registry / @bridge_gpt/mcp-server / 0.2.21

@bridge_gpt/mcp-server@0.2.21

⚠ Under review

Bridge API MCP server — exposes Jira endpoints as MCP tools for Claude Code agents

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 16 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 172 file(s), 4.67 MB of source, external domains: astral.sh, bridge-test.atlassian.net, bridgegpt-api.com, cursor.com, example.com, git-scm.com, registry.npmjs.org, schemas.microsoft.com, worktrunk.dev, www.apple.com

Source & flagged code

8 flagged

build/agent-capabilities/default-deps.jsView file

Lines 1-30javascript

1/**

2 * Production deps for the `agent-capabilities` toolkit: real subprocesses, temp

3 * dirs, and clock. Subprocess execution uses `execFile` (list-based, never

4 * `shell: true`) and forwards an `AbortSignal` with `killSignal: "SIGKILL"` so the

5 * timeout guard in `probe-context.ts` can actually kill a hung agent (the

High

Shell

Package source references shell execution.

build/agent-capabilities/default-deps.jsView on unpkg · L3

6 * version-sensitive `cursor-agent -p` non-exit bug) instead of leaking it.

7 *

8 * Mirrors `createDefaultScheduleRunDeps()` in `schedule-run.ts`, adding the temp-dir

9 * filesystem ops and a unique-suffix source the probes need.

10 */

11import { execFile } from "node:child_process";

12import { mkdtemp, rm, writeFile, mkdir } from "node:fs/promises";

High

Child Process

Package source references child process execution.

build/agent-capabilities/default-deps.jsView on unpkg · L10

13import os from "node:os";

14import { randomBytes } from "node:crypto";

15export function createDefaultAgentCapabilitiesDeps() {

16 const runCommand = (file, args, options) => new Promise((resolve) => {

17 execFile(file, args, {

18 cwd: options?.cwd,

19 env: options?.env ?? process.env,

20 signal: options?.signal,

21 killSignal: "SIGKILL",

22 maxBuffer: 64 * 1024 * 1024,

23 encoding: "utf-8",

24 }, (error, stdout, stderr) => {

25 const exitCode = error && typeof error.code === "number"

26 ? error.code

27 : error

28 ? 1

29 : 0;

30 resolve({ stdout: stdout ?? "", stderr: stderr ?? "", exitCode });

build/visual-diff.jsView file

Lines 218-258javascript

218 }

219 else {

220 await deps.mkdir(dir, { recursive: true });

221 await deps.writeFile(target, Buffer.from(bytes));

222 }

223 }

224 catch (err) {

225 warnings.

build/scheduler-backends/launchd.jsView file

Lines 33-73javascript

33 if (base)

34 return base.slice(0, -".plist".length);

35 }

36 return launchdLabelForId(metadata.id);

37}

38/** `~/Library/LaunchAgents/<label>.plist` for a schedule id. */

39export function

build/index.jsView file

14476"update-ticket-rewrite.md": "Rewrite the Jira ticket description for {ticket_key} using the generated clarifying questions and critique documents.\n\n1. Fetch the current ticket de... L14477: "upload-and-track.md": 'Step-10 umbrella upload instruction. Idempotently create the Jira ticket(s) for this run, attach the full draft(s), and call `track_ticket`.\n\n## Inputs\n\... L14478: "upload-epic-hierarchy.md": 'Standalone Epic upload protocol. Use as the detailed reference for the Epic path triggered from `upload-and-track.md`.\n\n## Inputs\n\n- Run manifest: ... ... L14485: // src/readme.generated.ts L14486: var README = '# @bridge_gpt/mcp-server\n\nThe Bridge MCP is an end-to-end accelerator for shipping code within SFCC, powered by [Bridge API](https://bridgegpt-api.com). Works with ... L14487:

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.jsView on unpkg · L14476

29for (let i = 0; i < value.length; i++) { L30: const code = value.charCodeAt(i); L31: if (code <= 31 || code === 127) return true; ... L292: } L293: if (result.exitCode !== 0) { L294: const reason = (result.stderr || result.stdout || "").trim(); ... L342: } L343: return path6.join(deps.homedir(), ".config", "bridge", "credentials.json"); L344: } ... L369: if ((statResult.mode & 63) !== 0) { L370: const write = stderr ?? ((m) => process.stderr.write(`${m} L371: `));

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L29

build/doctor.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @bridge_gpt/mcp-server@0.2.16 matchedIdentity = npm:QGJyaWRnZV9ncHQvbWNwLXNlcnZlcg:0.2.16 similarity = 0.427 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/doctor.jsView on unpkg

build/conductor/redaction.jsView file

Lines 36-76javascript

37/** `key: "value"` / `key = "value"` — preserve the key + quotes, redact the value. */

38const ASSIGNMENT_QUOTED = new RegExp(`\\b(${ASSIGNMENT_KEYS})(\\s*[:=]\\s*)("|')[^"']*("|')`, "gi");

Source & flagged code

8 flagged · loading source

build/agent-capabilities/default-deps.jsView file

10*/ L11: import { execFile } from "node:child_process"; L12: import { mkdtemp, rm, writeFile, mkdir } from "node:fs/promises";

