registry / @kdtix-open/sdlca-bridge / 0.1.21

@kdtix-open/sdlca-bridge@0.1.21

Local execution bridge CLI for SDLC Automated — npx-ready installer

AI Security Review

scanned 1h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. This is a local AI-agent execution bridge with supervisor persistence and authenticated loopback/MCP control. The risk is real but appears explicit and package-aligned rather than malicious install-time abuse.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

User runs sdlca-bridge install, foreground, mcp serve, mcp stdio, or enables hosted work-claim polling.

Impact

Authenticated local or configured hosted callers can cause provider CLI execution in allowed project roots; install registers user-level services and writes bridge credentials/config.

Mechanism

first-party local bridge and MCP agent extension setup

Rationale

The package contains dangerous local execution and persistence capabilities, but they are documented, user-invoked, guarded by token/OIDC checks, and aligned with the bridge product. Per policy this fits a warn-level agent extension lifecycle risk, not a malicious publish block.

Evidence

package.jsonbin/sdlca-bridge.jsbridge/index.jsmcp/stdio.jstemplates/config.json.exampletemplates/SETUP.mdREADME.md~/.sdlca/bridge/config.json~/.sdlca/bridge/.env.credentials~/.sdlca/bridge/.env.credentials.example~/.sdlca/bridge/SETUP.md~/.sdlca/bridge/logs/bridge.log~/.sdlca/bridge/.oidc-token-cachelaunchd/systemd-user service entries

Network endpoints5

auth.projectit.ai/.well-known/openid-configurationdev.projectit.ai/tools/repo-orchestrator127.0.0.1:4318127.0.0.1:4319localhost:3456/mcp

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

bin/sdlca-bridge.js exposes user commands that install launchd/systemd-user supervisor services for the bridge and MCP server.
bridge/index.js and bin/sdlca-bridge.js spawn local provider CLIs: claude, codex, copilot, cursor/agent.
bridge/index.js can poll a configured hosted control plane and execute leased tasks after explicit config/token setup.
mcp/stdio.js registers MCP tools including bridge.execute_local_provider_task and hosted repo_orchestrator wrappers.

Evidence against

package.json has no preinstall/install/postinstall hook; only prepublishOnly build runs on publish.
README.md documents npx @kdtix-open/sdlca-bridge install as the activation path and describes generated files under ~/.sdlca/bridge.
Default templates/config.json.example keeps hostedWorkClaimPolling false.
MCP HTTP server binds to 127.0.0.1 and uses bearer/static token or OIDC validation.
Source includes secret redaction helpers and warns not to paste tokens; no credential harvesting/exfiltration flow was confirmed.
Hosted URLs are package-aligned with documented dev.projectit.ai/projectit.ai service behavior.

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 436 KB of source, external domains: auth.projectit.ai, github.com, sdlca.invalid, www.apple.com

Source & flagged code

7 flagged

bin/sdlca-bridge.jsView file

Lines 1-43javascript

1#!/usr/bin/env node

2// SPDX-License-Identifier: BSL-1.1

3var Pd=Object.defineProperty;var T=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};var Ad=(e,r)=>{for(var t in r)Pd(e,t,{get:r[t],enumerable:!0})};import Nm from"path";import{fileURLToPath as Mm}from"url";var h=T(()=>{"use strict"});function se(e){if(e?.discoveryUrl!==void 0&&e?.clientId===void 0)throw new ie("oidc.clientId is required when oidc.discoveryUrl is overridden");let r={...Wt,...Od(e)};try{if(new URL(r.discoveryUrl).protocol!=="https:")throw new ie("oidc.discoveryUrl must use HTTPS")}catch(t){throw t instanceof ie?t:new ie("oidc.discoveryUrl must us ...

4`)}r.push([s,Ud(a.trimEnd())])}return r}function Hd(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:e.indexOf(r,1)===-1}function Ud(e){return e.length>=2&&(e.startsWith('"')&&e.endsWith('"')||e.startsWith("'")&&e.endsWith("'"))?e.slice(1,-1):e}function $d(e){return e==="~"?zt.homedir():e.startsWith("~/")?ae.join(zt.homedir(),e.slice(2)):e}function Vt(e){try{return new URL(e).protocol==="https:"}catch{return!1}}function qt(e){try{return new URL(e).protocol==="http:"}catch{return!1}}var zr,Dd,Xt,W=T(()=>{"use strict";h();Te();zr=4318,Dd=/^[\w-]{1,128}$/u,Xt=4096});import Vd from" ...

