npm JavaScript analyzed 0.1.161-hermes04.20260715040800

@sellable/admin-mcp

v0.1.161-hermes04.20260715040800

npm

Sellable Admin MCP - cross-workspace operations and fulfillment tools

maintainer: csreyes92
license: MIT
first seen: 2026-07-14
last seen: 2026-07-29
releases · 30d: 104
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.1.161-hermes04.20260715040800 · analyzer v28 · 3d ago

skills & prompt files 17

code evidence v0.1.161-hermes04.20260715040800 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 38

filesystem 20

fs package/dist/auth.js :1 import * as fs from "fs";
fs package/dist/customerEvidenceReaderServer.js :2 import { readFileSync } from "node:fs";
fs package/dist/lib/admin-state-lock.mjs :1 import * as fs from "node:fs";
fs package/dist/lib/customerEvidenceLedger.js :2 import { chmodSync, closeSync, constants, existsSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, writeSync, } from "node:fs";
fs package/dist/lib/customerKnowledgeStore.js :2 import { chmodSync, closeSync, constants, existsSync, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeSync, } from "node:fs";
fs package/dist/lib/hermesApprovalPacket.js :2 import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync, } from "node:fs";
fs package/dist/lib/hermesExactPackageLauncher.js :3 import { chmodSync, existsSync, lstatSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, writeFileSync, } from "node:fs";
fs package/dist/server.js :1 import { readFileSync } from "node:fs";
fs package/dist/tools/dashboard.js :1 import * as fs from "fs";
fs package/dist/tools/hermesCustomerToken.js :2 import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, statSync, unlinkSync, writeFileSync, } from "node:fs";
fs package/dist/tools/hermesInternalOnboardingProvisioning.js :2 import { chmodSync, closeSync, existsSync, fsyncSync, linkSync, lstatSync, mkdirSync, openSync, readFileSync, rmSync, unlinkSync, writeSync, } from "node:fs";
fs package/dist/tools/hermesInternalOnboardingSlackCli.js :2 import { existsSync, lstatSync, readFileSync } from "node:fs";
fs package/dist/tools/hermesOnboardingAgent.js :3 import { accessSync, chmodSync, constants, existsSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
fs package/dist/tools/hermesOnboardingLifecycle.js :2 import { chmodSync, closeSync, existsSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, renameSync, rmSync, writeSync, } from "node:fs";
fs package/dist/tools/lightfield.js :3 import { mkdirSync, rmSync, writeFileSync } from "node:fs";
fs package/dist/tools/notionPublisher.js :2 import { existsSync, readFileSync } from "node:fs";
fs package/dist/tools/onboardClientV3Hermes.js :1 import { chmodSync, existsSync, lstatSync, mkdirSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
fs package/dist/tools/onboardingCall.js :1 import { existsSync } from "node:fs";
fs package/dist/tools/resolveInternalOnboardingBinding.js :2 import { closeSync, constants, fstatSync, openSync, readFileSync, } from "node:fs";
fs package/dist/tools/workspace.js :1 import { existsSync } from "node:fs";

shell / exec 6

shell package/dist/lib/admin-state-lock.mjs :5 import * as childProcess from "node:child_process";
shell package/dist/lib/hermesExactPackageLauncher.js :1 import { spawn } from "node:child_process";
shell package/dist/tools/customerEvidence.js :2 import { execFile } from "node:child_process";
shell package/dist/tools/hermesOnboardingAgent.js :2 import { execFile } from "node:child_process";
shell package/dist/tools/lightfield.js :1 import { execFile } from "node:child_process";
shell package/dist/tools/notionPublisher.js :1 import { spawnSync } from "node:child_process";

network 4

net package/dist/api.js :18 const response = await fetch(url, {
net package/dist/tools/dashboard.js :367 const res = await fetch(`https://slack.com/api/${method}`, {
net package/dist/tools/sellable.js :31 const res = await fetch(url, {
net package/dist/tools/workspace.js :155 const res = await fetch(url, {

secrets 1

secrets package/dist/tools/notionPublisher.js :411 browserUseApiKeyConfigured: Boolean(process.env.BROWSER_USE_API_KEY) || envFileHas("BROWSER_USE_API_KEY"),

database 1

db package/dist/db.js :1 import pg from "pg";

install hooks 1

prepack package/package.json :13 npm run build

declared dependencies 7

@modelcontextprotocol/sdk@^1.25.2
@notionhq/client@^5.23.0
pg@^8.20.0
@types/node@^20.0.0
@types/pg@^8.18.0
typescript@^5.0.0
vitest@^4.0.18