Is envsync-le-mcp@2.5.0 safe to install?

envsync-le-mcp@2.5.0

VERIFIED· install only

Publisher claims: "Compares the key names across .env file contents supplied by an agent and reports which keys are missing from which file, supporting auto, manual, and template comparison modes. Only key names are returned, never values, and the server reads no files or network resources of its own." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry GlamaPublisher nolindnaidoo · publishing for 7 daysInstalls 0Last detonated 7d ago

$npx skills add envsync-le-mcp

Watch Report an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.

Tested: every file read, file written and host contacted by what ran
Not tested: use of the skill by an agent

What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.

Before you give it your token

Code inventory arrives with this version's next honeypot run.

It will ask for: unknown until the next run
Where it talks to: unknown until the next run
What the honeypot saw: no credential files read · no network
What we could not test: use of the skill by an agent

Not enough was observed to say yet. Nothing executable in the bundle ran; the trace covers the install step only. This version's code has not been inventoried for credentials and hosts either; both arrive with its next honeypot run (popular servers first). `vet-skills try envsync-le-mcp` runs it now and prints the full answer.

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-07 and scored it 84/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

0.0sprocessno install scripts to re-run

Static findings

HIGH

Access to sensitive file pathscrate/src/detect/corpus.rs:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// The names are `.env`, `.env.production` and so on, becauseFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/cli.rs:265 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filestree.write(".env.example", "A=1\nB=2\n");Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

LOW

Collapsed <details> block carrying instructionsREADME.md:86 · Collapsed <details> block carrying instructions · informational: not an instruction file · informational: not an instruction file

<summary><b>Configuring it by hand</b> — any host with an MCP config file</summary> Most hosts read a JSON config. Add one entry: ```json { "mcpServers": { "env

Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.

