registry / @item-com-bi/bi-app-deploy-mcp / 1.1.0

@item-com-bi/bi-app-deploy-mcp@1.1.0

MCP adapter for BI platform web app deployment — provides tools for project management, git operations, and deploy workflows.

AI Security Review

scanned 12h ago · by lpm-firewall-ai

A caller able to invoke the MCP git tools can supply shell metacharacters through path or branch inputs. Those inputs reach execSync command strings in the local user context.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit MCP calls to git_clone, git_push, git_pull, or git_log with crafted arguments.

Impact

Arbitrary local command execution as the MCP server user.

Mechanism

Shell command injection through interpolated git-tool parameters.

Rationale

Source inspection confirms user-invoked command injection in the Git MCP tools. It is a severe dangerous capability/critical vulnerability rather than evidence of intentional package malware.

Evidence

package.jsondist/index.jsdist/git-ops.jsdist/guide.jsdist/api-client.jsdist/auth.jsdist/token-store.jsdist/profiles.js

Network endpoints1

bi-apis.item.com/app/deploy

Decision evidence

public snapshot

AI called this Suspicious at 96.0% confidence with false-positive risk.

@item-com-bi/bi-app-deploy-mcp@1.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code