github TypeScript analyzed 2d72d87

webdevcom01-cell/agent-studio

github

visual AI agent builder with multi-agent orchestration, RAG pipeline, MCP/A2A protocols, and continuous learning

maintainer: webdevcom01-cell
license: Apache-2.0
first seen: 2026-06-04
last seen: 2026-07-19
releases · 30d: 0
short id

Drift inferred · capture-to-capture

HIGH 2026-07-29 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio
HIGH 2026-07-18 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio
HIGH 2026-07-15 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio
HIGH 2026-07-02 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio
HIGH 2026-06-28 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio
HIGH 2026-06-26 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio
HIGH 2026-06-24 code analysis flagged committed secret, dynamic code execution in webdevcom01-cell/agent-studio

capabilities 71 tools

transport stdio · streamable-http · http counts 71 tools · 0 res · 0 prompts permission surface via code analysis

tools

as_add_kb_document
as_add_kb_text
as_assign_agent_department
as_chat_with_agent
as_create_agent
as_create_eval_case
as_create_eval_suite
as_delete_agent
as_delete_eval_case
as_delete_eval_suite
as_delete_kb_source
as_diagnose_models
as_export_agent_template
as_find_broken_flows
as_get_agent
as_get_agent_budget
as_get_agent_call_log
as_get_eval_result
as_get_heartbeat_status
as_get_kb_embedding_status
as_get_latest_eval_run
as_get_org_chart
as_get_recent_executions
as_health_check
as_inspect_flow
as_link_goal_to_agent
as_list_agent_calls
as_list_agent_goals
as_list_agents
as_list_eval_cases
as_list_evals
as_list_kb_sources
as_list_knowledge_bases
as_patch_node_field
as_run_eval
as_search_knowledge_base
as_set_agent_budget
as_set_agent_public
as_set_eval_run_on_deploy
as_set_heartbeat_context
as_set_heartbeat_schedule
as_update_agent_model
as_update_agent_prompt
as_update_eval_case
as_update_flow
audit_dependencies
clone_repo
commit_patches
create_branch
create_pr
generate_fix_template
get_finding_detail
get_package_info
get_skill
health
list_files
list_skills
push_branch
railway_get_project
railway_get_variables
railway_inspect_databases
railway_list_environments
railway_list_projects
railway_redeploy_service
railway_set_variables
railway_whoami
read_file
scan_code
search_skills
tool_name
validate_repo

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 2d72d87 · analyzer v33 · 3d ago

skills & prompt files 36

danger signals12

dynamic code execution eval() webdevcom01-cell-agent-studio-2d72d87/src/lib/redis.ts :17 eval(script: string, numkeys: number, ...args: (string | number)[]): Promise<unknown>;
suspicious endpoint 169.254.169.254 (cloud metadata) webdevcom01-cell-agent-studio-2d72d87/src/app/api/mcp-servers/__tests__/mcp-servers.test.ts :207 "http://169.254.169.254/latest/meta-data/",
suspicious endpoint 169.254.169.254 (cloud metadata) webdevcom01-cell-agent-studio-2d72d87/src/lib/evals/__tests__/ssrf-guard.test.ts :32 it("blocks http://169.254.169.254", () => expectBlocked("http://169.254.169.254"));
suspicious endpoint 169.254.169.254 (cloud metadata) webdevcom01-cell-agent-studio-2d72d87/src/lib/knowledge/__tests__/scraper-redirect.test.ts :108 location: "http://169.254.169.254/latest/meta-data/",
suspicious endpoint 169.254.169.254 (cloud metadata) webdevcom01-cell-agent-studio-2d72d87/src/lib/knowledge/__tests__/scraper-ssrf.test.ts :20 <url><loc>http://169.254.169.254/latest/meta-data/</loc></url>
suspicious endpoint 169.254.169.254 (cloud metadata) webdevcom01-cell-agent-studio-2d72d87/src/lib/security/__tests__/ssrf-guard.test.ts :24 "http://169.254.169.254/latest/meta-data/",
suspicious endpoint 8.8.8.8 webdevcom01-cell-agent-studio-2d72d87/src/lib/security/__tests__/ssrf-guard.test.ts :73 expect((await validateMcpUrl("http://8.8.8.8/mcp")).allowed).toBe(true);
suspicious endpoint 169.254.169.254 (cloud metadata) webdevcom01-cell-agent-studio-2d72d87/src/lib/utils/__tests__/url-validation.test.ts :31 const result = validateExternalUrl("http://169.254.169.254/latest/meta-data/");
over-broad OAuth scope gmail.modify webdevcom01-cell-agent-studio-2d72d87/src/app/api/auth/oauth/google-workspace/route.ts :8 "https://www.googleapis.com/auth/gmail.modify",
committed secret Slack token webdevcom01-cell-agent-studio-2d72d87/n8n-workflows/01-slack-bot.json :165 xoxb-Y…(19 chars, redacted)
committed secret OpenAI key webdevcom01-cell-agent-studio-2d72d87/src/lib/versioning/__tests__/post-deploy-verifier.test.ts :215 sk-pro…(29 chars, redacted)
credential in logs credential in log webdevcom01-cell-agent-studio-2d72d87/src/lib/__tests__/logger.test.ts :147 logger.info("test", { apiKey: "secret-key", agentId: "a1" });

