Alpaca Trading API integration for Model Context Protocol (MCP)
Nothing to run from here
GhOsT77 crypto data + security is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
tool-list score
27
tools declared
remote
at its publisher
—
calls last 7d
What it does
Read-only crypto tools via x402 (USDC/Base): Hyperliquid, DD, DeFi, rugs, bridges. +security reviews
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user --transport http ghost77-crypto-data-jobs-mcp https://ghost77-agent.onrender.com/mcp
# 2 — ask your agent for something these tools do
# crypto_news_digest, hl_funding_snapshot, sentiment_alpha and 24 more
GhOsT77 crypto data + security costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
GAAll 1 server
ghost77-agent1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. Nothing here runs on your machine and nothing runs on ours: this server answers at its publisher’s own address, and what you install is the connection straight to it.
Claude Codedeclared by this listing
This is a public server: it answers at its publisher’s own address and this marketplace is not in the path. Claude Code registers it in one command; --scope user makes it available in every project. The transport below is http, as the publisher's own manifest declares it.
claude mcp add --scope user --transport http ghost77-crypto-data-jobs-mcp https://ghost77-agent.onrender.com/mcpReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it answers at its publisher’s own address: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry pointing straight at the publisher’s own address — this marketplace is not in the path, and nothing from this listing executes on your machine.
What you approve
27 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
Catch up on crypto news in one short read: a summarized digest of the key headlines for your window, optionally filtered by topic or tokens, each with its source link. Input: timeframe (1h/6h/24h/7d), optional topic, tokens, e.g. {"timeframe":"24h","topic":"Base ecosystem"}. Under a minute. Public news feeds only; coverage is limited. Not financial advice. Includes a 10% fee set aside to support t
| Parameter | Type | Required | Notes |
|---|---|---|---|
| timeframe | string | yes | Lookback window |
| tokens | array | no | Optional token symbols or addresses to focus on |
| topic | string | no | Optional topic or keywords (e.g. 'AI agents', 'Base ecosystem') |
What holding a Hyperliquid perp costs now: hourly and annualized funding, who pays, 24h/7d averages, predicted funding (HL, Binance, Bybit where listed), OI, 24h volume, mark vs oracle premium and a plain-language read. Input: market, e.g. {"market":"ETH"} (default BTC). Seconds. Public HL API data with sources and timestamp; read-only, not financial advice. Includes a 10% fee set aside to support
| Parameter | Type | Required | Notes |
|---|---|---|---|
| market | string | no | Hyperliquid perp symbol, e.g. BTC, ETH, SOL, HYPE (default BTC) |
Check whether public evidence supports a bullish or bearish story. You get qualified sentiment, observed catalysts, source URLs, timestamp and coverage limits, or an explicit insufficient-evidence result. Input: query, e.g. {"query":"HYPE"}; includeX adds public X results when available. Under a minute. Public web/news search only; no private feeds. Not financial advice. Includes a 10% fee set asi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| includeX | boolean | no | Include X/Twitter search (default true). |
| query | string | yes | Token symbol, project name, or market topic. |
A DeFi protocol's health in one snapshot: TVL with 1d/7d/30d change and top chains, fees and revenue (24h/7d/30d) with trends, fees/TVL, revenue share, mcap/revenue and past hacks. Input: protocol (DefiLlama name or slug), e.g. {"protocol":"aave"}. Under a minute. Only protocols DefiLlama tracks; read-only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC4341142
| Parameter | Type | Required | Notes |
|---|---|---|---|
| protocol | string | yes | DefiLlama protocol name or slug |
Turn a public web page into the answer you need: a structured summary or extraction plus source URL, evidence, timestamp and limitations. Input: url (https), request, optional output_format, e.g. {"url":"https://docs.base.org/","request":"List the main sections"}. Under a minute. Public pages only: no sign-in walls, blocked content, forms or account actions. Includes a 10% fee set aside to support
| Parameter | Type | Required | Notes |
|---|---|---|---|
| output_format | string | no | Preferred result format: summary, JSON, links, or structured data |