High

Child Process

Package source references child process execution.

build/agent-capabilities/default-deps.jsView on unpkg · L10

3* dirs, and clock. Subprocess execution uses `execFile` (list-based, never L4: * `shell: true`) and forwards an `AbortSignal` with `killSignal: "SIGKILL"` so the L5: * timeout guard in `probe-context.ts` can actually kill a hung agent (the

High

Shell

Package source references shell execution.

build/agent-capabilities/default-deps.jsView on unpkg · L3

build/visual-diff.jsView file

238// eslint-disable-next-line @typescript-eslint/no-explicit-any L239: const mod = await import(specifier); L240: const chromium = mod?.chromium ?? mod?.default?.chromium;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

build/visual-diff.jsView on unpkg · L238

build/scheduler-backends/launchd.jsView file

53} L54: /** UID used by `launchctl` domain targets; falls back to the process UID. */ L55: function resolveUid(deps) { ... L103: " <key>StandardOutPath</key>", L104: ` <string>${xmlEscape(input.paths.stdoutPath)}</string>`, L105: " <key>StandardErrorPath</key>",

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

build/scheduler-backends/launchd.jsView on unpkg · L53

build/index.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.jsView on unpkg · L14476

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L29

build/doctor.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/doctor.jsView on unpkg

build/conductor/redaction.jsView file

56patternName = generic_password severity = medium line = 56 matchedText = * struct..." }`

Medium

Secret Pattern

Hardcoded password in build/conductor/redaction.js

build/conductor/redaction.jsView on unpkg · L56

Findings

1 Critical4 High6 Medium5 Low

CriticalPrevious Version Dangerous Deltabuild/doctor.js

HighChild Processbuild/agent-capabilities/default-deps.js

HighShellbuild/agent-capabilities/default-deps.js

HighCommand Output Exfiltrationbuild/index.js

HighSandbox Evasion Gated Capabilitybuild/index.js

MediumDynamic Requirebuild/visual-diff.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebuild/scheduler-backends/launchd.js

MediumStructural Risk Force Deep Review

MediumSecret Patternbuild/conductor/redaction.js

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

8 flagged

build/agent-capabilities/default-deps.jsView file

Lines 1-30javascript

1/**

2 * Production deps for the `agent-capabilities` toolkit: real subprocesses, temp

3 * dirs, and clock. Subprocess execution uses `execFile` (list-based, never

4 * `shell: true`) and forwards an `AbortSignal` with `killSignal: "SIGKILL"` so the

5 * timeout guard in `probe-context.ts` can actually kill a hung agent (the

High

Shell

Package source references shell execution.

build/agent-capabilities/default-deps.jsView on unpkg · L3

6 * version-sensitive `cursor-agent -p` non-exit bug) instead of leaking it.

7 *

8 * Mirrors `createDefaultScheduleRunDeps()` in `schedule-run.ts`, adding the temp-dir

9 * filesystem ops and a unique-suffix source the probes need.

10 */

11import { execFile } from "node:child_process";

12import { mkdtemp, rm, writeFile, mkdir } from "node:fs/promises";

High

Child Process

Package source references child process execution.

build/agent-capabilities/default-deps.jsView on unpkg · L10

13import os from "node:os";

14import { randomBytes } from "node:crypto";

15export function createDefaultAgentCapabilitiesDeps() {

16 const runCommand = (file, args, options) => new Promise((resolve) => {

17 execFile(file, args, {

18 cwd: options?.cwd,

19 env: options?.env ?? process.env,

20 signal: options?.signal,

21 killSignal: "SIGKILL",

22 maxBuffer: 64 * 1024 * 1024,

23 encoding: "utf-8",

24 }, (error, stdout, stderr) => {

25 const exitCode = error && typeof error.code === "number"

26 ? error.code

27 : error

28 ? 1

29 : 0;

30 resolve({ stdout: stdout ?? "", stderr: stderr ?? "", exitCode });

build/visual-diff.jsView file

Lines 218-258javascript

218 }

219 else {

220 await deps.mkdir(dir, { recursive: true });

221 await deps.writeFile(target, Buffer.from(bytes));

222 }

223 }

224 catch (err) {

225 warnings.

build/scheduler-backends/launchd.jsView file

Lines 33-73javascript

33 if (base)

34 return base.slice(0, -".plist".length);

35 }

36 return launchdLabelForId(metadata.id);

37}

38/** `~/Library/LaunchAgents/<label>.plist` for a schedule id. */

39export function

build/index.jsView file

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

build/index.jsView on unpkg · L14476

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

build/index.jsView on unpkg · L29

build/doctor.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

build/doctor.jsView on unpkg

build/conductor/redaction.jsView file

Lines 36-76javascript

37/** `key: "value"` / `key = "value"` — preserve the key + quotes, redact the value. */

38const ASSIGNMENT_QUOTED = new RegExp(`\\b(${ASSIGNMENT_KEYS})(\\s*[:=]\\s*)("|')[^"']*("|')`, "gi");