Security flags foundOur static scan found signals worth reviewing before you trust this with an agent. See exactly what, per check, below.
Install-time hooks & dependenciesno flags
Code that runs when you install it, before you ever call a tool.
Runs code / shell commands2 findings
MEDIUMbin/cli.js:5 — Code-execution surface: a node child_process call site. The server can run commands on the host; review what it executes and whether any input reaches it.
MEDIUMbin/cli.js:26 — Code-execution surface: a exec/spawn call site. The server can run commands on the host; review what it executes and whether any input reaches it.
Secrets & credentialsno flags
How it reads, logs, or transmits keys and tokens. Scam/wallet-drainer patterns land here.
Network calls out2 findings
MEDIUMsrc/core/chains.ts:17 — Hardcoded external endpoint 'starknet-mainnet.public.blastapi.io'. STATIC signal only: this flags a declared destination for human or dynamic-egress confirmation; it does NOT assert exfiltration.
MEDIUMsrc/core/chains.ts:22 — Hardcoded external endpoint 'starknet-sepolia.public.blastapi.io'. STATIC signal only: this flags a declared destination for human or dynamic-egress confirmation; it does NOT assert exfiltration.
Prompt-injection passthroughno flags
Whether it pipes untrusted external content back as agent instructions.
Permission scope breadthno flags
How much access it asks for versus what its job needs.