| request | string | yes | Describe exactly what information you want extracted or researched |
| url | string | yes | Public webpage URL to scrape or research |
What is moving on Hyperliquid at a glance: top 24h gainers and losers, volume leaders and funding extremes across perps with $1M+ daily volume, plus breadth and the BTC move. Input: window "24h", optional limit 3-25, e.g. {"window":"24h","limit":10}. Seconds. Live public HL API data with timestamp; market data only, not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0
| Parameter | Type | Required | Notes |
|---|---|---|---|
| limit | integer | no | Rows per list (default 10). |
| window | string | yes | Lookback window. Only '24h' is supported; send {"window":"24h"}. |
Screen a token for red flags before you touch it: security-provider risk flags, reported DEX liquidity, social/web evidence, sources, timestamp and a CAUTION or ALERT verdict. Input: chain (ethereum, base, arbitrum, solana) and tokenAddress, e.g. {"chain":"base","tokenAddress":"0x9401...8631"}. Under a minute. Partial automated screen; cannot certify safety or audit status. Includes a 10% fee set
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | yes | Chain the token lives on. |
| tokenAddress | string | yes | Token contract address. EVM: 0x + 40 hex chars. Solana: base58 (32-44 chars). |
Is Base congested or expensive right now? TPS, Mgas/s, block fullness vs gas target, base-fee trend, sequencer liveness, L1 data cost, typical user fee and a public-RPC latency check, with a plain-English summary. Input: chain "base", blocks 10-500, e.g. {"chain":"base","blocks":100}. Seconds. Read-only public RPC data; not an official Base status page. Includes a 10% fee set aside to support the
| Parameter | Type | Required | Notes |
|---|---|---|---|
| blocks | integer | yes | Number of recent Base blocks to analyze (100 ≈ 200 seconds). |
| chain | string | yes | L2 to analyze. Only 'base' is supported. |
A quick read of Hyperliquid's perp market: mark prices, funding, open interest and 24h volume for active markets, up to three funding watchlist candidates, sources, timestamp and limits. Input: optional focus (major, altcoins, funding-arb, all), e.g. {"focus":"major"}. Seconds. Read-only snapshot; no historical OI or liquidations, no orders. Not financial advice. Includes a 10% fee set aside to su
| Parameter | Type | Required | Notes |
|---|---|---|---|
| focus | string | no | Market focus: major, altcoins, funding-arb, or all (default). |
Pick a cheaper, safer bridge route before moving funds: live LI.FI and Across quotes ranked by cost (incl. gas) and ETA, bridge TVL trends, past incidents and hacks, canonical-bridge timing and L2BEAT risks. Input: from_chain, to_chain, bridge_token, optional bridge_amount, e.g. {"from_chain":"ethereum","to_chain":"base","bridge_token":"USDC"}. Seconds. Read-only; nothing executed. Includes a 10%
| Parameter | Type | Required | Notes |
|---|---|---|---|
| bridge_amount | number | no | Amount in token units (default ~$1,000 worth) |
| bridge_token | string | yes | Token symbol, e.g. USDC, USDT, ETH, WETH, DAI |
| from_chain | string | yes | — |
| to_chain | string | yes | — |
Understand a crypto project fast: a concise report on what it does, team/backers, tokenomics, on-chain and market snapshot, recent news, risks and a summary verdict. Input: project name, ticker or token address, optional chain, e.g. {"project":"Aerodrome","chain":"base"}. About a minute. Automated from public sources; gaps are flagged. Informational only, not financial advice. Includes a 10% fee s
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | no | Optional chain (e.g. base, ethereum, solana) to disambiguate the token address |
| project | string | yes | Project name, ticker, or token contract address |
What is publicly known about a contract address: project overview, social and transaction signals, risk summary, source URLs and observation time; missing evidence is marked unknown. Input: chain and contractAddress, e.g. {"chain":"base","contractAddress":"0x9401...8631"}. Under a minute. Public-source research only: not a source-code audit or a guarantee of safety. Includes a 10% fee set aside to
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | yes | Chain the contract is deployed on. |
| contractAddress | string | yes | Deployed contract address. EVM: 0x + 40 hex chars. Solana: base58 (32-44 chars). |
How Hyperliquid's most profitable traders are positioned now: live long/short totals and per-coin bias for the top 60 traders by 30-day PnL (profitable all-time, $50k+ accounts). Input: scope "all" or a coin, e.g. {"scope":"BTC"}. Seconds. Positions read live; trader list refreshed hourly from the public HL leaderboard. Data only, not financial advice. Includes a 10% fee set aside to support the G