code evidence vv0.1.0 · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 1163

filesystem 51

fs webdevcom01-cell-agent-studio-2d72d87/packages/cli/src/utils/env.ts :2 import { existsSync, writeFileSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/playwright.config.ts :2 import { readFileSync } from "fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/create-vulnerable-demo/src/upload.ts :7 import fs from "fs/promises";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/generate-dashboard.ts :9 import * as fs from "fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/lint-vault.mjs :6 import { readdirSync, readFileSync, statSync } from 'node:fs';
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/project-health.mjs :9 import { readdirSync, readFileSync, existsSync } from 'node:fs';
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/restore-rls-passwords.mjs :20 import fs from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/rls-audit.mjs :13 import fs from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/rls-phase1-burndown.mjs :7 import fs from 'node:fs';
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/rls-prove-isolation.mjs :16 import fs from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/set-app-user-password.mjs :14 import fs from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/setup-devops-swarm.mjs :21 import { readFileSync } from "fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/wire-admin-user.mjs :21 import fs from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout.skill!/scripts/classify-models.ts :22 import { readFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout.skill!/scripts/generate-migration.ts :28 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/scripts/generate-migration.ts :28 import { readFileSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/scripts/step1-inventory.ts :30 import { readFileSync, writeFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/scripts/step2-classify.ts :18 import { readFileSync, writeFileSync, existsSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/scripts/step4-isolation-tests.ts :19 import { writeFileSync, mkdirSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/scripts/step5-runbook.ts :20 import { writeFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step0.test.ts :3 import { existsSync, readFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step1.test.ts :2 import { existsSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step2.test.ts :2 import { existsSync, readFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step3.test.ts :2 import { existsSync, readFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step4.test.ts :2 import { existsSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step5.test.ts :2 import { existsSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/app/cli-generator/__tests__/stuck-notification.test.ts :6 import { readFileSync } from "fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/app/embed/__tests__/embed-error.test.ts :7 import { readFileSync } from "fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/__tests__/security-audit.test.ts :9 import { existsSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/agents/agent-workspace.ts :1 import { mkdir, writeFile, readdir, stat, rm } from "node:fs/promises";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/mcp/cli-bridge/cli-discovery.ts :3 import { access, constants } from "node:fs/promises";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/mcp/cli-bridge/cli-security.ts :2 import { access, constants, realpath } from "node:fs/promises";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/queue/__tests__/worker-shutdown.test.ts :8 import { readFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/__tests__/function-handler.test.ts :134 makeNode({ code: 'return require("fs");' }),
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/__tests__/project-context-handler.test.ts :16 import { existsSync, readFileSync, readdirSync } from "fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/file-writer-handler.ts :1 import { mkdirSync, writeFileSync } from "fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/git-node-handler.ts :33 import { existsSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/process-runner-handler.ts :1 import { existsSync, symlinkSync } from "fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/project-context-handler.ts :1 import { readFileSync, readdirSync, existsSync } from "fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/sandbox-verify-handler.ts :1 import { mkdirSync, writeFileSync, rmSync, existsSync } from "fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sandbox/e2b-executor.ts :11 import { readdirSync, readFileSync, statSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/__tests__/code-extractor.test.ts :9 import { readFileSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/__tests__/patch-applier.test.ts :2 import { mkdirSync, writeFileSync, rmSync } from "node:fs";
fs (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/__tests__/pipeline-file-writing.test.ts :9 import { existsSync, readFileSync, rmSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/ast-analyzer.ts :1 import { existsSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/code-extractor.ts :34 import { mkdirSync, writeFileSync, existsSync, rmSync, readdirSync, cpSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/codebase-rag.ts :27 import { readdir, readFile, stat } from "node:fs/promises";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/git-integration.ts :10 import { existsSync, mkdirSync, rmSync, readdirSync, statSync, copyFileSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/orchestrator.ts :27 import { rmSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/patch-applier.ts :1 import { readFileSync, writeFileSync, existsSync } from "node:fs";
fs webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/scope-analyzer.ts :2 import { existsSync, statSync, readdirSync } from "node:fs";

