registry / @vodailoc/kilo-kit-mcp / 1.3.1

@vodailoc/kilo-kit-mcp@1.3.1

Kilo-Kit MCP server for adaptive skill routing, skill loading, and validation.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.

Trigger

Running kilo-kit-init init, or starting kilo-kit-mcp and invoking its MCP tools.

Impact

Can steer supported agents toward Kilo-Kit workflow rules and store local routing/memory data; no exfiltration or destructive behavior confirmed.

Mechanism

explicit AI-agent bootstrap plus local MCP workflow orchestration

Rationale

Because the package intentionally mutates broad AI-agent instruction files via an explicit user command, it fits a warning-level agent capability abuse case, but there is no evidence of unconsented lifecycle mutation or malicious behavior. Do not publish-block; downgrade to warn.

Evidence

package.jsonmcp/dist/init.jsmcp/dist/server.jsmcp/dist/paths.jsmcp/dist/registry.jsmcp/dist/validator.jsmcp/dist/route-analytics.jsskills/design/ui-styling/scripts/tests/test_shadcn_add.pyAGENTS.mdCLAUDE.mdGEMINI.md.kilo/decision-trail.jsonl~/.kilo-kit/orchestrator.sqlite

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

mcp/dist/init.js user-invoked bin writes Kilo-Kit blocks into AGENTS.md, CLAUDE.md, or GEMINI.md.
mcp/dist/server.js registers MCP server instructions/prompts that steer host agents to call Kilo-Kit workflow tools.
mcp/dist/server.js creates local orchestration memory at KILO_KIT_MEMORY_PATH or ~/.kilo-kit/orchestrator.sqlite.
mcp/dist/route-analytics.js can append route telemetry only when KILO_KIT_WRITE_DECISIONS=true.

Evidence against

package.json has no preinstall/install/postinstall hook; only prepack/prepublishOnly build/test hooks.
mcp/dist/init.js is explicit CLI setup, validates target directory, rejects symlink targets, and uses marker-bounded updates.
mcp/dist/server.js tools are local MCP routing/skill loading/validation; no runtime network fetch endpoints found.
mcp/dist/paths.js constrains resource and skill reads inside repo; registry validates category/skill path segments.
mcp/dist/validator.js execFile runs a fixed local validator script with fixed args, not shell-expanded user input.
Scanner payload hint in skills/design/ui-styling/scripts/tests/test_shadcn_add.py is test code for a shadcn helper, not an install-time payload.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 50 file(s), 288 KB of source, external domains: example.com

Source & flagged code

24 flagged

skills/operations/chrome-devtools/scripts/evaluate.jsView file

Lines 11-50javascript

11 if (!args.script) {

12 outputError(new Error('--script is required'));

13 return;

14 }

16 try {

17 const browser = await getBrowser({

18 headless: args.headless !== 'false'

19 });

21 const page = await getPage(browser);

23 // Navigate if URL provided

24 if (args.url) {

25 await page.goto(args.url, {

26 waitUntil: args['wait-until'] || 'networkidle2'

27 });

28 }

30 const result = await page.evaluate((script) => {

31 // eslint-disable-next-line no-eval

32 return eval(script);

33 }, args.script);

Low

Eval

Package source references a known benign dynamic code generation pattern.

skills/operations/chrome-devtools/scripts/evaluate.jsView on unpkg · L31

35 outputJSON({

36 success: true,

37 result: result,

38 url: page.url()

39 });

41 if (args.close !== 'false') {

42 await closeBrowser();

43 }

44 } catch (error) {

45 outputError(error);

46 }

47}

49evaluate();

skills/design/mobile-design/scripts/mobile_audit.pyView file

•path = skills/design/mobile-design/scripts/mobile_audit.py kind = build_helper sizeBytes = 35976 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/design/mobile-design/scripts/mobile_audit.pyView on unpkg

skills/design/ui-styling/scripts/tests/test_shadcn_add.pyView file

•path = skills/design/ui-styling/scripts/tests/test_shadcn_add.py kind = payload_in_excluded_dir sizeBytes = 9920 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/design/ui-styling/scripts/tests/test_shadcn_add.pyView on unpkg

skills/engineering/backend-development/references/backend-testing.mdView file

Lines 40-80markdown

40```typescript

41// Good: Test single responsibility

42describe('UserService', () => {

43 describe('createUser', () => {

44 it('should create user with valid data', async () => {

45 const

skills/engineering/better-auth/references/database-integration.mdView file

Lines 20-78markdown

21export const auth = betterAuth({

22 database: new Database("./sqlite.db"),

23 // or

24 database: new Database(":memory:") // In-memory for testing

25});

26```

28### PostgreSQL

30```ts

31import { betterAuth } from "better-auth";

skills/engineering/better-auth/references/email-password-auth.mdView file

Lines 31-91markdown

31 password: {

32 minLength: 8,

33 requireUppercase: true,

34 requireLowercase: true,

35 requireNumbers: true,

36 requireSpecialChars: true

37 }

38 }

39});

40```

42## Client Usage

skills/engineering/better-auth/references/advanced-features.mdView file

47patternName = generic_password severity = medium line = 47 matchedText = password...tity

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L47

68patternName = generic_password severity = medium line = 68 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L68

