Agentic Team Mcp

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  core/auth_pool.py, line 494

  shutil.rmtree(dir_path, ignore_errors=True)

  core/multimodal.py, line 83

  subprocess.run(cmd, capture_output=True, check=True, timeout=20, creationflags=flags)

  core/providers.py, line 240

  r = subprocess.run([agy_path, 'models'], capture_output=True, text=True, timeout=6, creationflags=flags)

  Show more

  core/service.py, line 87

  proc=subprocess.Popen([py_exe,str(ROOT/'main.py'),'--serve','--port',str(port)],

  core/telegram_bridge.py, line 828

  res = subprocess.run(cmd, capture_output=True, text=True, timeout=25)

  core/telegram_supervisor.py, line 38

  self.process: Optional[subprocess.Popen] = None

  core/telegram_supervisor.py, line 221

  self.process = subprocess.Popen(cmd, stdout=self._log_file, stderr=self._log_file, **kwargs)

  core/watchdog_brain.py, line 380

  gpu_name = subprocess.check_output(

  core/watchdog_brain.py, line 384

  gpu_ram = subprocess.check_output(

  core/workspace.py, line 72

  shutil.rmtree(target)

  core/workspace.py, line 81

  shutil.rmtree(target)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Serious

  accepts a host from input, with no fixed list in this file.

  NETWORK_HOST_FROM_INPUT

  core/console.py, line 14

  with urllib.request.urlopen(req,timeout=20) as response: return json.load(response)

  core/multimodal.py, line 32

  with urllib.request.urlopen(req, timeout=12) as resp:

  core/multimodal.py, line 51

  with urllib.request.urlopen(req_dl, timeout=60) as dl_resp:

  Show more

  core/multimodal.py, line 133

  with urllib.request.urlopen(req, timeout=25) as resp:

  core/multimodal.py, line 169

  with urllib.request.urlopen(req, timeout=25) as resp:

  core/multimodal.py, line 244

  with urllib.request.urlopen(req, timeout=45) as resp:

  core/providers.py, line 294

  with urllib.request.urlopen(req, timeout=5) as resp:

  core/providers.py, line 320

  with urllib.request.urlopen(req, timeout=5) as resp:

  core/service.py, line 36

  with urllib.request.urlopen(req,timeout=1) as response:

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  main.py, line 92

  if args.agent_mcp and not (os.environ.get('TEAM_TOKEN') and os.environ.get('TEAM_ENDPOINT')):

  core/telegram_bridge.py, line 731

  token = os.environ.get("TELEGRAM_BOT_TOKEN")

  core/telegram_supervisor.py, line 74

  token = cfg.get("bot_token") or os.environ.get("TELEGRAM_BOT_TOKEN")

  Show more

  mcp_server/server.py, line 16

  if os.environ.get('TEAM_TOKEN'):

  mcp_server/server.py, line 29

  if not os.environ.get('TEAM_TOKEN'): _info = None

  mcp_server/server.py, line 31

  if response.status_code in (401, 403) and not os.environ.get('TEAM_TOKEN'):

  .gitignore, line 17

  engine.tmp

  .gitignore, line 18

  .env

  .gitignore, line 20

  !.env.example

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 2e0a79723460. can delete files. accepts a host from input, with no fixed list in this file. reads a credential or environment file.

Date and source

Date checked: 22 Oct 2026

Read how this letter is chosen