registry / @programinglive/dev-workflow-mcp-server / 1.13.9
@programinglive/dev-workflow-mcp-server@1.13.9
MCP server to enforce development workflow discipline
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe automatic postinstall action creates an empty workflow state file consistent with the package’s stated purpose. Network installation and broader OpenCode or agent configuration changes are tied to explicit setup scripts; no malicious data flow or concealed automatic behavior was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
npm postinstall creates the initial project state file; npm run setup and the bootstrap shell helper require explicit invocation.
Impact
The automatic install effect is a project-local state file; no credential collection, unrelated data transmission, or hidden startup behavior was identified.
Mechanism
The install hook writes an empty workflow-state record. The optional setup command configures OpenCode and may create AGENTS.md; the bootstrap helper can install RTK from its official GitHub host.
AI rationale
The automatic postinstall action creates an empty workflow state file consistent with the package’s stated purpose. Network installation and broader OpenCode or agent configuration changes are tied to explicit setup scripts; no malicious data flow or concealed automatic behavior was identified.
Evidence
${INIT_CWD || process.cwd()}/.state/workflow-state.json${configDir}/opencode.json${configDir}/secrets/opencode-backup-<timestamp>.json${INIT_CWD || process.cwd()}/AGENTS.md
Network endpoints2
github.com/obra/superpowers.gitraw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.sh
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as an MCP server for development workflow discipline.
- The postinstall hook runs install.js, which initializes an empty .state/workflow-state.json under the invoking project directory.
- The package starts its MCP server only when index.js is run directly.
- The broader OpenCode configuration and AGENTS.md setup is performed by the explicitly invoked setup command.
- The bootstrap shell helper downloads the RTK installer from its project’s official GitHub host only when the helper is run and RTK is absent.
Evidence against
- Postinstall does create a file in the invoking project automatically.
- The optional setup command modifies OpenCode configuration and may create project-level AGENTS.md instructions.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgexec.jsView file
1import { exec as execCallback, execFile as execFileCallback } from "child_process";
L2: import { existsSync } from "fs";
High
Findings
6 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processexec.js
HighShellscripts/install-husky.js
HighSandbox Evasion Gated Capabilityscripts/setup-stack.js
HighRuntime Package Installscripts/setup-stack.js
HighSemantic Analysis Limitedexec.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helperscripts/setup-test-dbs.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptofactory-client.js
Affected versions and remediation
This report applies to @programinglive/dev-workflow-mcp-server@1.13.9.
See all versions of @programinglive/dev-workflow-mcp-server for other recorded verdicts.
- Review the evidence and your use of @programinglive/dev-workflow-mcp-server@1.13.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.