MCP, MCP server
Aoci Code
A persistent, Git-versioned map of your entire codebase — written by your coding agent, governed by a local MCP server. Agents read it once and know the system, instead of re-reading the repo on every task.
Compatibility: Not stated.
Grade C
One Medium finding. Read the report before installing.
Not a guarantee. A hygiene check of the source at the commit shown, not a security audit.
PERMISSION_SHELL_UNDECLARED
Why this grade
- PERMISSION_SHELL_UNDECLARED Medium
Runs shell commands that the manifest or description does not mention.
internal/bootstrapapply/bootstrap_test.go, line 210
git := exec.Command("git", "init", "-q")
Any High, or two or more Medium findings, give D. One Medium gives C. Low findings or a security Note give B. Each code names a finding behind the letter.
Grades are a hygiene check of the source at the commit shown, on the date checked, not a security audit or a guarantee. The free directory grades are automated. Before release, a PlugVet engineer reviews every paid report and any grade we hold back, including all F grades, against the source code and the evidence we quote.
What was checked
Plain notes from the hygiene checks.
Permissions
Concern
requests shell access. No manifest field names shell or command execution.
PERMISSION_SHELL_UNDECLARED
internal/bootstrapapply/bootstrap_test.go, line 210
git := exec.Command("git", "init", "-q")
internal/bootstrapapply/bootstrap_test.go, line 222
if output, err := exec.Command("git", arguments...).CombinedOutput(); err != nil {
internal/cli/init_git_failure_detail_test.go, line 79
command := exec.Command("git", append([]string{"-C", root}, args...)...)
Show more
internal/cli/init_gitignore_test.go, line 149
command := exec.Command(
internal/cli/init_gitignore_test.go, line 271
command := exec.Command(
internal/cli/ui.go, line 224
command = exec.Command("open", url)
internal/cli/ui.go, line 226
command = exec.Command("rundll32", "url.dll,FileProtocolHandler", url)
internal/cli/ui.go, line 228
command = exec.Command("xdg-open", url)
Install and update
Pass
No install-time script found, and dependencies are pinned or absent.
Network
Concern
can reach a host that is not written as a fixed address.
NETWORK_NO_FIXED_HOST
internal/cognitionplan/testdata/pilot-react-node-mysql/frontend/src/App.jsx, line 6
fetch("/api/items").then((response) => response.json()).then(setItems);
internal/ui/page.html, line 159
const apiFetch = (url, options = {}) => fetch(url, {...options, redirect: "error", headers: {
scripts/blackbox/fixtures/repo-b/app/api/customers.py, line 37
def fetch(request: Request, customer_id: int) -> CustomerOut:
Show more
scripts/blackbox/fixtures/repo-b/app/api/orders.py, line 80
def fetch(request: Request, order_id: int) -> OrderOut:
scripts/blackbox/mcp_scenarios.py, line 2000
with urllib.request.urlopen(request, timeout=10) as response:
scripts/blackbox/mcp_scenarios.py, line 2032
with urllib.request.urlopen(urllib.parse.urldefrag(base)[0] + "api/repos", timeout=3):
scripts/blackbox/mcp_upgrade.py, line 206
with urllib.request.urlopen(url, timeout=180) as resp, open(dest, "wb") as out:
Secrets
Concern
reads a credential or environment file.
SECRETS_PATH_DOTENV
internal/bootstrapapply/bootstrap_test.go, line 246
writeBootstrapFile(t, root, ".env", "TEST_ONLY_SECRET=redacted\n")
internal/bootstrapapply/bootstrap_test.go, line 248
cfg.SafeInventoryHighRiskOptIn = []string{".env"}
internal/businesssource/manifest_test.go, line 33
writeManifestFixture(t, root, ".env", "SECRET=never-hashed\n")
Show more
internal/businesssource/manifest_test.go, line 48
if path == ".env" || path == ".runtime/state.db" || path == "aoci.txt" {
internal/cli/init_scope_blocked_test.go, line 23
{Path: ".env.production", GitStatus: "tracked", SafetyStatus: fs.SafetySensitive},
internal/cli/init_scope_blocked_test.go, line 27
for _, want := range []string{"managed_scope_auto_authorization_blocked", "data/audit_dump.log", ".env.production"} {
internal/cli/scope_test.go, line 558
secretOutput, err := runScopeCLI(t, root, "explain", ".env.production")
README.md, line 804
This split keeps account formats, DSN encoding, and secret lifecycle management away from ordinary users while keeping authorization explicit: AOCI does not discover credentials au
Agent instructions
Pass
No instruction to ignore earlier instructions or to hide a step.
Obfuscation
Note
a file was over the read cap and was not fully read. the file cap was reached before every file was read.
OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED
aoci.code.txt, line 1
#AOCI-CODE-VOLUME: 1
internal/config/scope_budget_test.go, line 1
package config
Licence
Pass
A licence file is present (LICENSE).
Maintainer activity
Pass
The latest commit is within the last 365 days.
Note
Hygiene check of commit 6cad9e1f4b38. requests shell access. No manifest field names shell or command execution. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.
Date and source
Date checked:
github.com
Commit graded: 6cad9e1f4b38ea68de13b67e674c1b73bb3c8610
This link goes to the original host. PlugVet does not host or check what you download from there, and installing it is your own decision and risk.