MCP Observatory
npm analyzed 0.135.0

signetai

v0.135.0
npm

Local-first identity, memory, and secrets for AI agents

maintainer
nicholai.exe
license
Apache-2.0
first seen
2026-05-22
last seen
2026-06-15
releases · 30d
182
short id

Drift inferred · capture-to-capture

  1. HIGH code analysis flagged dynamic code execution ×2 in signetai
capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals npm-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.135.0 · analyzer v18 · 9h ago

skills & prompt files 9

danger signals1

code evidence v0.135.0 · npm-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

filesystem 1

  • fs package/bin/signet.js :12 import { existsSync, realpathSync } from "node:fs";

shell / exec 2

  • shell package/bin/signet.js :11 import { spawn, spawnSync } from "node:child_process";
  • shell package/dashboard/_app/immutable/chunks/D6m8EAYN.js :10 `))};if(($.mac||$.android)&&f.from==l-1&&/^\. ?$/.test(i.text)&&e.contentDOM.getAttribute("autocorrect")=="off"&&(f={from:o,to:a,insert:E.of([i.text.replace("."," ")])}),this.pendingContextChange=f,!e

network 7

  • net package/dashboard/_app/immutable/chunks/Bqhrpqx2.js :507 In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function tr(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=
  • net package/dashboard/_app/immutable/chunks/COWi3zAm.js :1 import{p as ir,o as S,e as cr,q as dr,v as s,Q as vr,i as t,j as n,t as l,h as T,f as z,w as oe,x as q,y as R,z as u,b as i,A as we,c as $e,J as Me,u as J,l as o,k as U,B as ge,M as gr,d as ur,U as yt
  • net package/dashboard/_app/immutable/chunks/CVg1C0SH.js :1 import{bj as Te,q as Fe,o as A,i as U,v as T,U as oe,bk as kt,aN as Et}from"./ByWF7pVd.js";class Pe{constructor(t,n){this.status=t,typeof n=="string"?this.body={message:n}:n?this.body=n:this.body={mes
  • net package/dashboard/_app/immutable/chunks/CbJNabjP.js :2 import{g as Da}from"./CppT_YPm.js";import{_ as $e}from"./PPVm8Dsz.js";import{p as q,g as te,F as Te,j as O,A as Nt,t as B,a as Z,n as re,l as A,b as d,d as W,am as Fa,c as w,f as p,K as La,J as Vt,r a
  • net package/dashboard/_app/immutable/chunks/Cnt5R8WJ.js :1 import{p as se,s as be,c as G,f as w,a as fe,n as ge,b as c,d as re,r as ke,e as pe,o as me,j as u,A as Y,h as A,i as s,t as y,l as p,k as C,w as ue,x as Z,y as H,z,u as ee,O as We,M as he,ac as Fe,a5
  • net package/dashboard/_app/immutable/chunks/CxRtao85.js :1 import{p as ce,g as ke,t as o,j as s,l as t,w as ge,A as de,y as B,z as k,i as e,O as _e,b as c,J as we,d as ue,u as h,m as _,o as M,e as oe,q as he,v as y,k as ne,c as Ne,f as me,W as Ye,I as ze,M as
  • net package/dashboard/_app/immutable/chunks/DaBielGY.js :1 import{e as We,p as ie,s as he,c as ge,f as ce,a as fe,n as ve,b,d as oe,r as we,j as c,k as J,t as x,A as Te,i as t,l as a,y as ee,B as xe,z as ae,J as ft,M as U,G as Je,v as m,X as Ie,I as Me,o as Y

declared dependencies 17

  • @hono/node-server@^1.14.0
  • @inquirer/prompts@^7.0.0
  • chalk@^5.3.0
  • chokidar@^4.0.0
  • commander@^12.0.0
  • hono@^4.8.0
  • libsodium-wrappers@^0.8.2
  • open@^10.0.0
  • ora@^8.0.0
  • sqlite-vec@^0.1.7-alpha.2
  • onnxruntime-node@1.21.0
  • @huggingface/transformers@^3.4.0
  • @types/better-sqlite3@^7.6.0
  • @types/libsodium-wrappers@^0.8.2
  • @1password/sdk@^0.3.0
  • better-sqlite3@^12.0.0
  • sharp@^0.34.1