oss-analyzer@0.2.0
VERIFIED· not startedPublisher claims: "Enables exhaustive, unit-by-unit analysis of open-source repositories through MCP, cataloging every file and symbol, resolving dynamically built routes and URL paths, and mapping call and value flows via LSP and Joern. Every conclusion carries file:line evidence tied to a pinned commit, with unresolved items tracked in an unverified list and assigned verification grades L0–L2." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Not started: dependency install failed; the server itself was not observed.- Tested
- the dependency install step · every file read, file written and host contacted by what ran
- Not tested
- server startup · the tool list · tool behavior
What this means for the label: Verified here covers what ran. The server's tools were not exercised with a real credential, so nothing about their behavior is asserted; the credential summary below says what to do with that.
Before you give it your token
- It will ask for
- no credential variables read in the code
- Where it talks to
- no vendor host named in the codeAlso git-scm.com — not the publisher's domain; check what for before connecting.
- What the honeypot saw
- no credential files read · no network
- What we could not test
- server startup · the tool list · tool behavior
Connect it under the guard. Not started: dependency install failed; the server itself was not observed. The code names no credential variable; the guard pins the network to what the honeypot saw and logs every call.
$vet-skills run --net declared -- <the server's command>
Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios; not started: dependency install failed; the server itself was not observed) on 2026-11-12 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 2 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.1sprocessdependency install exit 1 ·
0.1sclaimednot started: dependency install failed (exit 1); the server itself was not observed
0.1sprocessscript backend runs setup only
0.2sprocessno install scripts to re-run
Static findings
HIGH
Access to sensitive file pathssrc/oss_analyzer/core/mask.py:3 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05비밀 파일(.env 등)은 아예 읽지 않지만, application-prd.properties 같은 설정 파일이나 코드에Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/resolve.py:329 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05or re.match(r"""^process\.env\.(\w+)\s*(?:\?\?|\|\|)\s*["'`]([^"'`]*)["'`]$""", expr) \Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/classify.py:76 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05".env", ".env.*", "*.pem", "*.key", "*.p12", "*.pfx", "*.jks", "*.keystore",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/joern.py:134 · Python subprocess execution detected
AST05proc = subprocess.run([str(self.joern), "--script", str(script)],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/lsp.py:75 · Python subprocess execution detected
AST05proc = subprocess.run([path, "--version"], capture_output=True, timeout=60, cwd=str(Path.home()))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/cbm.py:53 · Python subprocess execution detected
AST05proc = subprocess.run([self.settings.cbm_bin, "--version"], capture_output=True, timeout=60)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/classify.py:59 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05".tf", ".hcl", ".csv", ".tsv", ".env.example", ".lock", ".mod", ".sum", ".svg",Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/mask.py:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05code = not (lower.endswith(CONFIG_SUFFIXES) or "/.env" in lower or lower.startswith(".env"))Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/joern.py:118 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Access to sensitive file pathssrc/oss_analyzer/skills/oss-analyze/SKILL.md:135 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05- `secret` 범주 파일을 읽거나 인용하지 않는다 (`.env`, 키 파일 등).Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/git.py:12 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/extpoints.py:44 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05JS_CONFIG = re.compile(r"""process\.env(?:\.([A-Za-z_]\w*)|\[\s*["']([\w.\-]+)["']\s*\])""")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/mask.py:28 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CONFIG_SUFFIXES = (".yml", ".yaml", ".properties", ".env", ".ini", ".cfg", ".conf", ".toml", ".json", ".xml")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/routes.py:222 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05recommended_probes=[{"operation": "check_deploy_config", "rationale": "배포 환경별 설정값 확인 (.env 는 읽지 않음)"}])Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/astgrep.py:113 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.HIGH
Access to sensitive file pathssrc/oss_analyzer/core/resolve.py:333 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05if re.match(r"^(?:process\.env\.\w+|System\.getenv\(|(?:std::)?env::var\()", expr):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/astgrep.py:94 · Python subprocess execution detected
AST05proc = subprocess.run([self.settings.astgrep_bin, "--version"], capture_output=True, timeout=60)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedplugin/launch_mcp.py:36 · Python subprocess execution detected
AST05return subprocess.call([exe]) # 표준 입출력을 그대로 물려준다 (MCP stdio)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/cbm.py:36 · Python subprocess execution detected
AST05proc = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/lsp.py:63 · Python subprocess execution detected
AST05proc = subprocess.run([rustup, "which", "rust-analyzer"], capture_output=True, timeout=60, cwd=str(Path.home()))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Access to sensitive file pathstests/test_flow.py:33 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05evidence.validate_location(conn, proj, {"path": ".env", "start_line": 1})Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Access to sensitive file pathstests/test_classify_units.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05assert classify(".env.prd")[0] == "secret"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/container.py:85 · Python subprocess execution detected
