← Back to search

io.github.lhf552004/cloudpulse

Galadriel-Tech-Solutions Scanned 26d ago

Cross-cloud observability for AI agents. Covers AWS, GCP, Vercel, and Cloudflare.

B
81.6 / 100

Versions

0.1.2latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

list_cloud_topology
annotations: none low

Scan all configured cloud platforms (AWS, Vercel, GCP, Cloudflare) and return a unified topology of active services including their endpoints and regions. Run this first to understand the infrastructure landscape.

get_correlated_logs
annotations: none low

Fetch logs from multiple cloud platforms (AWS CloudWatch + Vercel) for a given time window and optional trace ID, then merge them into a single chronological timeline. Use this to correlate errors across frontend and backend services.

diagnose_service_link
annotations: none low

Diagnose connectivity issues between a source service and a target resource. Checks Vercel environment variables, AWS Security Group inbound rules on the required port, and external API reachability. Returns a list of diagnostic results with actionable messages.

check_resource_limits
annotations: none low

Query quota limits and current usage across configured cloud platforms. Highlights resources approaching or exceeding their limits (default warning threshold: 80%). Use this to proactively catch Lambda concurrency limits, Vercel plan caps, and similar issues before they cause outages.

Permissions 2

network medium
Server uses network capabilities via: fetch(), https, ws
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 22

low
Tool 'list_cloud_topology' has no annotations annotation_checker · 100%
low
Tool 'get_correlated_logs' has no annotations annotation_checker · 100%
low
Tool 'diagnose_service_link' has no annotations annotation_checker · 100%
low
Tool 'check_resource_limits' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.10.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_cloud_topology manifest_parser · 70%
info
Tool: get_correlated_logs manifest_parser · 70%
info
Tool: diagnose_service_link manifest_parser · 70%
info
Tool: check_resource_limits manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (10) manifest_parser · 80%
high
High-risk OAuth scope: https://www.googleapis.com/auth/cloud-platform oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 339 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%