6`)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{message:e.message,name:e.name,stack:e.stack??null}:e instanceof URL?e.toString():Array.isArray(e)?e.map(r=>st(r)):e&&typeof e=="object"?Object.fromEntries(Object.entries(e).map(([r,t])=>[r,st(t)])):e}var Ye,nt,ti,Rr=T(()=>{"use strict";h();Xe();Ye={error:0,info:1,debug:2,trace:3},ti=""});import si from"fs";import Ec from"path";function Me(e,r=process.env){return ii({debug:e.debug,logsDir:j(r).logsDir,serviceName:"sdlca-b ...

7`)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=

8`)}r.push([s,pp(a)])}return r}function up(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:!e.endsWith(r)}function ws(e){return je.resolve

9`;if(Buffer.byteLength(s,"utf8")>js){Vo(r,"reviewPatternService: corpus entry exceeds PIPE_BUF limit; truncating fields",{id:e.id,byteLength:Buffer.byteLength(s,"utf8")});let a=e.anti_pattern,d=e.fix_template;for(;Buffer.byteLength(s,"utf8")>js;){let u=a,c=d;if(a.length>0&&(a=a.slice(0,Math.max(0,a.length-Fs))),d.length>0&&(d=d.slice(0,Math.max(0,d.length-Fs))),i={...e,anti_pattern:a,fix_template:d},s=`${JSON.stringify(i)}

10`,a===u&&d===c){Vo(r,"reviewPatternService: corpus entry too large even after full truncation; skipping persistence (best-effort)",{id:e.id,byteLength:Buffer.byteLength(s,"utf8")});return}}}await It.appendFile(t,s,{mode:384}),n||await It.chmod(t,384)}catch(o){Vo(r,"reviewPatternService: failed to persist corpus entry; skipping (best-effort)",o)}}var js,Fs,Np,jb,Ks=T(()=>{"use strict";h();js=4096,Fs=64,Np=qo.resolve(process.cwd(),"data/review-pattern-corpus.jsonl"),jb=qo.resolve(process.cwd(),"data/review-pattern-corpus-pending.jsonl")});import{randomUUID as Xo}from"crypto";import Bp from"path" ...

11`).replace(/\r/g,`

12`),t=[];for(let o of r.matchAll(Mp))t.push({file:o[1],line:Number.parseInt(o[2],10),col:Number.parseInt(o[3],10),severity:o[4],message:o[5],rule_id:o[6]});return t}function jp(e,r,t){let o=new

13`).replace(/\r/g,`

14`),t=[];for(let o of r.split(`

15`)){let n=Wp(o);n&&t.push(n)}return t}function Wp(e){let r=e.indexOf(Js);if(r===-1)return null;let t=e.lastIndexOf("(",r);if(t<=0||e.slice(0,t).includes("): "))return null;let[o,n]=e.slice(t+1,r).split(",");if(!/^\d+$/.test(o)||!/^\d+$/.test(n))return null;let i=e.slice(r+Js.length),s=i.indexOf(":");if(s<=0)return null;let a=i.slice(0,s),d=i.slice(s+1).trimStart();return!/^\d+$/.test(a)||d.length===0?null:{file:e.slice(0,t),line:Number.parseInt(o,10),col:Number.parseInt(n,10),code:`TS${a}`,message:d}}function Vp(e){let r=e.replace(/\r\n/g,`

16`).replace(/\r/g,`

17`),t=[],o=null,n=()=>{o&&(t.push(o),o=null)};for(let i of r.split(`

18`)){let s=Hp.exec(i);if(s){n(),o={file:s[1],test_name:s[3],assertion_category:"unknown_assertion"};continue}if(!o||o.assertion_category!=="unknown_assertion")continue;let a=Up.exec(i);a&&(o.assertion_category=qp(a[1]))}return n(),t}function qp(e){return/\bto equal\b/.test(e)?"expected_to_equal":/\bto match\b/.test(e)?"expected_to_match":/\bto be truthy\b/.test(e)?"expected_truthy":/\bto throw\b/.test(e)?"expected_to_throw":"unknown_assertion"}var Mp,Js,Hp,Up,Vs=T(()=>{"use strict";h();$s();Ks();Mp=/^(.+):(\d+):(\d+)\s{2,}(error|warning)\s{2,}(.+)\s{2,}([@A-Za-z0-9/_-]+)$/gm,Js="): error TS",Hp ...

19${q(a||s)}`,f??1,q(a),q(s)))}),t.timeoutMs&&t.timeoutMs>0&&(c=setTimeout(()=>{u=!0,i.kill("SIGTERM"),l=setTimeout(()=>{i.kill("SIGKILL")},1e3)},t.timeoutMs)),t.input&&i.stdin.write(t.input),i.stdin.end

20// This file is managed automatically.