| Parameter | Type | Required | Notes |
|---|---|---|---|
| scope | string | yes | 'all' for the full overview, or a Hyperliquid perp symbol (e.g. BTC) for a focused read. |
One rules-based setup for a Hyperliquid perp: side, entry zone, stop-loss, TP1/TP2 and risk:reward from live 1h/4h trend, ATR and swing structure, plus funding and caution flags. Input: coin, e.g. {"coin":"BTC"}. Seconds. One coin per job, no discretionary or news input; advisory only, no orders placed. Not financial advice. Includes a 10% fee set aside to support the GHOST77 token (0xC43411421790
| Parameter | Type | Required | Notes |
|---|---|---|---|
| coin | string | yes | Hyperliquid perp symbol, e.g. BTC, ETH, SOL, HYPE. |
Where liquidations may cluster around a Hyperliquid perp's price: estimated long and short liquidation levels in % buckets around mark, biggest clusters highlighted. Input: asset, optional rangePct and bucketPct, e.g. {"asset":"BTC","rangePct":20}. Under a minute. Estimate from live positions of ~420 large accounts, not every position. Not financial advice. Includes a 10% fee set aside to support
| Parameter | Type | Required | Notes |
|---|---|---|---|
| asset | string | yes | Hyperliquid perp symbol, e.g. BTC, ETH, SOL. |
| bucketPct | number | no | Bucket width in % of price (default 1). |
| rangePct | number | no | Range around mark in % (default 20). |
How close a Hyperliquid account is to trouble: open positions, margin utilization, liquidation distance and observed trigger orders, with sources, timestamp and limits. Input: walletAddress, optional tokens, e.g. {"walletAddress":"0x..."}. Seconds. Read-only snapshot: no PnL history, cannot guarantee stop coverage, changes nothing. Includes a 10% fee set aside to support the GHOST77 token (0xC4341
| Parameter | Type | Required | Notes |
|---|---|---|---|
| tokens | array | no | Optional: specific tokens to check. Checks all active positions if omitted. |
| walletAddress | string | yes | Your wallet address with active Hyperliquid positions. |
Is a Hyperliquid trader worth copying? Account value, positions and leverage, realized PnL net of fees, win rate, avg win/loss, largest loss, trades/day, median hold, top markets, drawdown and a 0-100 copy-ability score. Input: address, e.g. {"address":"0x..."}. Seconds. Public HL data, up to 10,000 recent fills; read-only, not financial advice. Includes a 10% fee set aside to support the GHOST77
| Parameter | Type | Required | Notes |
|---|---|---|---|
| address | string | yes | Hyperliquid trader address (0x + 40 hex) |
A clean technical read on a token: trend, support/resistance, RSI, MACD, moving averages, volume and a short bias summary. Input: token symbol or address, timeframe (15m, 1h, 4h, 1d, 1w), optional chain, e.g. {"token":"ETH","timeframe":"4h"}. Under a minute. Indicators only (no order-book or on-chain flow); thin markets may lack data. Not financial advice. Includes a 10% fee set aside to support t
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chain | string | no | Optional chain if an address is given |
| timeframe | string | yes | Candle timeframe to analyze |
| token | string | yes | Token symbol or contract address |
Turn your market view into a risk-sized perp plan: ENTER/WAIT/NO_TRADE, entry zone, stop, TP1/TP2 with R:R, size at 0.5/1/2% risk, leverage cap, liquidation estimate and invalidation, from live HL candles, funding and OI. Input: marketThesis, capitalUsdc, riskTolerance, optional market, horizon, direction. About a minute. Advice only, no execution; not financial advice. Includes a 10% fee set asid
| Parameter | Type | Required | Notes |
|---|---|---|---|
| capitalUsdc | number | yes | Capital available in USDC (min $10). Size is risk-based: conservative 0.5%, moderate 1%, aggressive 2% of this amount at the stop. |
| direction | string | no | Optional. auto (default) reads the thesis, then falls back to the higher-timeframe trend. |
| horizon | string | no | Optional, default swing. Timeframes used: intraday 1h/4h, swing 4h/1d, position 1d/1w. |
| market | string | no | Optional Hyperliquid perp symbol, e.g. BTC, ETH, SOL, HYPE. Unlisted symbols are rejected with suggestions. |
| marketThesis | string | yes | Your view: what you expect to move and why (10-2000 chars). Name the market here if you omit 'market'. |
| riskTolerance | string | yes | conservative: 0.5% risk, max 2x; moderate: 1% risk, max 3x; aggressive: 2% risk, max 5x (also capped by the market's max leverage). |