shell / exec 23

shell webdevcom01-cell-agent-studio-2d72d87/packages/cli/src/commands/dev.ts :17 await execa("pnpm", ["dev"], { stdio: "inherit" });
shell webdevcom01-cell-agent-studio-2d72d87/packages/cli/src/commands/init.ts :86 await execa("pnpm", ["install"], { stdio: "pipe" });
shell webdevcom01-cell-agent-studio-2d72d87/packages/cli/src/index.ts :35 await execa("pnpm", ["build"], { stdio: "inherit" });
shell webdevcom01-cell-agent-studio-2d72d87/public/pyodide-worker.js :134 exec(compile(user_code, "<python_code>", "exec"), {"__builtins__": __builtins__}, ns)
shell (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/project-health.mjs :8 import { execSync } from 'node:child_process';
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout.skill!/scripts/generate-migration.ts :30 import { execSync } from "node:child_process";
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step0.test.ts :2 import { execSync } from "node:child_process";
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step1.test.ts :18 const { execSync } = await import("node:child_process");
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step2.test.ts :99 const { execSync } = await import("node:child_process");
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step3.test.ts :119 const { execSync } = await import("node:child_process");
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step4.test.ts :20 const { execSync } = await import("node:child_process");
shell (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout/tests/step5.test.ts :14 const { execSync } = await import("node:child_process");
shell (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/cli-generator/__tests__/ts-validator.test.ts :23 const VALID_BRIDGE_TS = `import { spawnSync } from "child_process";
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/cli-generator/prompts.ts :351 "using spawnSync from 'child_process' (encoding: 'utf-8', timeout). " +
shell (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/lsp/__tests__/lsp-client.test.ts :11 // ─── Mock child_process.spawn ───────────────────────────────────────────────
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/lsp/lsp-client.ts :15 import { spawn, type ChildProcess } from "node:child_process";
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/mcp/cli-bridge/cli-discovery.ts :1 import { execFile } from "node:child_process";
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/mcp/cli-bridge/cli-session-manager.ts :1 import { spawn, type ChildProcess } from "node:child_process";
shell (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/__tests__/verification-commands.test.ts :101 // We mock child_process.execFile via dynamic import
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/git-node-handler.ts :31 import { execFile } from "node:child_process";
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/verification-commands.ts :65 * Run verification commands using child_process.execFile for safety.
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/workers/pyodide-node-worker.js :14 const { spawnSync } = require("child_process");
shell webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/git-integration.ts :8 import { execFile } from "node:child_process";