AST01

HIGH

Access to sensitive file pathscrate/src/detect/corpus.rs:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env.example" => include_str!("../../fixtures/documents/dot.env.example"),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/detect/corpus.rs:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env.production" => include_str!("../../fixtures/documents/dot.env.production"),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/cli.rs:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files`.env.bak` that is not text says nothing about whether the real onesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/cli.rs:269 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env.example".into(),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/cli.rs:266 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filestree.write(".env.staging", "A=1\n");Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/detect/parser.rs:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// it, Rust does not. A `.env` written by Notepad and then editedFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/detect/corpus.rs:25 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env" => include_str!("../../fixtures/documents/dot.env"),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/cli/cli.test.ts:128 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'.hidden/.env.test': 'A=1',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/discover.rs:140 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// machine and `packages\api\.env` on another. Anything comparing twoFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/compare.rs:313 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files{ "path": ".env.example", "content": "SECRET=\nURL=\nEXTRA=" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/discover.rs:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// committed and `.env*` ignored. Honouring the ignore rules foundFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/detect/parser.rs:252 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// A certificate in a `.env` is the ordinary case for this.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/detect/parser.rs:230 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// Dotted names are what Spring and other Java stacks put in a `.env`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/discover.rs:39 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// to support — so the near-universal repository has `.env.example`Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/discover.rs:139 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// the same repository describes itself as `packages/api/.env` on oneFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/compare.rs:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"description": "Path or filename, e.g. \".env.example\". Used to \Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/cli/cli.test.ts:133 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexpect(names).toEqual(['.env', '.env.example']);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/compare.rs:312 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files{ "path": ".env", "content": "SECRET=hunter2\nURL=postgres://user:pw@host" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/discover.rs:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files/// Not the dotenv files themselves: `.env` is hidden by definition,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/benchmark.ts:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filespath: `/repo/.env.${f}`,Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/mod.rs:628 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files{ "path": ".env", "content": "A=1" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathspackage.json:108 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"when": "resourceFilename =~ /^\\.env\\.|\\.env$/",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathspackage.json:103 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"when": "resourceFilename =~ /^\\.env\\.|\\.env$/",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/scan.rs:178 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files&[(".env", "A=1\nB=2"), (".env.production", "A=3\nB=4")],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/mod.rs:646 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files{ "path": ".env", "content": "SECRET=hunter2" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/mod.rs:293 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// found only the committed `.env.example` in the usual repositoryFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/mod.rs:629 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files{ "path": ".env.production", "content": "A=1\nB=2" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/scan.rs:189 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files&[(".env", "A=1"), (".env.production", "A=1\nB=2")],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/benchmark.ts:4 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* EnvSync-LE compares key sets across .env files, so the work scales withFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/mod.rs:647 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files{ "path": ".env.example", "content": "SECRET=\nEXTRA=" },Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/scan.rs:67 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// a `.env.bak` that is not text says nothing about whether the realFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathspackage.json:31 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"workspaceContains:**/.env*"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathscrate/src/mcp/compare.rs:345 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files"files": [{ "path": ".env", "content": "A=1" }],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/help.ts:27 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Unignore File**: Re-include a previously ignored .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/help.ts:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Compare Files**: Compare the key sets of two or more selected .env filesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/check-cli-pipes.ts:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfile('big/.env.example', Array.from({ length: 20_000 }, (_, at) => `KEY_${at}=v`).join('\n'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/help.ts:24 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Set Template**: Mark a .env file as the reference template; all files are compared against itFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/e2e-vsix.js:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filespath.join(workspaceDir, '.env.local'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/help.ts:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesEnvSync-LE compares the variable names (keys) across the .env files inFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/cli/usage.ts:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files\`.env.bak\` that is not text says nothing about whether the real onesFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/cli/scan.ts:153 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* walk calls `.env.example`. A template that matches nothing falls back toFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/ignoreFile.ts:83 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesvscode.l10n.t('No .env files found in workspace'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/cli/scan.ts:152 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* exact spelling, so `./.env.example` or `sub/.env.example` finds the file theFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/e2e-vsix.js:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Workspace with a known missing key: .env has DEBUG, .env.local lacks it.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/cli/scan.ts:69 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* not abort the rest: a `.env.bak` that is not text says nothing about whetherFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/ignoreFile.ts:95 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesplaceHolder: vscode.l10n.t('Select .env file to ignore'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/e2e-vsix.js:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// key missing from .env.local.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/check-cli-pipes.ts:79 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfile('big/.env', 'OTHER=1\n');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/help.ts:26 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **Ignore File**: Exclude a .env file from sync checkingFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/cli/discover.ts:297 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* put `a.b/.env` before `a/.env`, because `.` is below `/` in ASCII.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/ignoreFile.ts:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst allEnvFiles = await fileSystem.findFiles('**/.env*', null);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/ignoreFile.ts:102 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// Validate it's an .env fileFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathsscripts/e2e-vsix.js:44 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filespath.join(workspaceDir, '.env'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/cli/discover.ts:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* caller turns them on. A default that cannot see `.env` reports a tree inFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/mcp/mcp.test.ts:46 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filestemplatePath: '.env.example',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/config/config.test.ts:37 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswatchPatterns: ['.env', '.env.local'],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/extension.test.ts:58 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env.local', 'A=1');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/commands/ignoreFile.ts:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesui.showWarningMessage(vscode.l10n.t('Please select a .env file'));Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/races.test.ts:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env.local', 'A=1');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/cli/cli.test.ts:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'.env': 'A=1',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/mcp/mcp.test.ts:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst EXAMPLE = { path: '.env.example', content: 'API_URL=\nAPI_KEY=\nDEBUG=' };Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/mcp/mcp.test.ts:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filestemplatePath: '.env.example',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/lifecycle.test.ts:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env.example', 'A=\nB=');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/config/config.test.ts:20 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexpect(result.watchPatterns).toEqual(['.env*']);Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/races.test.ts:42 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env', 'A=1\nB=2');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/extension.test.ts:106 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesm.message.includes('No .env files found in workspace'),Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/extension.test.ts:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env.local', 'A=1');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/extension.test.ts:57 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env', 'A=1\nB=2');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/mcp/mcp.test.ts:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filespath: '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/lifecycle.test.ts:44 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env.local', 'A=1');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/mcp/mcp.test.ts:81 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesfilepath: '.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/lifecycle.test.ts:53 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files[Uri.file('/ws/.env'), Uri.file('/ws/.env.local')],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/cli/cli.test.ts:126 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'.env.example': 'A=',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Hidden zero-width characters detectedsrc/cli/frames.test.ts:47 · Hidden zero-width characters detected — may conceal contentawait read('nope\n{"jsonrpc":"2.0","id":1,"method":"ping"}\n'),Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.

AST07

MEDIUM

Access to sensitive file pathssrc/lifecycle.test.ts:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env', 'A=1\nB=2');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/extension.test.ts:112 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env', 'A=1\nB=2');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/mcp/provider.test.ts:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexpect(definition?.env).toEqual({ ELECTRON_RUN_AS_NODE: '1' });Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/config/config.ts:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system fileswatchPatterns: Object.freeze(['.env*']) as readonly string[],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/config/config.test.ts:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescompareOnlyFiles: ['.env.template'],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/config/config.test.ts:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexcludePatterns: ['.env.prod'],Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

HIGH

Access to sensitive file pathssrc/mcp/tools.ts:168 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'Path or filename, e.g. ".env.example". Used to classify the file and to label mismatches.',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/races.test.ts:54 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexpect(report).toContain('### ws/.env.local');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/rating/wiring.test.ts:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files// The workspace holds no .env files, so there is nothing to report.Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/races.test.ts:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesconst pair = [Uri.file('/ws/.env'), Uri.file('/ws/.env.local')];Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/utils/errors.test.ts:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'ENOENT /Users/***/project/.env',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/rating/wiring.test.ts:41 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env.local', 'A=1');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/utils/errors.test.ts:9 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexpect(sanitizeErrorMessage('read /home/jane/app/.env failed')).toBe(Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/utils/errors.test.ts:6 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesexpect(sanitizeErrorMessage('ENOENT /Users/jane/project/.env')).toBe(Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/utils/errors.test.ts:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files'read /home/***/app/.env failed',Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

MEDIUM

Access to sensitive file pathssrc/rating/wiring.test.ts:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files_setFile('/ws/.env', 'A=1\nB=2');Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.

AST05

Cost to the agent

Instructions loaded

≈37 tok

1 file · 81 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.