Why is a Virtuals ACP agent not getting jobs? A 0-100 health score and ranked issues with likely causes and exact acp CLI fixes: profile, search rank, offering audit (schemas, SLA, pricing, requiredFunds), ERC-8004 identity and activity. Input: agent id or wallet, optional symptom, e.g. {"agent":"0x...","symptom":"no jobs"}. Under a minute. Public data; inferences labelled. Includes a 10% fee set
| Parameter | Type | Required | Notes |
|---|---|---|---|
| agent | string | yes | ACP agent UUID or its 0x EVM wallet address |
| symptom | string | no | Optional symptom, e.g. no jobs, not in search, jobs expire, setBudget fails |
Spot dangerous admin powers: verified-source status, proxy pattern with implementation and admin, owner type (EOA, Safe, timelock), privileged functions (mint, pause, blacklist, upgrade, fees) and token risk flags, with a verdict and risk level. Input: network, contract_address, e.g. {"network":"base","contract_address":"0x..."}. Seconds. Automated read-only scan, not a full audit. Includes a 10%
| Parameter | Type | Required | Notes |
|---|---|---|---|
| contract_address | string | yes | EVM contract address (0x...) |
| network | string | yes | Chain the contract is deployed on |
For traders and agents tracking a wallet: large buys, sells, bridges and transfers by one address on Base, Ethereum and Arbitrum over the last 1-72h, plus its Hyperliquid perp positions and big fills. Input: wallet_address, optional chains, lookback_hours, min_usd, e.g. {"wallet_address":"0x7fda...17d1","min_usd":10000}. Output: priced events (USD), per-chain coverage, HL positions. Under a minute
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chains | array | no | Chains to scan (default all three) |
| include_hyperliquid | boolean | no | Include Hyperliquid positions and large fills (default true) |
| lookback_hours | number | no | Window in hours (default 24) |
| min_usd | number | no | Only report moves at least this large in USD (default 10000) |
| wallet_address | string | yes | EVM wallet to check (0x...) |
For holders and researchers sizing supply risk: upcoming token unlocks for one project in the next 7-365 days, from DefiLlama's public emissions dataset: dated cliff and linear unlocks by recipient group, tokens and USD value, % of max supply, airdrop/claim unlocks, plus airdrop/claim news links. Input: project, optional days_ahead, e.g. {"project":"arbitrum","days_ahead":90}. Under a minute. Limi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| days_ahead | number | no | Window in days (default 90) |
| project | string | yes | Project name, ticker or DefiLlama slug, e.g. arbitrum, SUI, optimism |
For anyone about to send or swap: live fee estimate in USD for an ETH transfer, ERC-20 transfer or DEX swap on Base, Ethereum, Arbitrum and Optimism (L2 execution + L1 data fee), the cheapest chain right now, and how current Ethereum fees compare with the last ~7 hours. Input: optional tx_type and chains, e.g. {"tx_type":"dex_swap"}. Output: ranking, per-chain gwei and USD, timing read. Seconds. L
| Parameter | Type | Required | Notes |
|---|---|---|---|
| chains | array | no | Chains to compare (default all four) |
| tx_type | string | no | Transaction type to price (default dex_swap) |
For buyers checking a token before trading: fast rug/honeypot screen. Buy/sell simulation and taxes (honeypot.is), owner powers (mint, pause, blacklist, tax change, proxy) and renounce status, liquidity and LP lock %, top-10 holder share (LP, burn and launchpad curves noted). Input: token_address + network, e.g. {"token_address":"0x532f...42E4","network":"base"}. Output: risk level, red flags, pla
| Parameter | Type | Required | Notes |
|---|---|---|---|
| network | string | yes | Chain the token is on |
| token_address | string | yes | ERC-20 token contract (0x...) |
For funding-rate researchers: compares live perp funding on Hyperliquid with OKX, Bitget, Gate, Binance and Bybit, normalized to APR per funding interval, and lists the widest cross-venue gaps with which side receives funding. Input: optional min_hl_volume_usd, min_gap_apr_pct, top_n, coins, e.g. {"min_gap_apr_pct":10,"top_n":10}. Output: ranked gaps, per-venue rates, skipped venues. Seconds. Limi
| Parameter | Type | Required | Notes |
|---|---|---|---|
| coins | array | no | Optional coin list, e.g. ["BTC","ETH"] |
| min_gap_apr_pct | number | no | Minimum funding gap in APR % (default 10) |
| min_hl_volume_usd | number | no | Minimum Hyperliquid 24h volume (default 1,000,000) |
| top_n | number | no | How many gaps to return (default 15) |