AST05v = _version_ok(subprocess.run([*prefix, "info", "--format", "{{.ServerVersion}}"], capture_output=True, timeout=60))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/container.py:62 · Python subprocess execution detected
AST05v = _version_ok(subprocess.run([docker, "info", "--format", "{{.ServerVersion}}"], capture_output=True, timeout=20))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/port.py:1020 · Python subprocess execution detected
AST05self.proc = subprocess.Popen(args, shell=shell, cwd=side.cwd, env=runtime.safe_env(), stdout=self.log,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/lsp.py:132 · Python subprocess execution detected
AST05root = subprocess.run([npm, "root", "-g"], capture_output=True, timeout=60, shell=False).stdout.decode().strip()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/port.py:788 · Python subprocess execution detected
AST05return subprocess.run(argv, input=stdin, capture_output=True, timeout=timeout)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedtests/conftest.py:36 · Python subprocess execution detected
AST05subprocess.run(["git", *args], cwd=repo, check=True, capture_output=True)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Access to sensitive file pathstests/test_flow.py:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05assert conn.execute("SELECT COUNT(*) FROM symbol WHERE path = '.env'").fetchone()[0] == 0Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/integration.py:129 · Python subprocess execution detected
AST05return subprocess.run([claude, *args], capture_output=True, timeout=timeout, cwd=cwd)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Access to sensitive file pathstests/conftest.py:72 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05{"qualified_name": "p.env", "name": "SECRET", "label": "Function", "path": ".env", "start_line": 1, "end_line": 1},Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Access to sensitive file pathstests/test_classify_units.py:11 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05assert classify("config/.env.example")[0] == "asset" or classify("config/.env.example")[0] != "secret"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Access to sensitive file pathstests/test_flow.py:10 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05assert fake_cbm["exclude"] == [".env"] # 구조 지도 엔진에도 비밀 파일을 넘기지 않는다Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Access to sensitive file pathstests/conftest.py:47 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05(repo / ".env").write_text("SECRET_TOKEN=do-not-read\n", encoding="utf-8")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/container.py:72 · Python subprocess execution detected
AST05proc = subprocess.run(["wsl", "-l", "-q"], capture_output=True, timeout=20)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/runtime.py:304 · Python subprocess execution detected
AST05proc = subprocess.run(argv, cwd=copy, shell=isinstance(argv, str), capture_output=True, timeout=timeout, env=env)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/setup.py:125 · Python subprocess execution detected
AST05proc = subprocess.run([exe, *argv[1:]], capture_output=True, timeout=timeout)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/port.py:1055 · Python subprocess execution detected
AST05subprocess.run(self.side.engine.argv("stop", "-t", "10", self.container), capture_output=True, timeout=40)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/port.py:1016 · Python subprocess execution detected
AST05self.proc = subprocess.Popen(argv, stdout=self.log, stderr=subprocess.STDOUT)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/lsp.py:179 · Python subprocess execution detected
AST05proc = subprocess.run(cmd, capture_output=True, timeout=120, cwd=str(repo))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/doctor.py:40 · Python subprocess execution detected
AST05proc = subprocess.run(cmd, capture_output=True, timeout=30)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/port_guard.py:46 · Python subprocess execution detected
AST05out = subprocess.run(["git", "-C", str(root), "ls-files", "-co", "--exclude-standard", "-z"],Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagesrc/oss_analyzer/core/port.py:1089 · npx invocation of non-well-known package — may execute untrusted code
AST06return cmd, True # .cmd/.bat(npx 등)은 셸이 필요Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Access to sensitive file pathstests/test_flow.py:12 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05assert cats[".env"] == "secret"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/container.py:91 · Python subprocess execution detected
AST05subprocess.run(["wsl", "-d", distro, "-u", "root", "--", "systemctl", "start", "docker"], capture_output=True, timeout=60)Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/adapters/lsp.py:150 · Python subprocess execution detected
AST05root = subprocess.run([npm, "root", "-g"], capture_output=True, timeout=60).stdout.decode().strip()Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.MEDIUM
npx invocation of non-well-known packagetests/test_container.py:22 · npx invocation of non-well-known package — may execute untrusted code
AST06assert port._direct_argv("npx something")[1] is True # .cmd 는 셸 필요Fix: Pin versions and sources; vendor anything fetched at install time.MEDIUM
Python subprocess execution detectedsrc/oss_analyzer/core/port.py:789 · Python subprocess execution detected
AST05return subprocess.run(cmd, shell=True, cwd=self.cwd, input=stdin, capture_output=True, timeout=timeout,Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.Cost to the agent
Instructions loaded
≈1,806 tok
1 file · 78 in bundle
Tool list per prompt
≈0 tok
0 tools · 0 per tool
Handshake
no reply
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 0
Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.