21${JSON.stringify(u,null,2)}

22`,{mode:384}),await K.chmod(o,384)}async function bg(e){try{let t=(await K.readFile(e,"utf8")).split(`

23`).filter(n=>!n.trimStart().startsWith("//")).join(`

24`).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.isArray(o)?o:{}}catch(r){if(r.code==="ENOENT")return{};throw r}}function yg(e,r,t){return{...t??{},COPILOT_ALLOW_ALL:"true",COPILOT_AUTO_UPDATE:"false",COPILOT_DEBUG_BROWSER:Eg(),COPILOT_HOME:e,GITHUB_MCP_SERVER_TOKEN:ua(t?.GITHUB_MCP_SERVER_TOKEN,t?.GH_TOKEN,t?.GITHUB_TOKEN)??r}}function ua(...e){for(let r of e){let t=r?.trim();if(t)return t}}function Eg(){return JSON.stringify([process.execPath,"-e","process.exit(0)"])}function Sg(e){let r=e?.trim();return r?/^https?:\/\//i.test(r)?r:`https://${r}`:"http ...

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/sdlca-bridge.jsView on unpkg · L2

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/sdlca-bridge.jsView on unpkg · L2

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/sdlca-bridge.jsView on unpkg · L2

25# No-op GUI launcher for headless worker environments (#983)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/sdlca-bridge.jsView on unpkg · L23

26exit 0

27`,tn=null});var Nt,hr,Bt,Mt,Kr,on,nn=T(()=>{"use strict";h();Nt="SDLCA_LOCAL_EXECUTION_BRIDGE_TOKEN must be configured.",hr="The supplied bridge token is invalid.",Bt="Dispatch blocked: credential preflight failed. Re-authenticate the affected service and restart the bridge.",Mt="Forensic execution is disabled on this bridge. Set SDLCA_BRIDGE_FORENSIC_ENABLED=true once the Token Reporting API contract is approved in issue #1244.",Kr="sdlca.bridge.forensic.v0",on={artifactKinds:["local_model_forensic_review"],artifactSchemaVersion:Kr,emitsRawAdminSnapshots:!1,executionKind:"forensic",requiresAd ...

28`),this.diagnostics?.logger?.debug("bridge.acp_rpc_request_sent",{...this.diagnostics.context,method:r,pendingCount:this.pending.size,requestId:o,timeoutMs:d})}catch(c){this.pending.delete(o),clearTimeout(u),s(c instanceof Error?c:new Error(String(c)))}})}text(){return this.sawTextChunk?this.textChunks.join(""):void 0}snapshot(){return{closed

29`)}rejectAll(r){for(let t of this.pending.values())t.reject(r);this.pending.clear()}formatStderrTail(){let r=q(this.stderrTail).trim();return r?` stderr=${r}`:""}formatRuntimeSnapshot(){let r=[...this.pending.values()].map(o=>o.method).join(","),t=[...this.notificationMethods].join(",");return` stdoutLines=${this.stdoutLineCount} malformedLines=${this.malformedLineCount} textChunks=${this.textChunks.length} pendingMethods=${r||"none"} notificationMethods=${t||"none"}`}elapsedMs(){return Date.now()-this.startedAtMs}kill(r){return!this.options.cleanupProcessGroup||this.child.pid===void 0?this.ch ...

30`),br=["[SYN/SYN-ACK/ACK bridge verification handshake]","Your role: reviewer",`Your provider ID: ${Y.providerId}`,`Peer worker provider ID: ${N.providerId}`,"","Output ONLY the following JSON (no prose, no markdown code fences):",`{"acknowledged":true,"role":"reviewer","providerId":"${Y.providerId}"}`].join(`

31`),Ce="passed",kn,Ne;try{let M=await e.executeStructuredAgent({executionKind:"handshake",environment:Vr(N.kind,Mr,o,r),prompt:Jt,provider:{executable:vn(N.kind,e.resolveExecutable),kind:N.kind},schema:qr,workingDirectory:pe});M.acknowledged!==!0?(Ce="failed",Ne=`Worker handshake for ${N.providerId} failed: acknowledged=${String(M.acknowledged)}`

