trenchcoat
Free · no sign-up
App report · 31 Oct 2026

runningoffcode/agent-wormhole

Stop self-replicating prompt payloads from writing themselves into your AI agent's config files

Template-written 16 evidence items Apache-2.080 source files scanned
What this means for you

agent-wormhole has no known tracking or crash-reporting libraries, and its code names 9 outside services.E1E11E10E7

  • It's open source under the Apache License 2.0 licence, so anyone can read and check its code.E2
  • No tracking SDKs found: None of its dependencies is a known analytics, telemetry or crash-reporting library.E1
  • Internet access: It contains code to connect to the internet.E5

What it is

  • The project describes itself as: “Stop self-replicating prompt payloads from writing themselves into your AI agent's config files”E1
  • It's written mainly in TypeScript (files: py, ts, json, mjs).E1
  • 5 people starred it on GitHub; the code was last updated 2026-10-28.E3

Where your data goes

Crypto & walletsConnect wallets, read blockchains or fetch token prices. 1
mainnet.base.orgBase: Base chain node 1×E11
CDNs & hostingDeliver files (scripts, images) quickly from servers near you. 1
audit.evil.workers.devCloudflare: CDN and hosting 1×E10
Not identifiedServices we don't have in our list yet. 7
github.comnot identified 6×E7
arxiv.orgnot identified 4×E15
api.mainnet-beta.solana.comnot identified 3×E12
agent.robinhood.comnot identified 1×E6
efts.sec.govnot identified 1×E9
json.schemastore.orgnot identified 1×E13
www.alphavantage.conot identified 1×E8

What it can do on your computer

No tracking SDKs found

None of its dependencies is a known analytics, telemetry or crash-reporting library. Signals: dependency scan.E1

dependency scan

Internet access

It contains code to connect to the internet. Signals: requests (HTTP client).E5

requests (HTTP client)

What it's built from

Libraries in its dependency files that tell you something about what it does. The many ordinary ones are left out.

LibraryWhat it's forDeclared in
requestsE5requests (HTTP client)watchtower/requirements.txt:6

Evidence

Every sentence above points to one of these. Code references show the file, line:column and the short identifier that matched, never the site's code itself.

E1
Repository: runningoffcode/agent-wormhole
Stop self-replicating prompt payloads from writing themselves into your AI agent's config files
GitHub description · https://github.com/runningoffcode/agent-wormhole
E2
Licence: Apache License 2.0
GitHub license · https://github.com/runningoffcode/agent-wormhole
E3
5 stars, last push 2026-10-28
GitHub activity · https://github.com/runningoffcode/agent-wormhole
E4
Latest release v0.1.2 (2026-07-26) with 0 files
GitHub release · https://github.com/runningoffcode/agent-wormhole/releases/tag/v0.1.2
E5
Depends on requests (requests (HTTP client))
watchtower/requirements.txt @ 6:None · “requests” · manifest scan
E6
Web address in source: agent.robinhood.com/mcp/trading
mcp-guard/src/run.ts @ 30:47 · “agent.robinhood.com/mcp/trading” · source scan
E7
Web address in source: github.com/runningoffcode/agent-wormhole
pyproject.toml @ 46:13 · “github.com/runningoffcode/agent-wormhole” · source scan
E8
Web address in source: www.alphavantage.co/query
research/trading-text-base-rate.mjs @ 33:26 · “www.alphavantage.co/query” · source scan
E9
Web address in source: efts.sec.gov/LATEST/search-index
research/trading-text-base-rate.mjs @ 45:16 · “efts.sec.gov/LATEST/search-index” · source scan
E10
Web address in source: audit.evil.workers.dev
watchtower/e2e.py @ 103:10 · “audit.evil.workers.dev” · source scan
E11
Web address in source: mainnet.base.org
watchtower/ingest/evm_rpc.py @ 33:16 · “mainnet.base.org” · source scan
E12
Web address in source: api.mainnet-beta.solana.com
watchtower/ingest/solana_rpc.py @ 19:19 · “api.mainnet-beta.solana.com” · source scan
E13
Web address in source: json.schemastore.org/sarif-2.1.0.json
wormhole/cli.py @ 274:21 · “json.schemastore.org/sarif-2.1.0.json” · source scan
E14
Web address in source: agentwormhole.com
wormhole/cli.py @ 279:36 · “agentwormhole.com” · source scan
E15
Web address in source: arxiv.org/abs/2608.10218
wormhole/scanners/immunity.py @ 190:26 · “arxiv.org/abs/2608.10218” · source scan
E16
Web address in source: dashboard.agentwormhole.com/api/v1/verify
x402-guard/src/mcp.ts @ 378:6 · “dashboard.agentwormhole.com/api/v1/verify” · source scan

Limits

  • We read the app's code and its official download without running it. Code that exists may never run for you, and behaviour decided by servers is invisible.
  • Web addresses and libraries show what the app can talk to or do, not that it does so every time you use it.
  • Only open-source apps with a public GitHub repository are analysed. The release we inspected may differ from builds in app stores.
  • This text was written from fixed templates because no AI writer was available. It uses exactly the same evidence.

Facts, not judgements: this page describes what the code and traffic show, not anyone's intent. Not financial advice. Case id lwJ4qyXF.