veto

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  src/agents/security/dependency-audit.ts, line 154

  fix: 'Upgrade to rimraf >= 3.0.0 or use fs.rm(path, { recursive: true }) available in Node 14.14+.',

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address. can reach registry.npmjs.org. The description does not name that host. can reach pypi.org. The description does not name that host. can reach crates.io. The description does not name that host. can reach api.osv.dev. The description does not name that host.

  NETWORK_NO_FIXED_HOST NETWORK_UNNAMED_HOST

  src/agents/local-llm.ts, line 15

  const resp = await fetch('http://localhost:11434/api/generate', {

  src/agents/local-llm.ts, line 31

  const resp = await fetch('http://localhost:1234/v1/chat/completions', {

  src/agents/development/performance.ts, line 18

  ure with real network traces (HAR file, curl --trace). Enable HTTP/2. Add connection

  Show more

  src/agents/development/performance.ts, line 43

  'Capture a HAR file from the browser or use curl --trace for API calls',

  src/agents/security/dep-verify.ts, line 152

  const res = await fetch(url, { headers: UA, signal: AbortSignal.timeout(FETCH_TIMEOUT_MS) });

  src/agents/security/dependency-audit.ts, line 144

  fix: 'Replace with native fetch() (Node 18+), axios >= 1.0.0, or got.',

  src/agents/security/scanner.ts, line 234

  fix: 'Replace with native fetch() (Node 18+), axios, or got.',

  src/github/pr-fetcher.ts, line 56

  fetch(apiBase, { headers: githubHeaders() }),

  src/github/pr-fetcher.ts, line 57

  fetch(apiBase, { headers: { ...githubHeaders(), Accept: 'application/vnd.github.v3.diff' } }),

  src/memory/local.ts, line 902

  const meta = await fetch(`https://registry.npmjs.org/${encodeURIComponent(package_name)}`, { signal: controller.signal });

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  src/discover.ts, line 39

  '.env.example', 'Dockerfile', 'docker-compose.yml', '.github/workflows',

  src/agents/development/devops.ts, line 27

  'Add .dockerignore: exclude node_modules, .git, .env, and all secrets',

  src/agents/security/secrets.ts, line 125

  fix: 'Move the API key to an environment variable. Load via process.env.API_KEY at runtime.',

  Show more

  src/agents/memory/project-mapper.ts, line 27

  'Identify config files: .env, config/, settings files',

  src/agents/security/secrets.ts, line 23

  'Run static scan (this agent) across the entire codebase including .env files',

  src/agents/security/secrets.ts, line 28

  'Add .env* to .gitignore; add .env.example with placeholder values',

  src/agents/security/secrets.ts, line 36

  '.env files listed in .gitignore at the repo root',

  src/agents/security/secrets.ts, line 37

  '.env.example present with only placeholder values, no real secrets',

  src/agents/security/secrets.ts, line 51

  'Committing .env files accidentally when .gitignore is misconfigured',

  src/github/pr-fetcher.ts, line 40

  const token = process.env.GITHUB_TOKEN;

  src/server/handlers/git.ts, line 215

  if (!process.env.GITHUB_TOKEN) return { content: [{ type: 'text', text: JSON.stringify({ success: false, message: 'GITHUB_TOKEN env var not set' }) }], isError: true };

  src/server/handlers/git.ts, line 238

  'Authorization': `Bearer ${process.env.GITHUB_TOKEN}`,

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 429f4a885712. can delete files. can reach a host that is not written as a fixed address. can reach registry.npmjs.org. The description does not name that host. can reach pypi.org. The description does not name that host. can reach crates.io. The description does not name that host. can reach api.osv.dev. The description does not name that host. reads a credential or environment file.

Date and source

Date checked: 24 Oct 2026

Read how this letter is chosen