Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@g7e6-sdlc/sdlc-cli@1.5.0: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as agent extension risk

Allowed by default with warning: install-time first-party agent extension setup was detected.

View on npm All versions Policy details

registry / @g7e6-sdlc/sdlc-cli / 1.5.0

@g7e6-sdlc/sdlc-cli@1.5.0

SDLC 最小集 CLI（sdlc-cli）— 本地即真源的中间产物仓库与工作区装配

AI Security Review

scanned 24d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package automatically writes configuration and bundled skills into global AI-agent skill directories. A separate session feature can upload supplied transcript files to a default remote endpoint, but this package does not install the hooks that invoke it.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm postinstall runs on package installation; session upload requires a later session command or external hook.

Impact

Global agent behavior can be influenced by package-supplied skills, and later session collection can disclose transcript contents to the configured service.

Mechanism

Automatic global skill installation with a transcript-upload capability.

AI rationale

This is an unconsented postinstall mutation of global AI-agent extension locations with a related transcript-upload capability. It is a guarded first-party extension lifecycle risk rather than a complete confirmed automatic exfiltration chain.

Evidence

package.jsondist/cli.js~/.sdlc/config.yaml~/.claude/skills~/.agents/skills

Network endpoints1

devlake.chinawayltd.com

Decision evidence

public snapshot

with false-positive risk.

Stop threats before they install.

Firewall

Threat feed
How it works
Policy

LPM

AI called this Suspicious at 90.0% confidence as Dangerous Capability

low

Evidence for warning

Its postinstall automatically runs the install command and suppresses failures.
The install command replaces and copies bundled skills into global Claude and agent skill directories.
The code can read collected session files and POST them to a default remote service.

Evidence against

Session collection requires explicit command arguments and exits when the collector is disabled.
No runtime dependency on this package itself is declared.
No code that writes Claude or Codex hook configuration was found; postinstall installs skills and configuration only.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

UrlStrings

Manifest

NoLicense

scanned 1 file(s), 364 KB of source, external domains: apollo-api.demo.chinawayltd.com, apollo-api.dev.chinawayltd.com, apollo-api.test.chinawayltd.com, apollo.merak.chinawayltd.com, archery.chinawayltd.com, devcloud.chinawayltd.com, devlake.chinawayltd.com, devlake.example.com, issues.chinawayltd.com, jira.example.com, sdlc-knowledge-base.g7in.com

Source & flagged code

5 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/cli.js install || true

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/cli.js install || true

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/cli.jsView file

632var DEFAULT_SESSION_EXCLUDE = [ L633: "~/.claude/**", L634: "~/.codex/**", L635: "~/.ssh/**", ... L705: import { L706: cpSync, L707: existsSync, L708: mkdirSync, L709: readdirSync, ... L712: symlinkSync, L713: writeFileSync L714: } from "fs";

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli.jsView on unpkg · L632

13function businessError(message, details) { L14: return new CtxError(ExitCode.Business, message, details); L15: } ... L237: headers: { Authorization: `AK ${spec.archery.accessKey}`, "Content-Type": "application/json" }, L238: body: JSON.stringify({ instance_name: spec.connection.instance, db_name: spec.connection.database, sql, limit: MAX_RESULT_ITEMS + 1 }), L239: signal L240: }); L241: const text = await response.text(); L242: let body; ... L616: var DEFAULT_APOLLO_SERVERS = { L617: dev: "http://apollo-api.dev.chinawayltd.com:8080", L618: test: "http://apollo-api.test.chinawayltd.com:8080",

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L13

skills/importing-artifacts/scripts/scan_source.pyView file

•path = skills/importing-artifacts/scripts/scan_source.py kind = build_helper sizeBytes = 5479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/importing-artifacts/scripts/scan_source.pyView on unpkg

Findings

1 Critical1 High5 Medium5 Low

CriticalAi Agent Control Hijackdist/cli.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperskills/importing-artifacts/scripts/scan_source.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/cli.js

LowFilesystem

LowUrl Strings

LowNo License

Affected versions and remediation

This report applies to @g7e6-sdlc/sdlc-cli@1.5.0.

See version security history for other recorded verdicts.

Review the evidence and your use of @g7e6-sdlc/sdlc-cli@1.5.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-14 12:57:56.358Z (UTC).

