registry / @mmerterden/multi-agent-pipeline / 16.1.2

@mmerterden/multi-agent-pipeline@16.1.2

⚠ Under review

8-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase c

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 11 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 68 file(s), 606 KB of source, external domains: github.com, mmerterden.vercel.app, registry.npmjs.org

Source & flagged code

4 flagged

pipeline/scripts/skill-conformance.mjs#virtual:normalized:round1View file

365// would be extracted into the manifest and injected into every reviewer L366: // prompt via the shared ${CRITERIA} block. Contain it to the skill"s own\n // directory; a declaration that escapes is recorded, not followed.\n const rulesPath = resolv... L367: // report a clean review over criteria it never loaded.

Medium

Dynamic Require

Package source references dynamic require/import behavior.

pipeline/scripts/skill-conformance.mjs#virtual:normalized:round1View on unpkg · L365

pipeline/scripts/build-stack-plugins.mjsView file

Lines 3-43javascript

3 * build-stack-plugins.mjs

4 *

5 * Rebuild the per-stack plugin `knowledge/` trees in the multi-agent-plugins

6 * marketplace from the pipeline's authoring source (pipeline/skills/shared/external),

7 * regenerate each plugin.json `skills[]`, and bump the patch version of any plugin

8 * whose skill set changed. This is the version-based management backbone: the

9 * pipeline is the single authoring source; the marketplace is a derived, versioned

10 * publish artifact.

11 *

12 * The authored lifecycle skills (index / reference / workflow / tools) live in the

13 * plugin repo and are NEVER touched here - only the `knowledge/` layer + plugin.json

14 * knowledge entries are regenerated.

15 *

16 * Routing uses the per-stack skill patterns (formerly carried by stack-swap.sh). Genuinely cross-stack

17 * skills go to ai-common-toolkit, and outside-fact skills for analysis work go to

18 * ai-analyst-toolkit (neither is copied into each stack plugin). Apple/

19 * Xcode-only vendored skills that match no stack pattern belong to iOS only.

20 *

21 * Usage:

22 * node build-stack-plugins.mjs [--plugins-repo <path>] [--pipeline <path>] [--dry-run]

23 *

24 * Exit code 0 always (report-only); prints a JSON-ish summary + per-plugin diff.

25 */

26import {

27 readdirSync,

28 existsSync,

29 rmSync,

30 cpSync,

31 readFileSync,

32 writeFileSync,

33 mkdirSync,

34 statSync,

35} from "node:fs";

36import { join } from "node:path";

37import { spawnSync } from "node:child_process";

38import { createHash } from "node:crypto";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

pipeline/scripts/build-stack-plugins.mjsView on unpkg · L23

40const args = process.argv.slice(2);

41// Accepts both `--key value` and `--key=value`. The `=` form used to fall through to

42// the default, which meant a run meant for a throwaway checkout silently retargeted

43// the user's real marketplace instead - a wrong-target write, reported as success.

pipeline/scripts/github-ssh-setup.shView file

•path = pipeline/scripts/github-ssh-setup.sh kind = build_helper sizeBytes = 2634 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

pipeline/scripts/github-ssh-setup.shView on unpkg

install/codex.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 11

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

install/codex.mjs#virtual:normalized:round1View on unpkg

Source & flagged code

4 flagged · loading source

pipeline/scripts/skill-conformance.mjs#virtual:normalized:round1View file

Medium

Dynamic Require

Package source references dynamic require/import behavior.

pipeline/scripts/skill-conformance.mjs#virtual:normalized:round1View on unpkg · L365

pipeline/scripts/build-stack-plugins.mjsView file

23* L24: * Exit code 0 always (report-only); prints a JSON-ish summary + per-plugin diff. L25: */ ... L36: import { join } from "node:path"; L37: import { spawnSync } from "node:child_process"; L38: import { createHash } from "node:crypto"; ... L61: // gets a string instead of throwing a raw TypeError before any diagnostic. L62: const HOME = process.env.HOME || process.env.USERPROFILE; L63: if (!HOME) { ... L255: // regenerate plugin.json skills[]: keep non-knowledge entries, rebuild knowledge set L256: const pj = JSON.parse(readFileSync(pjPath, "utf8")); L257: const nonKnowledge = (pj.skills || []).filter((s) => !s.startsWith("./skills/knowledge/"));

Findings

1 High5 Medium5 Low

HighSemantic Analysis Limitedinstall/codex.mjs#virtual:normalized:round1

MediumDynamic Requirepipeline/scripts/skill-conformance.mjs#virtual:normalized:round1

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperpipeline/scripts/github-ssh-setup.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptopipeline/scripts/build-stack-plugins.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @mmerterden/multi-agent-pipeline@16.1.2.

See all versions of @mmerterden/multi-agent-pipeline for other recorded verdicts.

Review the evidence and your use of @mmerterden/multi-agent-pipeline@16.1.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-19 22:30:55.536Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.