npm JavaScript analyzed 1.0.2348

cybara

v1.0.2348
npm

Self-hosted, open-source AI agent platform — CLI

maintainer
carsenk
licence
MIT
first seen
2026-07-14
last seen
2026-09-15
releases · 30d
23
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

code evidence v1.0.2348 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3

filesystem 2

  • fs package/bin/cybara.cjs :4 const { existsSync } = require("fs");
  • fs (weak) package/scripts/download.cjs :2 const fs = require("fs");

shell / exec 1

  • shell package/bin/cybara.cjs :3 const { spawnSync } = require("child_process");

network 1

  • net (weak) package/scripts/download.cjs :4 const https = require("https");

install hooks 1

  • postinstall package/package.json :9 node scripts/postinstall.cjs