network 92

net (weak) webdevcom01-cell-agent-studio-2d72d87/benchmarks/rag-benchmark.ts :70 const res = await fetch(`${baseUrl}/api/agents/${agentId}/knowledge/search`, {
net webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/auth.ts :34 const res = await fetch(`${url}/api/keys/validate`, {
net webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :205 response = await fetch(`${config.studioUrl}${path}`, {
net webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/execution.ts :171 const httpResponse = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :40 const res = await fetch(`${env.studioUrl}${path}`, {
net webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :143 response = await fetch(`${config.studioUrl}${path}`, {
net webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/railwayClient.ts :58 res = await fetch(RAILWAY_GRAPHQL_ENDPOINT, {
net (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/create-vulnerable-demo/src/api.ts :12 const response = await fetch(url);
net (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/setup-devops-swarm.mjs :42 const res = await fetch(`${BASE_URL}/api${path}`, {
net webdevcom01-cell-agent-studio-2d72d87/src/app/admin/page.tsx :70 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/app/analytics/page.tsx :117 fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/app/api/auth/oauth/google-workspace/callback/route.ts :80 const tokenRes = await fetch("https://oauth2.googleapis.com/token", {
net webdevcom01-cell-agent-studio-2d72d87/src/app/api/auth/oauth/notion/callback/route.ts :70 const tokenRes = await fetch("https://api.notion.com/v1/oauth/token", {
net webdevcom01-cell-agent-studio-2d72d87/src/app/api/collector/overpass/route.ts :69 const res = await fetch(OVERPASS_ENDPOINT, {
net webdevcom01-cell-agent-studio-2d72d87/src/app/api/collector/places/route.ts :119 const res = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/app/builder/[agentId]/page.tsx :28 const res = await fetch(`/api/agents/${agentId}`);
net webdevcom01-cell-agent-studio-2d72d87/src/app/chat/[agentId]/page.tsx :105 fetch(`/api/agents/${agentId}`)
net webdevcom01-cell-agent-studio-2d72d87/src/app/cli-generator/page.tsx :58 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/app/discover/page.tsx :73 const res = await fetch(`/api/agents/discover?${params}`);
net webdevcom01-cell-agent-studio-2d72d87/src/app/ecc/[agentId]/page.tsx :77 const res = await fetch(url);
net webdevcom01-cell-agent-studio-2d72d87/src/app/ecc/page.tsx :29 const res = await fetch(url);
net webdevcom01-cell-agent-studio-2d72d87/src/app/embed/[agentId]/page.tsx :26 fetch(`/api/agents/${agentId}`)
net webdevcom01-cell-agent-studio-2d72d87/src/app/evals/[agentId]/page.tsx :120 const res = await fetch(`/api/agents/${agentId}/evals`, {
net webdevcom01-cell-agent-studio-2d72d87/src/app/knowledge/[agentId]/page.tsx :86 const res = await fetch(`/api/agents/${agentId}/knowledge/sources`);
net webdevcom01-cell-agent-studio-2d72d87/src/app/memory/[agentId]/page.tsx :37 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/app/onboarding/page.tsx :59 const res = await fetch("/api/agents", {
net webdevcom01-cell-agent-studio-2d72d87/src/app/page.tsx :58 const res = await fetch("/api/agents");
net webdevcom01-cell-agent-studio-2d72d87/src/app/pipelines/[agentId]/page.tsx :36 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/app/register/page.tsx :31 const res = await fetch("/api/auth/register", {
net webdevcom01-cell-agent-studio-2d72d87/src/app/settings/api-keys/page.tsx :75 fetch(url).then((r) => r.json() as Promise<{ success: boolean; data: ApiKeyRecord[] }>);
net webdevcom01-cell-agent-studio-2d72d87/src/app/skills/page.tsx :70 const res = await fetch(`/api/skills?${params}`);
net webdevcom01-cell-agent-studio-2d72d87/src/app/soma/review-queue/[batchId]/page.tsx :60 fetch(url).then((r) => {
net webdevcom01-cell-agent-studio-2d72d87/src/app/soma/review-queue/page.tsx :34 fetch(url).then((r) => {
net webdevcom01-cell-agent-studio-2d72d87/src/app/templates/templates-client.tsx :26 const res = await fetch("/api/agents", {
net webdevcom01-cell-agent-studio-2d72d87/src/app/webhooks/[agentId]/page.tsx :479 const res = await fetch(`/api/agents/${agentId}/webhooks/${webhookId}`, {
net webdevcom01-cell-agent-studio-2d72d87/src/app/webhooks/page.tsx :20 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/a2a/agent-call-monitor.tsx :126 const fetchJson = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/deploy-dialog.tsx :50 const res = await fetch(
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/diff-view.tsx :33 const res = await fetch(
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/flow-builder.tsx :300 fetch(`/api/agents/${agentId}/flow`)
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/nodes/ai-response-node.tsx :16 fetch(`/api/agents/${agentId}/mcp`)
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/nodes/schedule-trigger-node.tsx :38 fetch(`/api/agents/${agentId}/schedules/stats`)
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/nodes/webhook-trigger-node.tsx :39 fetch(`/api/agents/${agentId}/webhooks?nodeId=${id}`)
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/property-panel.tsx :1120 fetch("/api/mcp-servers")
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/trace-history.tsx :72 const res = await fetch(`/api/agents/${agentId}/traces`);
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/use-debug-session.ts :115 const res = await fetch(`/api/agents/${agentId}/traces`, {