One-call daily research bundle for traders and agents: the Hyperliquid market scan (funding/OI landscape across liquid perps, funding watchlist, top markets) plus funding snapshots (rate, APR, 24h vs 7d trend, OI, volume, mark vs oracle) for up to 3 coins, with a short markdown report. Input: optional coins, e.g. {"coins":["BTC","ETH","HYPE"]}. Under a minute. Research only: no entries, sizes or r
| Parameter | Type | Required | Notes |
|---|---|---|---|
| coins | array | no | Up to 3 Hyperliquid perp symbols (default BTC, ETH, SOL) |
| focus | string | no | Market scan focus (default all) |
Free
$0 forever
- Every tool — any call limit is its publisher’s, not ours
- No card, and mcprush charges nothing for it
- Runs at its publisher’s own address — this marketplace is not in the path
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install GhOsT77 crypto data + security or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATool-list grade · score 93 / 100
Release 1.0.2 · scanned 6 Nov 2026
Graded from the tools this server lists, not from its source code.
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings0 threat · 1 capability
Capabilitymoderate
Coveragemanifest
Verificationnot in this report
Surface digest97c3649a82c5a84df18008533bea7b3f2e3e19f060f98c1ef8ccc26a68e28bd2
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | moderate | capability blast radius (moderate) — client exposure if the model is manipulated | −3 |
| coverage-honesty | manifest | inspection depth (manifest) — how much of the target the scan could see | −4 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
The scan read each tool’s name, description, input schema and annotations exactly as the server listed them the last time it answered us; no code was reviewed. We ask the server again about once a month, and a list that changed is graded again.
Tool surfaceread
Implementation sourcenot available
Package metadatanot available
Live transportnot available
The implementation source was not read — this reflects the declared tool metadata only.
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. moderate is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| crypto_news_digest | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hl_funding_snapshot | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| sentiment_alpha | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| protocol_stats_snapshot | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| ghost_web_scraper | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hl_top_movers | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| token_due_diligence | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| base_protocol_health | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| market_scan_report | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| bridge_route_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| project_research_report | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| contract_research | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hl_smart_money | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hl_quick_trade_idea | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hl_liquidation_map | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| position_health_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| hl_trader_copy_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| token_technical_analysis | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| trade_strategy_consult | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| acp_agent_repair_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| contract_security_scan | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| wallet_watch_alert | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| token_unlock_calendar | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| gas_fee_timing | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| rug_honeypot_quick_check | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| funding_arb_scan | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
| daily_bundle | untrusted-input | untrusted-input: declares openWorldHint: true (interacts with entities outside the server) |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
Integrityfirst-seen
Surface digest97c3649a82c5a84d
Scanned2026-11-06
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
This is an address its publisher runs: which release it serves is theirs to choose, so there is nothing here to pin. The history below is for reading; the current release on file is 1.0.2.
1.0.2
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish GhOsT77 crypto data + security can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.