Sato Hub
Package

peaq-os-sdk

pypi:peaq-os-sdk · v0.12.1 · sha256:6fb355f2322a · as of 2026-10-24

Does it take your key?
traced
It asks for a private key or seed phrase in its setup.
Our static read of the published artifact found it.
Does your key leave?
no evidence
Not yet run — we have not run this version with planted test keys.
No evidence line on file for this question yet.
Can it move funds on its own?
no evidence
Unknown — we could not read what it exposes.
No evidence line on file for this question yet.
What changed?
traced
Since 0.11.2: adds a request to mcr-staging.peaq.xyz; no longer references api.peaq.xyz; no longer references base-mainnet.example.com; ….
Our static read of the published artifact found it.

Is this your project? Respond →Dispute this reading

Hosts contacted

HostWhenRoleEvidence
api.devnet.solana.comcoderpctraced
api.example.comcodeothertraced
api.mainnet-beta.solana.comcoderpctraced
bucket.s3.amazonaws.comcodeothertraced
depinstation.peaq.xyzcodevendortraced
eu.i.posthog.comcodeothertraced
evm.peaq.networkcodeothertraced
gas.peaq.networkcodeothertraced
mcr-staging.peaq.xyzcodevendortraced
mcr.peaq.xyzcodevendortraced
peaq-rpc.example.comcoderpctraced
pki.infineon.comcodeothertraced
presigned.example.comcodeothertraced
telemetry.example.comcodeothertraced
Evidence (17 lines)
  • tracedT-hosts2026-10-24

    api.devnet.solana.com appears in shipped code (rpc).

    src/peaq_os_sdk/validation/svm/primitives.py

  • tracedT-hosts2026-10-24

    api.example.com appears in shipped code (other).

    src/peaq_os_sdk/stream/confirmation.py

  • tracedT-hosts2026-10-24

    api.mainnet-beta.solana.com appears in shipped code (rpc).

    src/peaq_os_sdk/deployments/__init__.py

  • tracedT-hosts2026-10-24

    bucket.s3.amazonaws.com appears in shipped code (other).

    src/peaq_os_sdk/stream/types/delivery.py

  • tracedT-hosts2026-10-24

    depinstation.peaq.xyz appears in shipped code (vendor).

    src/peaq_os_sdk/client.py

  • tracedT-hosts2026-10-24

    eu.i.posthog.com appears in shipped code (other).

    src/peaq_os_sdk/analytics/constants.py

  • tracedT-hosts2026-10-24

    evm.peaq.network appears in shipped code (other).

    src/peaq_os_sdk/utils/peaq_provider.py

  • tracedT-hosts2026-10-24

    gas.peaq.network appears in shipped code (other).

    src/peaq_os_sdk/gas_station/faucet.py

  • tracedT-hosts2026-10-24

    mcr-staging.peaq.xyz appears in shipped code (vendor).

    src/peaq_os_sdk/deployments/__init__.py

  • tracedT-hosts2026-10-24

    mcr.peaq.xyz appears in shipped code (vendor).

    src/peaq_os_sdk/deployments/__init__.py

  • tracedT-hosts2026-10-24

    peaq-rpc.example.com appears in shipped code (rpc).

    src/peaq_os_sdk/client.py

  • tracedT-hosts2026-10-24

    pki.infineon.com appears in shipped code (other).

    src/peaq_os_sdk/verify/_internal/certificate_path.py

  • tracedT-hosts2026-10-24

    presigned.example.com appears in shipped code (other).

    src/peaq_os_sdk/stream/types/delivery.py

  • tracedT-hosts2026-10-24

    telemetry.example.com appears in shipped code (other).

    src/peaq_os_sdk/onboarding/activation_types.py

  • tracedT-key-handling2026-10-24

    Turns key material it is GIVEN into an account or signer (Account.from_key(), Account.from_mnemonic()); no read of a key from the environment or a key file was found. A signing library does this.

    src/peaq_os_sdk/client.py:401

  • declaredD-env-key2026-10-24

    Setup names PEAQOS_PRIVATE_KEY as something to provide.

    deploy_spec.requires

  • declaredD-env-key2026-10-24

    Setup names PRIVATE_KEY as something to provide.

    https://pypi.org/project/peaq-os-sdk/0.12.1/#description

Limits

  • The observed lane has not run on this version: not yet run on this version
  • Traced analysis follows flows inside one module and one hop across a relative import; a longer chain is not followed.
  • The observed lane has not run on this version.
  • No tool inventory was available, so fund actions were not read.
  • Traced: Python read line by line, not parsed; 523 code files; read 400, entry points first.

A profile describes what we read and ran, with dates. It is not a safety rating, an audit or an endorsement, and "not found" is not "not there".

sato.custody/v1 · custody-3

Maintain this project? Respond to this reading

Loading sign-in…