net webdevcom01-cell-agent-studio-2d72d87/src/components/builder/version-panel.tsx :41 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/chat/pipeline-progress.tsx :22 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/chat/use-streaming-chat.ts :70 const res = await fetch(`/api/agents/${agentId}/chat`, {
net webdevcom01-cell-agent-studio-2d72d87/src/components/cli-generator/file-viewer.tsx :25 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/cli-generator/mcp-test-panel.tsx :40 const fetcher = (url: string) => fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/dashboard/kpi-row.tsx :41 const res = await fetch(`/api/analytics/summary?period=${p}`);
net webdevcom01-cell-agent-studio-2d72d87/src/components/dashboard/recent-activity.tsx :55 fetch("/api/analytics/activity?limit=8")
net webdevcom01-cell-agent-studio-2d72d87/src/components/evals/eval-suite-editor.tsx :369 const res = await fetch(`/api/agents/${agentId}/evals/${suiteId}/cases`, {
net webdevcom01-cell-agent-studio-2d72d87/src/components/evals/generate-eval-dialog.tsx :109 const res = await fetch(`/api/agents/${agentId}/evals/generate`, {
net webdevcom01-cell-agent-studio-2d72d87/src/components/layout/command-palette.tsx :80 fetch("/api/agents")
net webdevcom01-cell-agent-studio-2d72d87/src/components/mcp/agent-mcp-selector.tsx :37 fetch(url).then((r) => r.json());
net webdevcom01-cell-agent-studio-2d72d87/src/components/mcp/mcp-server-manager.tsx :77 fetch(url).then((r) => r.json());
net (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/__tests__/cross-phase-integration.test.ts :689 const res = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/audio/stt-providers.ts :42 const response = await fetch("https://api.openai.com/v1/audio/transcriptions", {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/audio/tts-providers.ts :35 const response = await fetch("https://api.openai.com/v1/audio/speech", {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/ecc/obsidian-adapter.ts :101 return fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/evals/runner.ts :266 const response = await fetch(`${baseUrl}/api/agents/${agentId}/chat`, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/evals/ssrf-guard.ts :1 import * as net from "net";
net webdevcom01-cell-agent-studio-2d72d87/src/lib/google-workspace/token.ts :57 const res = await fetch("https://oauth2.googleapis.com/token", {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/google-workspace/tools.ts :271 const res = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/image/preprocessor.ts :30 const response = await fetch(input, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/image/providers.ts :40 const response = await fetch("https://api.openai.com/v1/images/generations", {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/knowledge/parsers.ts :51 const response = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/knowledge/reranker.ts :37 const response = await fetch(COHERE_API_URL, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/knowledge/scraper.ts :82 const response = await fetch(robotsUrl, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/mcp/task-client.ts :26 const response = await fetch(`${serverUrl}/tasks`, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/notifications/sinks.ts :34 const response = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/observability/metrics.ts :89 await fetch(`${OTEL_ENDPOINT}/v1/metrics`, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/observability/tracer.ts :183 const res = await fetch(`${OTEL_ENDPOINT}/v1/traces`, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/queue/worker.ts :783 const res = await fetch(webhookUrl, {
net (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/__tests__/hooks-integration.test.ts :13 import * as http from "node:http";
net (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/__tests__/ast-transform-handler.test.ts :210 const node = makeNode({ source: MOCK_SOURCE, pattern: "fetch($URL)" });
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/api-call-handler.ts :39 const response = await fetch(url, fetchOptions);
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/call-agent-handler.ts :712 const cardRes = await fetch(cardUrl, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/deploy-trigger-handler.ts :91 const deployRes = await fetch("https://api.vercel.com/v13/deployments", {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/email-send-handler.ts :133 const response = await fetch(resolvedWebhookUrl, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/git-node-handler.ts :181 const tokenCheck = await fetch(`${GITHUB_API}/user`, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/web-fetch-handler.ts :11 const response = await fetch(`${JINA_BASE_URL}${url}`, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/web-search-handler.ts :211 const response = await fetch(url.toString(), {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/webhook-handler.ts :42 const response = await fetch(url, fetchOptions);
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/hooks.ts :28 fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/session-events.ts :196 await fetch(config.webhookUrl, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/scheduler/failure-notify.ts :137 const response = await fetch(url, {
net webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/git-integration.ts :185 const listRes = await fetch(
net webdevcom01-cell-agent-studio-2d72d87/src/lib/security/ssrf-guard.ts :22 import { isIP } from "node:net";
net webdevcom01-cell-agent-studio-2d72d87/src/lib/storage/gdrive-provider.ts :14 const response = await fetch(url, {

