registry / @programinglive/dev-workflow-mcp-server / 1.19.29
@programinglive/dev-workflow-mcp-server@1.19.29
MCP server to enforce development workflow discipline
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe lifecycle side effects initialize state for the package’s stated workflow purpose, and the Husky helper skips registry installs. Network reporting is limited to metadata sent to an operator-configured monitor; the agent configuration changes require explicitly running the setup command.
Static reason
One or more suspicious static signals were detected.
Trigger
npm install runs the lifecycle hooks; `npm run setup` runs the OpenCode configurator; optional monitor reports occur when workflow state is saved and `DEVWF_MONITOR_URL` is set.
Impact
No malicious collection, credential forwarding, or unrequested account action was identified.
Mechanism
The postinstall hook creates a project workflow-state file. The separate setup command registers the MCP server and plugin. Monitor reports use a user-configured URL and send workflow metadata.
AI rationale
The lifecycle side effects initialize state for the package’s stated workflow purpose, and the Husky helper skips registry installs. Network reporting is limited to metadata sent to an operator-configured monitor; the agent configuration changes require explicitly running the setup command.
Evidence
.state/workflow-state.json<OpenCode config directory>/opencode.json<OpenCode config directory>/secrets/opencode-backup-<timestamp>.json<INIT_CWD>/AGENTS.md
Network endpoints4
raw.githubusercontent.com/rtk-ai/rtk/refs/heads/master/install.shgithub.com/obra/superpowers.gitregistry.npmjs.org/@programinglive/dev-workflow-mcp-server/latestDEVWF_MONITOR_URL (operator-configured endpoint)
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest’s lifecycle hooks run a workflow-state initializer and a Husky helper.
- The postinstall initializer creates `.state/workflow-state.json` in the installing project and leaves an existing state file intact; this matches the package’s workflow-state purpose.
- The prepare helper skips Husky setup when the package is not in a Git checkout.
- OpenCode configuration and AGENTS.md setup runs only when the separate setup script is directly invoked.
- Monitor reporting requires a configured `DEVWF_MONITOR_URL`; its documented payload is workflow metadata, not file contents.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgexec.jsView file
1import { exec as execCallback, execFile as execFileCallback } from "child_process";
L2: import { existsSync } from "fs";
High
Findings
6 High6 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processexec.js
HighShellscripts/install-husky.js
HighSandbox Evasion Gated Capabilityscripts/setup-stack.js
HighRuntime Package Installscripts/setup-stack.js
HighSemantic Analysis Limitedexec.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiresecurity/log-bridge.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperscripts/setup-test-dbs.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
Affected versions and remediation
This report applies to @programinglive/dev-workflow-mcp-server@1.19.29.
See all versions of @programinglive/dev-workflow-mcp-server for other recorded verdicts.
- Review the evidence and your use of @programinglive/dev-workflow-mcp-server@1.19.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.