npm JavaScript analyzed 6.0.22

edk2-opencode

v6.0.22
npm

EDK2 Knowledge Base MCP Daemon - shared offline EDK2 retrieval served over MCP with auto-recovery

maintainer
guziqian0908
licence
MIT
first seen
2026-08-18
last seen
2026-08-18
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 3 tools
transport stdio · http counts 3 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • get_kb_citation_guide
  • get_kb_status
  • search_kb
skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v6.0.22 · analyzer v33 · 4w ago

skills & prompt files 3

code evidence v6.0.22 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 29

filesystem 5

  • fs package/bin/edk2-opencode.js :5 const fs = require('fs');
  • fs package/lib/auth.js :6 const fs = require('fs');
  • fs package/lib/daemon.js :16 const fs = require('fs');
  • fs (weak) package/scripts/eval-query.js :21 const fs = require("fs");
  • fs (weak) package/scripts/postinstall.js :1 const fs = require('fs');

shell / exec 3

  • shell package/bin/edk2-opencode.js :3 const { spawn, execSync } = require('child_process');
  • shell package/lib/daemon.js :14 const { spawn, execSync } = require('child_process');
  • shell (weak) package/scripts/eval-query.js :20 const { spawn } = require("child_process");

network 2

  • net package/lib/auth.js :9 const https = require('https');
  • net package/lib/daemon.js :18 const http = require('http');

tool registrations 3

  • search_kb package/edk2-kb/mcp_server.py :106
  • get_kb_status package/edk2-kb/mcp_server.py :121
  • get_kb_citation_guide package/edk2-kb/mcp_server.py :127

install hooks 1

  • postinstall package/package.json :38 node scripts/postinstall.js