registry / @programinglive/dev-workflow-mcp-server / 1.13.2
@programinglive/dev-workflow-mcp-server@1.13.2
MCP server to enforce development workflow discipline
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe lifecycle scripts perform package-related local setup: initializing workflow state and conditionally installing Husky hooks. The broader OpenCode and agent configuration setup is a separate explicit command; I found no malicious collection or transmission behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm postinstall or prepare; OpenCode configuration setup requires `npm run setup` or the bootstrap script.
Impact
No credential collection, unrelated data transfer, or concealed execution was identified. The automatic local state-file write is consistent with the package's workflow-tracking purpose.
Mechanism
The postinstall creates an absent `.state/workflow-state.json`; prepare conditionally invokes Husky in a Git checkout. The setup command separately edits OpenCode configuration and can install a plugin.
AI rationale
The lifecycle scripts perform package-related local setup: initializing workflow state and conditionally installing Husky hooks. The broader OpenCode and agent configuration setup is a separate explicit command; I found no malicious collection or transmission behavior.
Evidence
.state/workflow-state.jsonAGENTS.mdopencode.jsonplugins/
Network endpoints3
raw.githubusercontent.comgithub.comopencode.ai
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package is an MCP server for development workflow tracking; its manifest maps `postinstall` to `install.js` and `setup` to a separate command.
- The postinstall uses `INIT_CWD` and creates `.state/workflow-state.json` only when it is absent; it skips when the path is inside `node_modules`.
- The `prepare` script skips outside a Git checkout and otherwise invokes Husky to install Git hooks.
- The OpenCode configuration setup is available through `npm run setup` and runs only when `setup-stack.js` is invoked directly.
- The MCP server starts only when `index.js` is run directly, not when it is imported.
Evidence against
- The postinstall automatically writes a workflow state file into the invoking project when that file does not exist.
- The prepare lifecycle may install Git hooks when the package itself is in a Git checkout.
- The explicit setup command can change OpenCode configuration and install the Superpowers plugin.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgexec.jsView file
1import { exec as execCallback, execFile as execFileCallback } from "child_process";
L2: import { existsSync } from "fs";
High
Findings
1 Critical5 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadb/adapters/sqlite.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processexec.js
HighShellscripts/install-husky.js
HighSandbox Evasion Gated Capabilityscripts/setup-stack.js
HighRuntime Package Installscripts/setup-stack.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperscripts/setup-test-dbs.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptofactory-client.js
Affected versions and remediation
This report applies to @programinglive/dev-workflow-mcp-server@1.13.2.
See all versions of @programinglive/dev-workflow-mcp-server for other recorded verdicts.
- Review the evidence and your use of @programinglive/dev-workflow-mcp-server@1.13.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.