registry / @mmerterden/multi-agent-pipeline / 19.1.2

@mmerterden/multi-agent-pipeline@19.1.2

⚠ Under review

6-phase AI development pipeline with full orchestration on Claude Code, Copilot CLI and Codex CLI. Analysis, planning, TDD, CLI-aware parallel review with consensus surfacing + Fable triage, default-FAIL evidence gates, secret + intent guards, per-phase c

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 16 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 118 file(s), 1.18 MB of source, external domains: github.com, mmerterden.com, mmerterden.vercel.app, registry.npmjs.org

Source & flagged code

8 flagged

pipeline/scripts/keychain.pyView file

143patternName = generic_password severity = medium line = 143

Medium

Secret Pattern

Package contains a possible secret pattern.

pipeline/scripts/keychain.pyView on unpkg · L143

159patternName = generic_password severity = medium line = 159

Medium

Secret Pattern

Hardcoded password in pipeline/scripts/keychain.py

pipeline/scripts/keychain.pyView on unpkg · L159

pipeline/scripts/verify-citations.mjsView file

46import { resolve as resolvePath, sep } from "node:path"; L47: import { spawnSync } from "node:child_process"; L48: import { runMain } from "../lib/fatal.mjs";

High

Child Process

Package source references child process execution.

pipeline/scripts/verify-citations.mjsView on unpkg · L46

pipeline/scripts/skill-conformance.mjs#virtual:normalized:round1View file

366// would be extracted into the manifest and injected into every reviewer L367: // prompt via the shared ${CRITERIA} block. Contain it to the skill"s own\n // directory; a declaration that escapes is recorded, not followed.\n const rulesPath = resolv... L368: // report a clean review over criteria it never loaded.

Medium

Dynamic Require

Package source references dynamic require/import behavior.

pipeline/scripts/skill-conformance.mjs#virtual:normalized:round1View on unpkg · L366

pipeline/scripts/build-stack-plugins.mjsView file

23* L24: * Exit code 0 always (report-only); prints a JSON-ish summary + per-plugin diff. L25: */ ... L37: import { fileURLToPath } from "node:url"; L38: import { spawnSync } from "node:child_process"; L39: import { createHash } from "node:crypto"; ... L62: // gets a string instead of throwing a raw TypeError before any diagnostic. L63: const HOME = process.env.HOME || process.env.USERPROFILE; L64: if (!HOME) { ... L263: // regenerate plugin.json skills[]: keep non-knowledge entries, rebuild knowledge set L264: const pj = JSON.parse(readFileSync(pjPath, "utf8")); L265: const nonKnowledge = (pj.skills || []).filter((s) => !s.startsWith("./skills/knowledge/"));

Low

Weak Crypto

Package source references weak cryptographic algorithms.

pipeline/scripts/build-stack-plugins.mjsView on unpkg · L23

pipeline/scripts/usage-register.mjsView file

110if (!name || !existsSync(credStore)) return null; L111: const r = spawnSync("bash", [credStore, "get", name], { encoding: "utf8", timeout: 8000 }); L112: const out = (r.stdout || "").trim(); L113: return out || null; ... L119: try { L120: const res = await fetch(url, { L121: method: "POST", L122: headers: { "Content-Type": "application/json" }, L123: body: JSON.stringify(body), L124: signal: ctrl.signal,

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

pipeline/scripts/usage-register.mjsView on unpkg · L110

pipeline/scripts/github-ssh-setup.shView file

•path = pipeline/scripts/github-ssh-setup.sh kind = build_helper sizeBytes = 5933 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

pipeline/scripts/github-ssh-setup.shView on unpkg

install/_mcp-register.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 15

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

install/_mcp-register.mjs#virtual:normalized:round1View on unpkg

Source & flagged code

8 flagged · loading source

pipeline/scripts/keychain.pyView file

143patternName = generic_password severity = medium line = 143

Medium

Secret Pattern

Package contains a possible secret pattern.

pipeline/scripts/keychain.pyView on unpkg · L143

159patternName = generic_password severity = medium line = 159

Medium

Secret Pattern

Hardcoded password in pipeline/scripts/keychain.py

pipeline/scripts/keychain.pyView on unpkg · L159

pipeline/scripts/verify-citations.mjsView file

46import { resolve as resolvePath, sep } from "node:path"; L47: import { spawnSync } from "node:child_process"; L48: import { runMain } from "../lib/fatal.mjs";

High

Child Process

Package source references child process execution.

Findings

4 High7 Medium5 Low

HighChild Processpipeline/scripts/verify-citations.mjs

HighShell

HighCommand Output Exfiltrationpipeline/scripts/usage-register.mjs

HighSemantic Analysis Limitedinstall/_mcp-register.mjs#virtual:normalized:round1

MediumSecret Patternpipeline/scripts/keychain.py

MediumDynamic Requirepipeline/scripts/skill-conformance.mjs#virtual:normalized:round1

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperpipeline/scripts/github-ssh-setup.sh

MediumStructural Risk Force Deep Review

MediumSecret Patternpipeline/scripts/keychain.py

LowScripts Present

LowWeak Cryptopipeline/scripts/build-stack-plugins.mjs

Affected versions and remediation

This report applies to @mmerterden/multi-agent-pipeline@19.1.2.

See all versions of @mmerterden/multi-agent-pipeline for other recorded verdicts.

Review the evidence and your use of @mmerterden/multi-agent-pipeline@19.1.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-20 21:04:14.450Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.