90%Suspicious

AI assessment confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskLow

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

Maintainersdevinrex

Version1.5.0

Latest on npm1.5.4

PublishedSep 14, 2026

Licensenone

Dependencies8

Integrityverified

Package size198 KB

Files23

Runtime surface

package.json

Entrypointsbin → sdlc-cli

Runtimenode >=20

Artifact617 KB · 23 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellUrlStringsNoLicense

LPM.dev Registry

© 2026 LPM

Source & flagged code

5 flagged

package.jsonView file

Lines 1-38json

1{

2 "name": "@g7e6-sdlc/sdlc-cli",

3 "version": "1.5.0",

4 "description": "SDLC 最小集 CLI（sdlc-cli）— 本地即真源的中间产物仓库与工作区装配",

5 "type": "module",

6 "bin": {

7 "sdlc-cli": "./dist/cli.js"

8 },

9 "files": [

10 "dist",

11 "skills"

12 ],

13 "engines": {

14 "node": ">=20"

15 },

16 "scripts": {

17 "build": "tsup",

18 "postinstall": "node ./dist/cli.js install || true",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L18

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L18

19 "dev": "tsup --watch",

20 "test": "vitest run",

21 "test:watch": "vitest",

22 "migrate:prd-modules": "tsx scripts/migrate-prd-modules.ts",

23 "typecheck": "tsc --noEmit"

24 },

25 "dependencies": {

26 "clipanion": "^4.0.0-rc.4",

27 "fast-glob": "^3.3.2",

28 "gray-matter": "^4.0.3",

29 "ioredis": "^6.0.0",

30 "mysql2": "^3.24.4",

31 "simple-git": "^3.27.0",

32 "yaml": "^2.6.1",

33 "zod": "^3.24.1"

34 },

35 "devDependencies": {

36 "@types/node": "^22.10.5",

37 "tsup": "^8.3.5",

38 "tsx": "4.19.2",

dist/cli.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

2var __defProp = Object.defineProperty;

3var __getOwnPropNames = Object.getOwnPropertyNames;

4var __esm = (fn, res) => function __init() {

skills/importing-artifacts/scripts/scan_source.pyView file

•path = skills/importing-artifacts/scripts/scan_source.py kind = build_helper sizeBytes = 5479 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/importing-artifacts/scripts/scan_source.pyView on unpkg

5 return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;

6};

7var __export = (target, all) => {

8 for (var name in all)

9 __defProp(target, name, { get: all[name], enumerable: true });

10};

11

12// src/util/errors.ts

13function businessError(message, details) {

14 return new CtxError(ExitCode.Business, message, details);

15}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/cli.jsView on unpkg · L13

16function usageError(message, details) {

17 return new CtxError(ExitCode.Usage, message, details);

18}

19function externalError(message, details) {

20 return new CtxError(ExitCode.External, message, details);

21}

22var ExitCode, CtxError;

23var init_errors = __esm({

24 "src/util/errors.ts"() {

25 "use strict";

26 ExitCode = {

27 Success: 0,

28 Business: 1,

29 Usage: 2,

30 External: 3

31 };

32 CtxError = class extends Error {

33 code;

Lines 612-652javascript

612import { z } from "zod";

613

614// src/core/apollo/defaults.ts

615var APOLLO_ENVS = ["dev", "test", "demo", "pro"];

616var DEFAULT_APOLLO_SERVERS = {

617 dev: "http://apollo-api.dev.chinawayltd.com:8080",

618 test: "http://apollo-api.test.chinawayltd.com:8080",

619 demo: "http://apollo-api.demo.chinawayltd.com:8080",

620 pro: "http://apollo.merak.chinawayltd.com:8000"

621};

622

623// src/core/gapi/defaults.ts

624var DEFAULT_GAPI_BASE_URL = "http://devcloud.chinawayltd.com";

625

626// src/core/session-defaults.ts

627var SESSION_IDES = ["claude", "codex"];

628var SESSION_MAIN_FILE_KIND = "main";

629function isSessionIde(value) {

630 return typeof value === "string" && SESSION_IDES.includes(value);

631}

632var DEFAULT_SESSION_EXCLUDE = [

633 "~/.claude/**",

634 "~/.codex/**",

635 "~/.ssh/**",

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

dist/cli.jsView on unpkg · L632

636 "~/.gnupg/**",

637 "**/node_modules/**"

638];

639var DEFAULT_SESSION_FLOOR_BYTES = {

640 claude: 1048576,

641 codex: 2097152

642};

643var SESSION_STATE_RETENTION_DAYS = 90;

644var IDE_AI_TOOL = {

645 claude: "claude-code",

646 codex: "codex"

647};

648

649// src/core/config-redact.ts

650init_errors();

651import { YAMLParseError } from "yaml";

652var SENSITIVE_KEY_RE = /(token|secret|password|passwd|pwd|cookie|credential|api[_-]?key|access[_-]?key)/i;