registry / @bridge_gpt/mcp-server / 0.2.16

@bridge_gpt/mcp-server@0.2.16

Bridge API MCP server — exposes Jira endpoints as MCP tools for Claude Code agents

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 114 file(s), 3.63 MB of source, external domains: astral.sh, bridge-test.atlassian.net, bridgegpt-api.com, cursor.com, example.com, git-scm.com, registry.npmjs.org, schemas.microsoft.com, worktrunk.dev, www.apple.com

Source & flagged code

7 flagged

public/js/main.min.jsView file

Lines 1-2javascript

1(()=>{"use strict";var e={406(){},743(){},883(){},310(){},941(){},764(){},619(){},436(){},328(){},246(e,t,n){n.d(t,{VB:()=>a,mg:()=>i,ri:()=>s});var o=n(723),r=n(579);async function i(e){e.preventDefault();const t=document.getElementById("client-id").value,n=document.getElementById("auth-token").value;if(!t||!n)return void(0,r.to)("Missing Fields","Please enter both Client ID and Authentication Token.");(0,o.Cs)();let i=null;try{i=await(0,o.H2)("/auth/token","POST",{client_id:t,auth_token:n})}catch(e){return console.error("Error during apiCall in handleLogin:",e),void(0,r.to)("Login Failed",(0 ...

Medium

Secret Pattern

Package contains a possible secret pattern.

public/js/main.min.jsView on unpkg · L1

2//# sourceMappingURL=main.min.js.map

Long lines were clipped for display.

build/agent-capabilities/default-deps.jsView file

Lines 1-30javascript

1/**

2 * Production deps for the `agent-capabilities` toolkit: real subprocesses, temp

3 * dirs, and clock. Subprocess execution uses `execFile` (list-based, never

4 * `shell: true`) and forwards an `AbortSignal` with `killSignal: "SIGKILL"` so the

5 * timeout guard in `probe-context.ts` can actually kill a hung agent (the

High

Shell

Package source references shell execution.

build/agent-capabilities/default-deps.jsView on unpkg · L3

6 * version-sensitive `cursor-agent -p` non-exit bug) instead of leaking it.

7 *

8 * Mirrors `createDefaultScheduleRunDeps()` in `schedule-run.ts`, adding the temp-dir

build/scheduler-backends/launchd.jsView file

Lines 33-73javascript

33 if (base)

34 return base.slice(0, -".plist".length);

35 }

36 return launchdLabelForId(metadata.id);

37}

38/** `~/Library/LaunchAgents/<label>.plist` for a schedule id. */

39export function

build/index.jsView file

13095"update-ticket-rewrite.md": "Rewrite the Jira ticket description for {ticket_key} using the generated clarifying questions and critique documents.\n\n1. Fetch the current ticket de... L13096: "upload-and-track.md": 'Step-10 umbrella upload instruction. Idempotently create the Jira ticket(s) for this run, attach the full draft(s), and call `track_ticket`.\n\n## Inputs\n\... L13097: "upload-epic-hierarchy.md": 'Standalone Epic upload protocol. Use as the detailed reference for the Epic path triggered from `upload-and-track.md`.\n\n## Inputs\n\n- Run manifest: ... ... L13104: // src/readme.generated.ts L13105: var README = '# @bridge_gpt/mcp-server\n\nThe Bridge MCP is an end-to-end accelerator for shipping code within SFCC, powered by [Bridge API](https://bridgegpt-api.com). Works with ... L13106:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.jsView on unpkg · L13095

24for (let i = 0; i < value.length; i++) { L25: const code = value.charCodeAt(i); L26: if (code <= 31 || code === 127) return true; ... L287: } L288: if (result.exitCode !== 0) { L289: const reason = (result.stderr || result.stdout || "").trim(); ... L337: } L338: return path6.join(deps.homedir(), ".config", "bridge", "credentials.json"); L339: } ... L364: if ((statResult.mode & 63) !== 0) { L365: const write = stderr ?? ((m) => process.stderr.write(`${m} L366: `));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L24

build/conductor/redaction.jsView file

Lines 36-76javascript

37/** `key: "value"` / `key = "value"` — preserve the key + quotes, redact the value. */

