npm JavaScript analyzed 0.1.443-wip.phase158.20260729151410
@sellable/install
v0.1.443-wip.phase158.20260729151410One-command installer for Sellable MCP in Claude Code, Codex, and Hermes
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 31
filesystem 23
- fs package/bin/sellable-agent-egress-proxy.mjs :3
import { lstatSync, readFileSync } from "node:fs"; - fs package/bin/sellable-agent-host-bootstrap.mjs :3
import { lstatSync, readFileSync } from "node:fs"; - fs package/bin/sellable-agent-runtime-helper.mjs :3
import { closeSync, constants, fstatSync, lstatSync, openSync, readFileSync } from "node:fs"; - fs package/bin/sellable-agent-runtime-launcher.mjs :10
} from "node:fs"; - fs package/bin/sellable-agent-runtime-probe.mjs :4
import { lstatSync, readFileSync } from "node:fs"; - fs package/bin/sellable-agent-sandbox-init.mjs :4
import { closeSync, constants, fstatSync, openSync, unlinkSync } from "node:fs"; - fs package/bin/sellable-install.mjs :14
} from "node:fs"; - fs package/lib/sellable-agent/containment-contract.mjs :9
} from "node:fs"; - fs package/lib/sellable-agent/external-runtime-builder.mjs :14
} from "node:fs"; - fs package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs :23
} from "node:fs"; - fs package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs :16
} from "node:fs"; - fs package/lib/sellable-agent/fly-customer-worker.mjs :14
} from "node:fs"; - fs package/lib/sellable-agent/fly-runtime-identity.mjs :19
} from "node:fs"; - fs package/lib/sellable-agent/hermes-bridge.mjs :16
} from "node:fs"; - fs package/lib/sellable-agent/host-bootstrap.mjs :23
} from "node:fs"; - fs package/lib/sellable-agent/host-worker.mjs :23
} from "node:fs"; - fs package/lib/sellable-agent/mcp-context-proxy.mjs :23
} from "node:fs"; - fs package/lib/sellable-agent/profile-materializer.mjs :17
} from "node:fs"; - fs package/lib/sellable-agent/provisioning-adapter.mjs :15
} from "node:fs"; - fs package/lib/sellable-agent/runtime-boundary.mjs :8
} from "node:fs"; - fs package/lib/sellable-agent/runtime-egress-proxy.mjs :7
import { lstatSync, readFileSync, readlinkSync } from "node:fs"; - fs package/lib/sellable-agent/runtime-helper.mjs :5
} from "node:fs"; - fs package/lib/sellable-agent/service-installer.mjs :6
} from "node:fs";
shell / exec 10
- shell package/bin/sellable-agent-runtime-launcher.mjs :3
import { spawn, spawnSync } from "node:child_process"; - shell package/bin/sellable-agent-runtime-probe.mjs :3
import { spawn } from "node:child_process"; - shell package/bin/sellable-agent-sandbox-init.mjs :3
import { spawn } from "node:child_process"; - shell package/bin/sellable-install.mjs :2
import { spawnSync } from "node:child_process"; - shell package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs :3
import { spawn } from "node:child_process"; - shell package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs :3
import { spawn } from "node:child_process"; - shell package/lib/sellable-agent/fly-runtime-identity.mjs :1
import { execFile } from "node:child_process"; - shell package/lib/sellable-agent/mcp-context-proxy.mjs :9
import { spawn } from "node:child_process"; - shell package/lib/sellable-agent/provisioning-adapter.mjs :1
import { spawn } from "node:child_process"; - shell package/lib/sellable-agent/service-installer.mjs :2
import { spawnSync } from "node:child_process";
network 5
- net package/lib/sellable-agent/fly-admin-image/admin-runtime.mjs :430
const response = await fetch(`${ORIGIN}${path}`, { - net package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs :787
const slackResponse = await fetch(`${slackApiOrigin()}/api/auth.test`, { - net package/lib/sellable-agent/fly-runtime-identity.mjs :262
const response = await fetch(endpoint, { - net package/lib/sellable-agent/runtime-egress-proxy.mjs :3
import { createServer as createHttpServer } from "node:http"; - net package/lib/sellable-agent/runtime-helper.mjs :7
import { createConnection } from "node:net";
secrets 3
- secrets package/bin/sellable-install.mjs :326
token: process.env.SELLABLE_TOKEN || "", - secrets package/lib/runtime-verify.mjs :178
process.env.SELLABLE_TOKEN, - secrets package/lib/sellable-agent/fly-customer-image/customer-runtime.mjs :55
const CUSTOMER_KEY = process.env.SELLABLE_AGENT_CUSTOMER_KEY ?? "";
install hooks 1
- prepublishOnly package/package.json :18
node scripts/sync-skill-templates.mjs && cd ../.. && npm run validate:sellable-skills
declared dependencies 2
- @modelcontextprotocol/sdk@^1.25.2
- yaml@^2.8.1