npm analyzed 0.1.329

@sellable/mcp

v0.1.329

npm

Sellable MCP server for Claude Code and Codex campaign workflows

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools

transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

no tools enumerated yet for this server.

skills & danger signals npm-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.1.329 · analyzer v18 · 8h ago

code evidence v0.1.329 · npm-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

fs package/dist/auth.js :1 import * as fs from "fs";
fs package/dist/engage-memory.js :1 import * as fs from "fs";
fs package/dist/identity-compiler.js :1 import * as fs from "fs";
fs package/dist/identity-memory.js :1 import * as fs from "fs";
fs package/dist/skills.js :1 import * as fs from "fs";
fs package/dist/tools/content-posts.js :1 import * as fs from "node:fs";
fs package/dist/tools/csv-dnc.js :3 import { readFileSync, statSync } from "node:fs";
fs package/dist/tools/csv-domains.js :3 import { readFileSync, statSync } from "node:fs";
fs package/dist/tools/csv-linkedin.js :3 import { readFileSync, statSync } from "node:fs";
fs package/dist/tools/framework.js :1 import { existsSync, readFileSync } from "fs";
fs package/dist/tools/harvest-jobs.js :1 import * as fs from "node:fs";
fs package/dist/tools/leads.js :1 import { existsSync, readFileSync } from "fs";
fs package/dist/tools/navigation.js :1 import { existsSync, readFileSync } from "fs";
fs package/dist/tools/prompts.js :1 import * as fs from "fs";
fs package/dist/tools/tables.js :2 import { mkdir, writeFile } from "node:fs/promises";
fs package/dist/update-check.js :1 import * as fs from "fs";
fs package/dist/utils/workspace-root.js :1 import { existsSync } from "fs";

shell package/dist/tools/content-posts.js :4 import { execFileSync } from "node:child_process";

net package/dist/api.js :36 const response = await fetch(url, {
net package/dist/tools/cli-login.js :103 res = await fetch(`${apiUrl}/api/v3/cli-session`, {
net package/dist/tools/csv-linkedin.js :978 const uploadResponse = await fetch(uploadContract.signedUrl, {
net package/dist/update-check.js :52 const response = await fetch(`https://registry.npmjs.org/${registryPackagePath(packageName)}/latest`, {