secrets 48

secrets (weak) webdevcom01-cell-agent-studio-2d72d87/e2e/global.setup.ts :20 const sessionToken = process.env.E2E_SESSION_TOKEN;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/e2e/scripts/generate-ci-session.ts :33 const AUTH_SECRET: string = process.env.AUTH_SECRET ?? "";
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/__tests__/diagnostics.test.ts :5 const ORIGINAL = process.env.TEST_DIAG_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/auth.ts :13 if (process.env.AGENT_STUDIO_API_KEY && process.env.AGENT_STUDIO_URL) {
secrets webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/index.ts :61 const apiKey = process.env.MCP_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :165 const apiKey = process.env.AGENT_STUDIO_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/execution.ts :57 const apiKey = process.env.AGENT_STUDIO_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :30 const apiKey = process.env.AGENT_STUDIO_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :96 const apiKey = process.env.AGENT_STUDIO_API_KEY;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/next.config.ts :97 disable: !process.env.SENTRY_AUTH_TOKEN,
secrets webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/index.ts :23 if (!process.env.RAILWAY_TOKEN) {
secrets webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/railwayClient.ts :28 const token = process.env.RAILWAY_TOKEN;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/create-vulnerable-demo/src/config.ts :19 stripeKey: "sk_live_DEMO_PLACEHOLDER_NOT_REAL", // CWE-798: use process.env.STRIPE_KEY
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/encrypt-webhook-secrets.mjs :16 const raw = process.env.WEBHOOK_ENCRYPTION_KEY;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/rls-prove-isolation.mjs :37 const pw = process.env.APP_USER_PASSWORD;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/set-app-user-password.mjs :33 const appPw = process.env.APP_USER_PASSWORD;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/wire-admin-user.mjs :37 const adminPw = process.env.ADMIN_USER_PASSWORD;
secrets webdevcom01-cell-agent-studio-2d72d87/src/app/api/auth/oauth/google-workspace/callback/route.ts :67 const clientSecret = process.env.GOOGLE_WORKSPACE_CLIENT_SECRET;
secrets webdevcom01-cell-agent-studio-2d72d87/src/app/api/auth/oauth/notion/callback/route.ts :59 const clientSecret = process.env.NOTION_CLIENT_SECRET;
secrets webdevcom01-cell-agent-studio-2d72d87/src/app/api/collector/places/route.ts :11 * Ključ se čita iz process.env.GOOGLE_PLACES_API_KEY. Opciono, klijent
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/app/api/ecc/ingest-skills/__tests__/route.test.ts :53 CRON_SECRET: process.env.CRON_SECRET || undefined,
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/app/api/skills/evolve/__tests__/route.test.ts :50 CRON_SECRET: process.env.CRON_SECRET || undefined,
secrets webdevcom01-cell-agent-studio-2d72d87/src/instrumentation.ts :37 if (!process.env.CRON_SECRET) {
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/__tests__/auth-adapter.test.ts :29 const originalKey = process.env.OAUTH_ENCRYPTION_KEY;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/__tests__/crypto.test.ts :8 const originalEnv = process.env.WEBHOOK_ENCRYPTION_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/api/auth-guard.ts :305 const secret = process.env.CRON_SECRET;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/audio/stt-providers.ts :29 const apiKey = process.env.OPENAI_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/audio/tts-providers.ts :32 const apiKey = process.env.OPENAI_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/auth.ts :32 const clientSecret = process.env.AUTH_OIDC_CLIENT_SECRET;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/ecc/__tests__/obsidian-adapter.test.ts :29 const origToken = process.env.OBSIDIAN_GITHUB_TOKEN;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/ecc/obsidian-adapter.ts :54 const token = process.env.OBSIDIAN_GITHUB_TOKEN;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/email/client.ts :23 const apiKey = process.env.RESEND_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/google-workspace/token.ts :51 const clientSecret = process.env.GOOGLE_WORKSPACE_CLIENT_SECRET;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/image/providers.ts :35 const apiKey = process.env.OPENAI_API_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/knowledge/reranker.ts :23 const apiKey = process.env.COHERE_API_KEY;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/__tests__/git-node-handler.test.ts :85 process.env.GITHUB_TOKEN = "ghp_testtoken";
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/deploy-trigger-handler.ts :42 const vercelToken = process.env.VERCEL_TOKEN;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/git-node-handler.ts :79 const token = process.env.GITHUB_TOKEN ?? process.env.GITHUB_PAT;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/web-search-handler.ts :55 const tavilyKey = process.env.TAVILY_API_KEY;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sandbox/__tests__/e2b-executor.test.ts :58 process.env.E2B_API_KEY = "test-key";
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sandbox/e2b-executor.ts :84 const apiKey = process.env.E2B_API_KEY;
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sandbox/js-sandbox.ts :29 return Boolean(process.env.E2B_API_KEY);
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/__tests__/git-integration.test.ts :118 delete process.env.GITLAB_TOKEN;
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/code-extractor.ts :310 if (process.env.E2B_API_KEY) {
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/sdlc/git-integration.ts :290 ? (process.env.GITLAB_TOKEN ?? process.env.GITLAB_PAT)
secrets webdevcom01-cell-agent-studio-2d72d87/src/lib/storage/s3-provider.ts :18 secretAccessKey: process.env.AWS_SECRET_ACCESS_KEY ?? "",
secrets (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/webhooks/__tests__/verify.test.ts :233 const originalKey = process.env.WEBHOOK_ENCRYPTION_KEY;
secrets webdevcom01-cell-agent-studio-2d72d87/src/middleware.ts :153 if (process.env.AUTH_SECRET) {

