← Back to search

@operatorkit/hs

GitHub Actions Scanned 12d ago

HelpScout CLI with embedded MCP server

? Not scanned yet

Versions

0.2.3latest
May 5, 2026
0.2.2
May 5, 2026
0.2.1
May 5, 2026
0.2.0
Mar 6, 2026
0.1.1
Mar 4, 2026
+ show 1 moreshow less
0.1.0
Mar 3, 2026

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: https
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, path
shell high
Server uses shell capabilities via: child_process, spawn()

Scan Findings 33

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: adm-zip@0.5.16 (GHSA-xcpc-8h2w-3j85) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-23hp-3jrh-7fpw) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-34x7-hfp2-rc4v) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-83g3-92jg-28cx) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-8qq5-rm4j-mr97) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-8x88-c5mf-7j5w) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-9ppj-qmqm-q256) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-gvwx-54wh-qm9j) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-qffp-2rhf-9h96) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-r292-9mhp-454m) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-r6q2-hw4h-h46w) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-vmf3-w455-68vh) dependency_analyzer · 95%
medium
Vulnerable dependency: tar@7.4.3 (GHSA-w8wr-v893-vjvp) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.47.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.38.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.31.0 (GO-2026-5970) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Required env vars (15) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
info
SBOM generated: 33 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%