npm analyzed 0.4.2

poke

v0.4.2
npm

Poke.com Developer SDK

maintainer
samyok
license
MIT
first seen
2026-05-22
last seen
2026-06-17
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio · http counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.4.2 · analyzer v18 · 10h ago

danger signals1

  • credential in logscredential in logpackage/dist/cli.cjs:81`)}catch(r){console.error(r instanceof Error?r.message:"Failed."),process.exit(1)}});Ee.command("tunnel").description("Forward a local port to Poke (start your MCP server separately, then tunnel that
code evidence v0.4.2 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 2

  • fs package/dist/cli.cjs :11 (Did you mean ${r[0]}?)`:""}Kr.suggestSimilar=Ys});var ti=v(ei=>{c();var zs=require("node:events").EventEmitter,Dt=require("node:child_process"),j=require("node:path"),Mt=require("node:fs"),C=require(
  • fs package/dist/index.cjs :1 "use strict";var un=Object.create;var Ue=Object.defineProperty;var dn=Object.getOwnPropertyDescriptor;var pn=Object.getOwnPropertyNames;var mn=Object.getPrototypeOf,gn=Object.prototype.hasOwnProperty;

shell / exec 3

  • shell package/dist/cli.cjs :11 (Did you mean ${r[0]}?)`:""}Kr.suggestSimilar=Ys});var ti=v(ei=>{c();var zs=require("node:events").EventEmitter,Dt=require("node:child_process"),j=require("node:path"),Mt=require("node:fs"),C=require(
  • shell package/dist/index.cjs :1 "use strict";var un=Object.create;var Ue=Object.defineProperty;var dn=Object.getOwnPropertyDescriptor;var pn=Object.getOwnPropertyNames;var mn=Object.getPrototypeOf,gn=Object.prototype.hasOwnProperty;
  • shell package/dist/index.mjs :2 var Ms=Object.create;var Ze=Object.defineProperty;var Ds=Object.getOwnPropertyDescriptor;var $s=Object.getOwnPropertyNames;var js=Object.getPrototypeOf,qs=Object.prototype.hasOwnProperty;var v=(r=>typ

network 3

  • net package/dist/cli.cjs :24 tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`)}var xi=L(()=>{c();Si()});async function er(i=lo){let{stdo
  • net package/dist/index.cjs :2 tell application "System Events" to get value of property list item "CFBundleName" of property list file (app_path & ":Contents:Info.plist")`)}var Cr=P(()=>{h();Tr()});async function wt(r=Tn){let{stdo
  • net package/dist/index.mjs :10 `));this.apiKey=t,this.baseUrl=e?.baseUrl??process.env.POKE_API??"https://poke.com/api/v1"}async request({path:e,body:t}){let s=await fetch(`${this.baseUrl}${e}`,{method:"POST",headers:{Authorization:

secrets 2

  • secrets package/dist/index.cjs :8 `+t)}function te(r,e,t,s,n,i){if(r.listenerCount("wsClientError")){let o=new Error(n);Error.captureStackTrace(o,te),r.emit("wsClientError",o,t,e)}else Ae(t,s,n,i)}});var xo={};ir(xo,{Poke:()=>Ne,PokeA
  • secrets package/dist/index.mjs :9 `+t)}function Q(r,e,t,s,n,i){if(r.listenerCount("wsClientError")){let o=new Error(n);Error.captureStackTrace(o,Q),r.emit("wsClientError",o,t,e)}else Ce(t,s,n,i)}});import ye from"fs";import zs from"os

declared dependencies 10

  • @poke/piko-client@workspace:*
  • @types/node@^22.14.1
  • @types/ws@^8.5.10
  • commander@^12.1.0
  • esbuild@^0.25.3
  • open@^10.0.0
  • qrcode-terminal@^0.12.0
  • tsx@^4.16.2
  • typescript@^5.8.2
  • ws@^8.16.0