npm TypeScript analyzed 4.10.28 deep scan unknown

eric-cielo/moflo

v4.10.28

MoFlo — an opinionated, local-first AI agent orchestration toolkit for Claude Code: semantic memory, learned routing, gates, and spells. No API keys, no cloud, works out of the box.

maintainer: eric-cielo
licence: MIT
first seen: 2026-06-03
last seen: 2026-09-08
releases · 30d: 0
short id

risk 13/100 · heuristic grade

A minimal inferred analyzer v33 (current)

tool safety inferred + 12
supply-chain attested + 6
trust mitigators mixed − 5

attested inferred mixed

The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.

grade last moved 4d ago · see ecosystem CVEs →

risk trajectory 9 movements

4d ago B · 18 → A · 13
1w ago C · 53 → B · 18
1w ago C · 50 → C · 53
5w ago D · 65 → C · 50
5w ago E · 85 → D · 65
5w ago D · 77 → E · 85
7w ago D · 65 → D · 77
7w ago C · 53 → D · 65
13w ago D · 65 → C · 53

vulnerabilities 0 CVEs

No known CVEs for this server.

tool safety 4 findings · grade factor +12

high dangerous code

committed secret: Anthropic key, OpenAI key, GitHub token · dynamic exec: eval(), new Function() · obfuscated payload: dynamic require()/import()
medium dangerous code

env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (eric-cielo-moflo-8e460de/src/cli/c
medium dangerous code

env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (eric-cielo-moflo-8e460de/src/cli/s
medium dangerous code

env-secret-flows-to-network-js: A process environment value (often a secret/token) flows into a network call — possible credential exfiltration. (eric-cielo-moflo-8e460de/src/cli/s

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v4.10.28 · analyzer v33 · 4w ago

skills & prompt files 48

danger signals8

dynamic code execution eval() eric-cielo-moflo-1e5a863/src/cli/__tests__/guidance/analyzer.test.ts :74 - Avoid eval() and dynamic code execution
dynamic code execution eval() eric-cielo-moflo-1e5a863/tests/bin/gate-verify-wiring-1394-1395.test.ts :37 return eval(m[1]) as RegExp;
dynamic code execution new Function() eric-cielo-moflo-1e5a863/tests/guards/workflow-state-shape-parity.test.ts :52 return new Function(`return ${match![1]}`)() as Record<string, unknown>;
suspicious endpoint 169.254.169.254 (cloud metadata) eric-cielo-moflo-1e5a863/src/cli/__tests__/spells/built-in-commands.test.ts :806 it('should block http://169.254.169.254/ (metadata endpoint)', () => {
committed secret Anthropic key eric-cielo-moflo-1e5a863/src/cli/__tests__/aidefence/threat-detection.test.ts :82 sk-ant…(105 chars, redacted)
committed secret OpenAI key eric-cielo-moflo-1e5a863/src/cli/__tests__/guidance/gateway.test.ts :512 sk-sup…(33 chars, redacted)
committed secret Anthropic key eric-cielo-moflo-1e5a863/tests/bin/session-continuity.test.ts :57 sk-ant…(49 chars, redacted)
committed secret GitHub token eric-cielo-moflo-1e5a863/tests/bin/session-continuity.test.ts :60 ghp_01…(44 chars, redacted)

other grade factors evidence elsewhere

supply-chain +6 supply-chain hub →

embed badge readme-ready

[![MCP Observatory risk grade](https://mcpobservatory.com/servers/npm:moflo/badge.svg)](https://mcpobservatory.com/servers/npm:moflo/security)

Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of eric-cielo.

eric-cielo/moflo

skills & prompt files 48

danger signals8

Navigate

Stream

Features

Display