@nimrod-ai/they-dont-sell-gorillas
BMCP server package they-dont-sell-gorillas
Install
agr install @nimrod-ai/they-dont-sell-gorillas --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "they-dont-sell-gorillas", "version": "0.1.0", "private": true, "type": "module", "scripts": { "dev": "next dev", "build": "next build", "start": "next start", "lint": "next lint", "mcp": "node mcp/server.mjs" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.0.0", "cheerio": "^1.0.0-rc.12", "langfuse": "^2.0.0", "next": "^14.2.35", "openai": "^4.56.0", "pg": "^8.11.5", "playwright": "^1.48.0", "react": "18.2.0", "react-dom": "18.2.0", "zod": "^3.23.8" }, "devDependencies": { "autoprefixer": "^10.4.19", "postcss": "^8.4.38", "tailwindcss": "^3.4.7" } }
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-abab180e80102026-08-03