database 9

db webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/db.ts :8 import pg from "pg";
db (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/restore-rls-passwords.mjs :23 const { Client } = require("pg");
db (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/rls-audit.mjs :16 const { Client } = require("pg");
db (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/rls-prove-isolation.mjs :19 const { Client } = require("pg");
db (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/set-app-user-password.mjs :17 const { Client } = require("pg");
db (weak) webdevcom01-cell-agent-studio-2d72d87/scripts/wire-admin-user.mjs :24 const { Client } = require("pg");
db (weak) webdevcom01-cell-agent-studio-2d72d87/skills/rls-rollout.skill!/tests/_helpers/get-rls-client.ts :11 import { PrismaClient, Prisma } from "@prisma/client";
db (weak) webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/__tests__/sandbox-verify-handler.test.ts :68 makeContext({ generatedCode: 'import { PrismaClient } from "@prisma/client";\n' }),
db webdevcom01-cell-agent-studio-2d72d87/src/lib/runtime/handlers/code-review-handler.ts :43 - Import from '@/generated/prisma', never from '@prisma/client'

tool registrations 72

as_get_agent_call_log webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/a2a.ts :98
as_list_agent_calls webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/a2a.ts :163
as_list_agents webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/agents.ts :93
as_get_agent webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/agents.ts :158
as_inspect_flow webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/agents.ts :225
as_get_recent_executions webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/agents.ts :284
as_diagnose_models webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/diagnostics.ts :61
as_health_check webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/diagnostics.ts :167
as_find_broken_flows webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/diagnostics.ts :212
as_list_evals webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :374
as_run_eval webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :438
as_get_eval_result webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :502
as_create_eval_case webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :589
as_create_agent webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :653
as_create_eval_suite webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :713
as_set_eval_run_on_deploy webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :771
as_get_latest_eval_run webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :825
as_delete_eval_suite webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :876
as_list_eval_cases webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :953
as_update_eval_case webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :1002
as_delete_eval_case webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/evals.ts :1081
as_chat_with_agent webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/execution.ts :109
as_get_agent_budget webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :74
as_set_agent_budget webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :98
as_get_org_chart webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :127
as_assign_agent_department webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :151
as_list_agent_goals webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :176
as_link_goal_to_agent webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :200
as_get_heartbeat_status webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :226
as_set_heartbeat_context webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :250
as_export_agent_template webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :284
as_set_heartbeat_schedule webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/f1-f7.ts :322
as_list_knowledge_bases webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :212
as_search_knowledge_base webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :294
as_add_kb_document webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :350
as_add_kb_text webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :405
as_get_kb_embedding_status webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :464
as_delete_kb_source webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :547
as_list_kb_sources webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/knowledge.ts :628
as_update_agent_model webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/mutations.ts :58
as_set_agent_public webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/mutations.ts :134
as_patch_node_field webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/mutations.ts :188
as_update_agent_prompt webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/mutations.ts :265
as_delete_agent webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/mutations.ts :332
as_update_flow webdevcom01-cell-agent-studio-2d72d87/mcp-server/src/tools/mutations.ts :450
railway_whoami webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :61
railway_list_projects webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :85
railway_get_project webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :119
railway_list_environments webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :164
railway_get_variables webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :200
railway_inspect_databases webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :239
railway_set_variables webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :340
railway_redeploy_service webdevcom01-cell-agent-studio-2d72d87/railway-mcp-server/src/tools.ts :391
get_skill webdevcom01-cell-agent-studio-2d72d87/services/ecc-skills-mcp/main.py :40
search_skills webdevcom01-cell-agent-studio-2d72d87/services/ecc-skills-mcp/main.py :52
list_skills webdevcom01-cell-agent-studio-2d72d87/services/ecc-skills-mcp/main.py :69
validate_repo webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :102
clone_repo webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :147
list_files webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :211
read_file webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :264
create_branch webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :307
commit_patches webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :357
push_branch webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :435
create_pr webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :480
get_package_info webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :545
health webdevcom01-cell-agent-studio-2d72d87/services/gh-bridge-mcp/main.py :587
audit_dependencies webdevcom01-cell-agent-studio-2d72d87/services/security-scanner-mcp/main.py :62
scan_code webdevcom01-cell-agent-studio-2d72d87/services/security-scanner-mcp/main.py :170
get_finding_detail webdevcom01-cell-agent-studio-2d72d87/services/security-scanner-mcp/main.py :301
generate_fix_template webdevcom01-cell-agent-studio-2d72d87/services/security-scanner-mcp/main.py :349
health webdevcom01-cell-agent-studio-2d72d87/services/security-scanner-mcp/main.py :435
tool_name webdevcom01-cell-agent-studio-2d72d87/src/lib/cli-generator/prompts.ts :385