32`)),t})(),i=Is(n,e,r),s=xs(n,e,r,{excludeLegacyCopilotCliSource:i!==void 0}),a=r==="worker"&&t.workerGitAuthorName&&t.workerGitAuthorEmail?{name:t.workerGitAuthorName,email:t.workerGitAuthorEmail}:void 0,d=s?Ps(s,{includeCredentialBreadcrumbs:t.providerGitHubCredentialBreadcrumbs===!0,includeLegacyUatAlias:t.providerGitHubLegacyUatAlias===!0,copilotAuthCredential:i,workerGitIdentity:a}):{},u={...Lt,PATH:`${wa()}:${

33`),process.exit(1)}console.log("Starting bridge in foreground mode (Ctrl-C to stop)...");try{await Sn(void 0,r)}catch(t){let o=t instanceof Error?t.message:String(t);process.stderr.write(`foreground: failed to start bridge server: ${o}

34`),process.exit(1)}}var kd=T(()=>{"use strict";h();W();Sd()});h();import Cd from"fs";import Gt from"path";import{fileURLToPath as Td}from"url";h();W();import ze from"fs";import tc from"http";import ke from"path";import oc from"readline/promises";import{fileURLToPath as nc}from"url";h();W();import{randomBytes as jd}from"crypto";import me from"fs";import Xr from"path";import{fileURLToPath as Fd}from"url";var Sr="SDLCA_LOCAL_EXECUTION_BRIDGE_TOKEN",Gd=`{

35 "hostedWorkClaimPolling": false,

36 "oidcTransition": true,

37 "port": 4318

38}

39`;function On(e=process.env){let r=j(e);return me.mkdirSync(r.home,{recursive:!0}),Er(r.configFile,Gd),Er(r.configExampleFile,Yt("config.json.example")),Er(r.credentialsExampleFile,Yt(".env.credentials.example"),384),Er(r.setupGuideFile,Yt("SETUP.md")),Er(r.credentialsFile,Kd(e),384),Jd(r.credentialsFile,e),me.chmodSync(r.credentialsFile,384),me.mkdirSync(r.logsDir,{recursive:!0}),me.mkdirSync(r.cacheDir,{recursive:!0}),me.mkdirSync(r.tmpDir,{recursive:!0}),r}function Er(e,r,t){try{me.writeFileSync(e,r,{encoding:"utf8",flag:"wx",...t===void 0?{}:{mode:t}})}catch(o){if(!Wd(o)||o.code!=="EEXIST" ...

40`)}function Jd(e,r){let t=me.readFileSync(e,"utf8");if(new RegExp(`^\\s*${Sr}\\s*=\\s*\\S+`,"mu").test(t))return;let o="";t.length>0&&!

41`)&&(o+=`

42`),t.trim().length>0&&(o+=`

43`);let n=`${o}# Required by local bridge loopback auth.

Long lines were clipped for display.

Source & flagged code

7 flagged · loading source

bin/sdlca-bridge.jsView file

2// SPDX-License-Identifier: BSL-1.1 L3: var Pd=Object.defineProperty;var T=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};var Ad=(e,r)=>{for(var t in r)Pd(e,t,{get:r[t],enumerable:!0})}... L4: `)}r.push([s,Ud(a.trimEnd())])}return r}function Hd(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:e.indexOf(r,1)===-1}function Ud(e){return e.length>=2&&(e.starts... L5: `;u===Ye.error?process.stderr.write(l):process.stdout.write(l),u<=Ye.info&&eo(t,l),e.debug>=1&&u<=Ye.debug&&eo(o,l),(e.verbose>=Ye.trace||e.debug>=Ye.trace)&&eo(n,l)})}function eo(... L6: `)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{mess... L7: `)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=0;t<e.length;t+=1){let o=e[... ... L23: `).filter(n=>!n.trimStart().startsWith("//")).join(` L24: `).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.isArray(o)?o:{}}catch(r){if(r.code==="ENOENT")return{};throw r}}

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/sdlca-bridge.jsView on unpkg · L2

2Trigger-reachable chain: manifest.bin -> bin/sdlca-bridge.js L2: // SPDX-License-Identifier: BSL-1.1 L3: var Pd=Object.defineProperty;var T=(e,r,t)=>()=>{if(t)throw t[0];try{return e&&(r=e(e=0)),r}catch(o){throw t=[o],o}};var Ad=(e,r)=>{for(var t in r)Pd(e,t,{get:r[t],enumerable:!0})}... L4: `)}r.push([s,Ud(a.trimEnd())])}return r}function Hd(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:e.indexOf(r,1)===-1}function Ud(e){return e.length>=2&&(e.starts... L5: `;u===Ye.error?process.stderr.write(l):process.stdout.write(l),u<=Ye.info&&eo(t,l),e.debug>=1&&u<=Ye.debug&&eo(o,l),(e.verbose>=Ye.trace||e.debug>=Ye.trace)&&eo(n,l)})}function eo(... L6: `)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{mess... L7: `)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=0;t<e.length;t+=1){let o=e[... ... L23: `).filter(n=>!n.trimStart().startsWith("//")).join(` L24: `).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.is…