38const ASSIGNMENT_QUOTED = new RegExp(`\\b(${ASSIGNMENT_KEYS})(\\s*[:=]\\s*)("|')[^"']*("|')`, "gi");

Source & flagged code

7 flagged · loading source

public/js/main.min.jsView file

1patternName = generic_password severity = medium line = 1 matchedText = (()=>{"u...)();

Medium

Secret Pattern

Package contains a possible secret pattern.

public/js/main.min.jsView on unpkg · L1

build/agent-capabilities/default-deps.jsView file

10*/ L11: import { execFile } from "node:child_process"; L12: import { mkdtemp, rm, writeFile, mkdir } from "node:fs/promises";

High

Child Process

Package source references child process execution.

build/agent-capabilities/default-deps.jsView on unpkg · L10

3* dirs, and clock. Subprocess execution uses `execFile` (list-based, never L4: * `shell: true`) and forwards an `AbortSignal` with `killSignal: "SIGKILL"` so the L5: * timeout guard in `probe-context.ts` can actually kill a hung agent (the

High

Shell

Package source references shell execution.

build/agent-capabilities/default-deps.jsView on unpkg · L3

build/scheduler-backends/launchd.jsView file

53} L54: /** UID used by `launchctl` domain targets; falls back to the process UID. */ L55: function resolveUid(deps) { ... L103: " <key>StandardOutPath</key>", L104: ` <string>${xmlEscape(input.paths.stdoutPath)}</string>`, L105: " <key>StandardErrorPath</key>",

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

build/scheduler-backends/launchd.jsView on unpkg · L53

build/index.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.jsView on unpkg · L13095

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L24

build/conductor/redaction.jsView file

56patternName = generic_password severity = medium line = 56 matchedText = * struct..." }`

Medium

Secret Pattern

Hardcoded password in build/conductor/redaction.js

build/conductor/redaction.jsView on unpkg · L56

Findings

4 High6 Medium5 Low

HighChild Processbuild/agent-capabilities/default-deps.js

HighShellbuild/agent-capabilities/default-deps.js

HighCommand Output Exfiltrationbuild/index.js

HighSandbox Evasion Gated Capabilitybuild/index.js

MediumSecret Patternpublic/js/main.min.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebuild/scheduler-backends/launchd.js

MediumStructural Risk Force Deep Review

MediumSecret Patternbuild/conductor/redaction.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

public/js/main.min.jsView file

Lines 1-2javascript

Medium

Secret Pattern

Package contains a possible secret pattern.

public/js/main.min.jsView on unpkg · L1

2//# sourceMappingURL=main.min.js.map

Long lines were clipped for display.

build/agent-capabilities/default-deps.jsView file

Lines 1-30javascript

1/**

2 * Production deps for the `agent-capabilities` toolkit: real subprocesses, temp

3 * dirs, and clock. Subprocess execution uses `execFile` (list-based, never

4 * `shell: true`) and forwards an `AbortSignal` with `killSignal: "SIGKILL"` so the

5 * timeout guard in `probe-context.ts` can actually kill a hung agent (the

High

Shell

Package source references shell execution.

build/agent-capabilities/default-deps.jsView on unpkg · L3

6 * version-sensitive `cursor-agent -p` non-exit bug) instead of leaking it.

7 *

8 * Mirrors `createDefaultScheduleRunDeps()` in `schedule-run.ts`, adding the temp-dir

build/scheduler-backends/launchd.jsView file

Lines 33-73javascript

33 if (base)

34 return base.slice(0, -".plist".length);

35 }

36 return launchdLabelForId(metadata.id);

37}

38/** `~/Library/LaunchAgents/<label>.plist` for a schedule id. */

39export function

build/index.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.jsView on unpkg · L13095

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L24

build/conductor/redaction.jsView file

Lines 36-76javascript

37/** `key: "value"` / `key = "value"` — preserve the key + quotes, redact the value. */

38const ASSIGNMENT_QUOTED = new RegExp(`\\b(${ASSIGNMENT_KEYS})(\\s*[:=]\\s*)("|')[^"']*("|')`, "gi");