declared dependencies 91

@ai-sdk/anthropic@^3.0.71
@ai-sdk/deepseek@^2.0.29
@ai-sdk/google@^3.0.64
@ai-sdk/groq@^3.0.35
@ai-sdk/mcp@^1.0.36
@ai-sdk/mistral@^3.0.30
@ai-sdk/openai@^3.0.53
@ast-grep/napi@^0.42.1
@asteasolutions/zod-to-openapi@^7.3.4
@auth/core@^0.34.3
@auth/prisma-adapter@^2.11.2
@aws-sdk/client-s3@^3.1038.0
@aws-sdk/s3-request-presigner@^3.1038.0
@e2b/code-interpreter@^2.4.0
@fal-ai/client@^1.10.0
@prisma/adapter-pg@^6.19.3
@prisma/client@^6.19.3
@radix-ui/react-dialog@^1.1.15
@radix-ui/react-dropdown-menu@^2.1.16
@radix-ui/react-label@^2.1.8
@radix-ui/react-select@^2.2.6
@radix-ui/react-slot@^1.2.4
@radix-ui/react-tabs@^1.1.13
@radix-ui/react-tooltip@^1.2.8
@sentry/nextjs@^9.47.1
@tavily/core@^0.7.2
@xyflow/react@^12.10.2
ai@^6.0.168
archiver@^7.0.1
bcryptjs@^2.4.3
better-sqlite3@^12.9.0
bullmq@^5.76.2
cheerio@^1.2.0
class-variance-authority@^0.7.1
clsx@^2.1.1
cron-parser@^5.5.0
cronstrue@^2.60.0
exceljs@^4.4.0
ioredis@^5.10.1
jszip@^3.10.1
lucide-react@^0.577.0
mammoth@^1.12.0
motion@^12.38.0
mysql2@^3.22.3
next@15.5.18
next-auth@5.0.0-beta.31
openapi3-ts@^4.5.0
pdf-parse@^1.1.1
pg@^8.18.0
picomatch@^4.0.4
prisma@^6.19.3
radix-ui@^1.4.3
react@^19.2.5
react-dom@^19.2.5
react-markdown@^10.1.0
recharts@^3.8.1
remark-gfm@^4.0.1
resend@^4.8.0
sharp@^0.34.5
sonner@^1.7.4
swr@^2.4.1
tailwind-merge@^3.3.0
tiktoken@^1.0.22
ts-morph@^28.0.0
vitest@^3.2.6
zod@^3.24.4
@eslint/eslintrc@^3.3.5
@playwright/mcp@^0.0.71
@playwright/test@^1.59.1
@tailwindcss/postcss@^4.2.4
@testing-library/jest-dom@^6.9.1
@testing-library/react@^16.3.2
@types/archiver@^7.0.0
@types/bcryptjs@^2.4.6
@types/better-sqlite3@^7.6.13
@types/jszip@^3.4.1
@types/node@^22.19.15
@types/pg@^8.20.0
@types/picomatch@^4.0.3
@types/react@^19.1.0
@types/react-dom@^19.1.0
@types/sharp@^0.32.0
@vitejs/plugin-react@^5.2.0
@vitest/coverage-v8@^3.2.4
eslint@^9.39.4
eslint-config-next@^15.5.15
jsdom@^28.1.0
postcss@^8.5.12
tailwindcss@^4.2.4
tsx@^4.19.4
typescript@^5.8.3

perm:untrusted 17

untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/admin/page.tsx :70 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/analytics/page.tsx :117 fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/cli-generator/page.tsx :58 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/memory/[agentId]/page.tsx :37 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/pipelines/[agentId]/page.tsx :36 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/settings/api-keys/page.tsx :75 fetch(url).then((r) => r.json() as Promise<{ success: boolean; data: ApiKeyRecord[] }>);
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/soma/review-queue/[batchId]/page.tsx :60 fetch(url).then((r) => {
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/soma/review-queue/page.tsx :34 fetch(url).then((r) => {
untrusted webdevcom01-cell-agent-studio-2d72d87/src/app/webhooks/page.tsx :20 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/a2a/agent-call-monitor.tsx :126 const fetchJson = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/builder/property-panel.tsx :7127 fetch(url).then((r) => r.json() as Promise<SdkSessionListResponse>);
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/builder/version-panel.tsx :41 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/chat/pipeline-progress.tsx :22 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/cli-generator/file-viewer.tsx :25 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/cli-generator/mcp-test-panel.tsx :40 const fetcher = (url: string) => fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/mcp/agent-mcp-selector.tsx :37 fetch(url).then((r) => r.json());
untrusted webdevcom01-cell-agent-studio-2d72d87/src/components/mcp/mcp-server-manager.tsx :77 fetch(url).then((r) => r.json());