void 0);
net package/dist/chunk-6MUJROBT.js :98 const res = await fetch(request.url, {
net package/dist/chunk-CKUZVDZ7.js :1238 return fetch(url, { credentials: "same-origin" });
net package/dist/chunk-MLACJ6DB.js :748 const response = await fetch(url, { method: "HEAD" });
net package/dist/chunk-OAGD7RDM.js :141 const res = await fetch(`${cfg.baseUrl}/models`, {
net package/dist/sequences-react/index.js :114 const response = await fetch(mediaUrl);
net package/dist/studio-react/index.js :61 const res = await fetch(`${generationsEndpoint}?workspaceId=${encodeURIComponent(workspaceId)}&id=${encodeURIComponent(id)}`);
net package/dist/turn-stream/index.js :157 async fetch(request) {

secrets package/dist/teams/resend.js :11 const key = opts.apiKey ?? (typeof process !== "undefined" ? process.env.RESEND_API_KEY : void 0);