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/sdlca-bridge.jsView on unpkg · L2

5`;u===Ye.error?process.stderr.write(l):process.stdout.write(l),u<=Ye.info&&eo(t,l),e.debug>=1&&u<=Ye.debug&&eo(o,l),(e.verbose>=Ye.trace||e.debug>=Ye.trace)&&eo(n,l)})}function eo(... L6: `)}catch{}}function yc(e){let r=Object.fromEntries(Object.entries(e).filter(([,t])=>t!==void 0).map(([t,o])=>[t,st(o)]));return ot(r)}function st(e){return e instanceof Error?{mess... L7: `)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=0;t<e.length;t+=1){let o=e[...

High

Child Process

Package source references child process execution.

bin/sdlca-bridge.jsView on unpkg · L5

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/sdlca-bridge.jsView on unpkg · L2

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

bin/sdlca-bridge.jsView on unpkg · L2

23`).filter(n=>!n.trimStart().startsWith("//")).join(` L24: `).trim();if(!t)return{};let o=JSON.parse(t);return o!==null&&typeof o=="object"&&!Array.isArray(o)?o:{}}catch(r){if(r.code==="ENOENT")return{};throw r}}function yg(e,r,t){return{.... L25: # No-op GUI launcher for headless worker environments (#983)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/sdlca-bridge.jsView on unpkg · L23

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/sdlca-bridge.jsView on unpkg · L2

Findings

2 Critical3 High5 Medium6 Low

CriticalCredential Exfiltrationbin/sdlca-bridge.js

CriticalTrigger Reachable Dangerous Capabilitybin/sdlca-bridge.js

HighChild Processbin/sdlca-bridge.js

HighSame File Env Network Executionbin/sdlca-bridge.js

HighCommand Output Exfiltrationbin/sdlca-bridge.js

MediumDynamic Requirebin/sdlca-bridge.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencebin/sdlca-bridge.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

bin/sdlca-bridge.jsView file

Lines 1-43javascript

1#!/usr/bin/env node

2// SPDX-License-Identifier: BSL-1.1

7`)}function Ss(e){try{let t=zu.readFileSync(e,"utf8").split(/\r?\n/u);return Object.fromEntries(lp(t))}catch{return{}}}function lp(e){let r=[];for(let t=

8`)}r.push([s,pp(a)])}return r}function up(e){if(e.length<2)return!1;let r=e[0];return r!=='"'&&r!=="'"?!1:!e.endsWith(r)}function ws(e){return je.resolve

11`).replace(/\r/g,`

12`),t=[];for(let o of r.matchAll(Mp))t.push({file:o[1],line:Number.parseInt(o[2],10),col:Number.parseInt(o[3],10),severity:o[4],message:o[5],rule_id:o[6]});return t}function jp(e,r,t){let o=new

13`).replace(/\r/g,`

14`),t=[];for(let o of r.split(`

16`).replace(/\r/g,`

17`),t=[],o=null,n=()=>{o&&(t.push(o),o=null)};for(let i of r.split(`

20// This file is managed automatically.

21${JSON.stringify(u,null,2)}

22`,{mode:384}),await K.chmod(o,384)}async function bg(e){try{let t=(await K.readFile(e,"utf8")).split(`

23`).filter(n=>!n.trimStart().startsWith("//")).join(`

Critical

Credential Exfiltration

Source appears to send environment or credential material to an external endpoint.

bin/sdlca-bridge.jsView on unpkg · L2

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

bin/sdlca-bridge.jsView on unpkg · L2

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

bin/sdlca-bridge.jsView on unpkg · L2

25# No-op GUI launcher for headless worker environments (#983)

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/sdlca-bridge.jsView on unpkg · L23

26exit 0

35 "hostedWorkClaimPolling": false,

36 "oidcTransition": true,

37 "port": 4318

38}

40`)}function Jd(e,r){let t=me.readFileSync(e,"utf8");if(new RegExp(`^\\s*${Sr}\\s*=\\s*\\S+`,"mu").test(t))return;let o="";t.length>0&&!

41`)&&(o+=`

42`),t.trim().length>0&&(o+=`

43`);let n=`${o}# Required by local bridge loopback auth.

Long lines were clipped for display.