github JavaScript analyzed ac71534

mrrlin-dev/external-agents

v0.44.4
github

One MCP server routes LLM calls across 20+ providers, using round-robin dispatch and fallback to reduce rate-limit interruptions and cut costs up to 100x.

maintainer
mrrlin-dev
licence
MIT
first seen
2026-07-23
last seen
2026-09-17
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 8 tools
transport stdio · http counts 8 tools · 0 res · 0 prompts permission surface via code analysis

tools

  • dispatch
  • get_state
  • get_stats
  • list_agents
  • pick_agents
  • ping
  • probe_agent
  • set_credential
skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit ac71534 · analyzer v33 · 1d ago

danger signals1

code evidence v0.44.4 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 59

filesystem 34

  • fs mrrlin-dev-external-agents-ac71534/cli.js :41 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/cli.audit-disabled.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/cli.edit-smoke.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/cli.require-base.test.js :2 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/lib/credentials.js :18 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/lib/dispatch-log.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch-log.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.cwd.test.js :4 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.disabled-guard.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.failure-log.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.files.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.harness-failure.test.js :4 import fs from "node:fs";
show 22 more
  • fs mrrlin-dev-external-agents-ac71534/lib/dispatch.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.probe-orphan.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.progress.test.js :5 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.provenance.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.tempdir.test.js :2 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/lib/failure-log.js :1 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/failure-log.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/false-success.test.js :2 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/lib/metrics.js :1 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/metrics.test.js :3 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/pool-log-findings.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/probe.disabled-guard.test.js :3 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/lib/registry.js :1 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/registry.sync-clone.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/registry.transports.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/server.dispatch-disabled.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/server.list-agents-enabled.test.js :2 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/server.pick-default-tier.test.js :2 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/lib/state.js :1 import fs from "node:fs";
  • fs (weak) mrrlin-dev-external-agents-ac71534/lib/state.test.js :4 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/server.js :9 import fs from "node:fs";
  • fs mrrlin-dev-external-agents-ac71534/ui.js :4 import fs from "node:fs";

shell / exec 15

  • shell mrrlin-dev-external-agents-ac71534/cli.js :44 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/cli.audit-disabled.test.js :7 import { spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/cli.edit-smoke.test.js :2 import { spawn } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/cli.require-base.test.js :7 import { spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.cwd.test.js :3 import { spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.disabled-guard.test.js :2 import { spawnSync } from "node:child_process";
  • shell mrrlin-dev-external-agents-ac71534/lib/dispatch.js :1 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.probe-orphan.test.js :7 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.progress.test.js :3 import { spawn, spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.provenance.test.js :6 import { spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/pool-log-findings.test.js :7 import { spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/probe.disabled-guard.test.js :2 import { spawnSync } from "node:child_process";
show 3 more
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/registry.sync-clone.test.js :5 import { spawnSync } from "node:child_process";
  • shell mrrlin-dev-external-agents-ac71534/lib/state.js :4 import { spawnSync } from "node:child_process";
  • shell (weak) mrrlin-dev-external-agents-ac71534/lib/state.test.js :7 import { spawnSync } from "node:child_process";

network 5

  • net (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.generate.test.js :2 import http from "node:http";
  • net mrrlin-dev-external-agents-ac71534/lib/dispatch.js :1616 const resp = await fetch(g.url, {
  • net (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.tempdir.test.js :3 import http from "node:http";
  • net (weak) mrrlin-dev-external-agents-ac71534/lib/false-success.test.js :347 import http from "node:http";
  • net mrrlin-dev-external-agents-ac71534/ui.js :2 import http from "node:http";

secrets 1

  • secrets (weak) mrrlin-dev-external-agents-ac71534/lib/dispatch.failure-log.test.js :182 assert.ok(!process.env.MY_ENTRY_API_KEY, "the parent must not hold it — that is the whole point");

tool registrations 8

  • ping mrrlin-dev-external-agents-ac71534/server.js :55
  • list_agents mrrlin-dev-external-agents-ac71534/server.js :63
  • get_state mrrlin-dev-external-agents-ac71534/server.js :71
  • probe_agent mrrlin-dev-external-agents-ac71534/server.js :79
  • set_credential mrrlin-dev-external-agents-ac71534/server.js :88
  • pick_agents mrrlin-dev-external-agents-ac71534/server.js :100
  • dispatch mrrlin-dev-external-agents-ac71534/server.js :137
  • get_stats mrrlin-dev-external-agents-ac71534/server.js :202

install hooks 1

  • postinstall mrrlin-dev-external-agents-ac71534/package.json :17 node scripts/postinstall-banner.mjs || true

declared dependencies 2

  • @modelcontextprotocol/sdk@latest
  • js-yaml@^4