github TypeScript analyzed bf1c066

brandonkramer/trelly

github

Trello CLI + MCP server with multi-profile auth. JSON output for scripts and AI agents.

maintainer
brandonkramer
license
first seen
2026-07-03
last seen
2026-07-19
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 30 tools
transport stdio · http counts 30 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • trello_api_get
  • trello_api_mutate
  • trello_board_archive
  • trello_board_context
  • trello_board_create
  • trello_boards_list
  • trello_card_add_label
  • trello_card_archive
  • trello_card_attachment_add
  • trello_card_attachment_delete
  • trello_card_comment_create
  • trello_card_comment_delete
  • trello_card_comment_update
  • trello_card_context
  • trello_card_create
  • trello_card_delete
  • trello_card_move
  • trello_card_update
  • trello_checklist_add_item
  • trello_checklist_create
  • trello_label_create
  • trello_list_cards
  • trello_list_create
  • trello_member_me
  • trello_profiles_list
  • trello_resolve
  • trello_search
  • trello_webhook_create
  • trello_webhook_delete
  • trello_webhooks_list
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit bf1c066 · analyzer v33 · 2w ago

skills & prompt files 3

code evidence vv0.3.9 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 65

filesystem 12

  • fs brandonkramer-trelly-bf1c066/bin/launch-cursor-mcp.mjs :7 import { existsSync, readdirSync, statSync } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/auth/profiles.ts :1 import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
  • fs (weak) brandonkramer-trelly-bf1c066/src/cli/cache.test.ts :2 import { mkdtempSync, rmSync } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/cli/cache.ts :13 } from "node:fs";
  • fs (weak) brandonkramer-trelly-bf1c066/src/install.test.ts :13 } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/install.ts :9 } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/sync-plugin-versions.ts :2 import { readFileSync, writeFileSync } from "node:fs";
  • fs (weak) brandonkramer-trelly-bf1c066/src/update.test.ts :9 } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/update.ts :10 } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/util/attachment.ts :1 import { readFileSync } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/util/exec-path.ts :1 import { accessSync, constants, existsSync, lstatSync } from "node:fs";
  • fs brandonkramer-trelly-bf1c066/src/version.ts :1 import { readFileSync } from "node:fs";

shell / exec 5

  • shell brandonkramer-trelly-bf1c066/bin/launch-cursor-mcp.mjs :6 import { spawn } from "node:child_process";
  • shell (weak) brandonkramer-trelly-bf1c066/src/install.test.ts :2 import { spawnSync } from "node:child_process";
  • shell brandonkramer-trelly-bf1c066/src/sync-plugin-versions.ts :1 import { spawnSync } from "node:child_process";
  • shell brandonkramer-trelly-bf1c066/src/update.ts :1 import { spawn } from "node:child_process";
  • shell brandonkramer-trelly-bf1c066/src/util/runtime.ts :1 import { spawn } from "node:child_process";

network 3

  • net brandonkramer-trelly-bf1c066/src/api/http.ts :52 const res = await fetch(url, {
  • net brandonkramer-trelly-bf1c066/src/auth/browser-flow.ts :2 import { createServer, type Server } from "node:http";
  • net brandonkramer-trelly-bf1c066/src/update.ts :152 const response = await fetch(REGISTRY_LATEST, {

secrets 2

  • secrets brandonkramer-trelly-bf1c066/src/auth/profiles.ts :66 const envKey = process.env.TRELLO_API_KEY;
  • secrets brandonkramer-trelly-bf1c066/src/cli/commands/auth.ts :187 hasAppApiKey: Boolean(config.appApiKey ?? process.env.TRELLO_APP_API_KEY),

tool registrations 30

  • trello_api_get brandonkramer-trelly-bf1c066/src/mcp/tools/api.ts :15
  • trello_api_mutate brandonkramer-trelly-bf1c066/src/mcp/tools/api.ts :34
  • trello_boards_list brandonkramer-trelly-bf1c066/src/mcp/tools/boards.ts :50
  • trello_board_create brandonkramer-trelly-bf1c066/src/mcp/tools/boards.ts :88
  • trello_board_archive brandonkramer-trelly-bf1c066/src/mcp/tools/boards.ts :114
  • trello_board_context brandonkramer-trelly-bf1c066/src/mcp/tools/boards.ts :127
  • trello_card_create brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :50
  • trello_card_update brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :78
  • trello_card_move brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :98
  • trello_card_comment_create brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :118
  • trello_card_comment_update brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :135
  • trello_card_comment_delete brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :153
  • trello_card_archive brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :170
  • trello_card_delete brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :183
  • trello_card_context brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :197
  • trello_card_attachment_add brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :281
  • trello_card_attachment_delete brandonkramer-trelly-bf1c066/src/mcp/tools/cards.ts :299
  • trello_checklist_create brandonkramer-trelly-bf1c066/src/mcp/tools/checklists.ts :12
  • trello_checklist_add_item brandonkramer-trelly-bf1c066/src/mcp/tools/checklists.ts :29
  • trello_label_create brandonkramer-trelly-bf1c066/src/mcp/tools/labels.ts :12
  • trello_card_add_label brandonkramer-trelly-bf1c066/src/mcp/tools/labels.ts :32
  • trello_list_create brandonkramer-trelly-bf1c066/src/mcp/tools/lists.ts :15
  • trello_list_cards brandonkramer-trelly-bf1c066/src/mcp/tools/lists.ts :35
  • trello_profiles_list brandonkramer-trelly-bf1c066/src/mcp/tools/profiles.ts :14
  • trello_member_me brandonkramer-trelly-bf1c066/src/mcp/tools/profiles.ts :50
  • trello_resolve brandonkramer-trelly-bf1c066/src/mcp/tools/resolve.ts :77
  • trello_search brandonkramer-trelly-bf1c066/src/mcp/tools/search.ts :13
  • trello_webhooks_list brandonkramer-trelly-bf1c066/src/mcp/tools/webhooks.ts :15
  • trello_webhook_create brandonkramer-trelly-bf1c066/src/mcp/tools/webhooks.ts :28
  • trello_webhook_delete brandonkramer-trelly-bf1c066/src/mcp/tools/webhooks.ts :52

install hooks 2

  • postinstall (suspicious) brandonkramer-trelly-bf1c066/package.json :55 node -e "try{const{chmodSync}=require('fs');for(const f of['bin/trelly','bin/trelly-mcp','bin/run-ts','bin/launch-cursor-mcp.mjs','bin/install-cursor-plugin-local.sh']){try{chmodSync(f,0o755)}catch{}}
  • prepublishOnly brandonkramer-trelly-bf1c066/package.json :56 bun run typecheck && bun test && bun run lint

declared dependencies 10

  • @modelcontextprotocol/sdk@^1.29.0
  • commander@^15.0.0
  • ink@^7.1.0
  • react@^19.2.7
  • tsx@^4.22.5
  • zod@^4.4.3
  • @biomejs/biome@^2.5.2
  • @types/node@^26.1.0
  • @types/react@^19.2.17
  • typescript@^6.0.3