77patternName = generic_password severity = medium line = 77 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L77

skills/engineering/better-auth/SKILL.mdView file

100patternName = generic_password severity = medium line = 100 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/SKILL.md

skills/engineering/better-auth/SKILL.mdView on unpkg · L100

107patternName = generic_password severity = medium line = 107 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/SKILL.md

skills/engineering/better-auth/SKILL.mdView on unpkg · L107

skills/kilo-kit/quality/testing/SKILL.mdView file

261patternName = generic_password severity = medium line = 261 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/quality/testing/SKILL.md

skills/kilo-kit/quality/testing/SKILL.mdView on unpkg · L261

275patternName = generic_password severity = medium line = 275 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/quality/testing/SKILL.md

skills/kilo-kit/quality/testing/SKILL.mdView on unpkg · L275

skills/kilo-kit/development/backend/SKILL.mdView file

378patternName = generic_password severity = medium line = 378 matchedText = const dt.... };

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/development/backend/SKILL.md

skills/kilo-kit/development/backend/SKILL.mdView on unpkg · L378

402patternName = generic_password severity = medium line = 402 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/development/backend/SKILL.md

skills/kilo-kit/development/backend/SKILL.mdView on unpkg · L402

Source & flagged code

24 flagged · loading source

skills/operations/chrome-devtools/scripts/evaluate.jsView file

31// eslint-disable-next-line no-eval L32: return eval(script); L33: }, args.script);

Low

Eval

Package source references a known benign dynamic code generation pattern.

skills/operations/chrome-devtools/scripts/evaluate.jsView on unpkg · L31

skills/design/mobile-design/scripts/mobile_audit.pyView file

•path = skills/design/mobile-design/scripts/mobile_audit.py kind = build_helper sizeBytes = 35976 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/design/mobile-design/scripts/mobile_audit.pyView on unpkg

skills/design/ui-styling/scripts/tests/test_shadcn_add.pyView file

•path = skills/design/ui-styling/scripts/tests/test_shadcn_add.py kind = payload_in_excluded_dir sizeBytes = 9920 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/design/ui-styling/scripts/tests/test_shadcn_add.pyView on unpkg

skills/engineering/backend-development/references/backend-testing.mdView file

60patternName = generic_password severity = medium line = 60 matchedText = const us...' };

Medium

Secret Pattern

Hardcoded password in skills/engineering/backend-development/references/backend-testing.md

skills/engineering/backend-development/references/backend-testing.mdView on unpkg · L60

skills/engineering/better-auth/references/database-integration.mdView file

40patternName = generic_password severity = medium line = 40 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/database-integration.md

skills/engineering/better-auth/references/database-integration.mdView on unpkg · L40

58patternName = generic_password severity = medium line = 58 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/database-integration.md

skills/engineering/better-auth/references/database-integration.mdView on unpkg · L58

skills/engineering/better-auth/references/email-password-auth.mdView file

51patternName = generic_password severity = medium line = 51 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L51

71patternName = generic_password severity = medium line = 71 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L71

167patternName = generic_password severity = medium line = 167 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L167

218patternName = generic_password severity = medium line = 218 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L218

226patternName = generic_password severity = medium line = 226 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L226

232patternName = generic_password severity = medium line = 232 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L232

400patternName = generic_password severity = medium line = 400 matchedText = password...rity

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/email-password-auth.md

skills/engineering/better-auth/references/email-password-auth.mdView on unpkg · L400

skills/engineering/better-auth/references/advanced-features.mdView file

47patternName = generic_password severity = medium line = 47 matchedText = password...tity

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L47

68patternName = generic_password severity = medium line = 68 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L68

77patternName = generic_password severity = medium line = 77 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L77

441patternName = generic_password severity = medium line = 441 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L441

516patternName = generic_password severity = medium line = 516 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L516

skills/engineering/better-auth/SKILL.mdView file

100patternName = generic_password severity = medium line = 100 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/SKILL.md

skills/engineering/better-auth/SKILL.mdView on unpkg · L100

107patternName = generic_password severity = medium line = 107 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/SKILL.md

skills/engineering/better-auth/SKILL.mdView on unpkg · L107

skills/kilo-kit/quality/testing/SKILL.mdView file

261patternName = generic_password severity = medium line = 261 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/quality/testing/SKILL.md

skills/kilo-kit/quality/testing/SKILL.mdView on unpkg · L261

275patternName = generic_password severity = medium line = 275 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/quality/testing/SKILL.md

skills/kilo-kit/quality/testing/SKILL.mdView on unpkg · L275

skills/kilo-kit/development/backend/SKILL.mdView file

378patternName = generic_password severity = medium line = 378 matchedText = const dt.... };

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/development/backend/SKILL.md

skills/kilo-kit/development/backend/SKILL.mdView on unpkg · L378

402patternName = generic_password severity = medium line = 402 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/development/backend/SKILL.md

skills/kilo-kit/development/backend/SKILL.mdView on unpkg · L402

Findings

1 High24 Medium6 Low

HighPayload In Excluded Dirskills/design/ui-styling/scripts/tests/test_shadcn_add.py

MediumEnvironment Vars

MediumShips Build Helperskills/design/mobile-design/scripts/mobile_audit.py

MediumStructural Risk Force Deep Review

MediumSecret Patternskills/engineering/backend-development/references/backend-testing.md

MediumSecret Patternskills/engineering/better-auth/references/database-integration.md

MediumSecret Patternskills/engineering/better-auth/references/email-password-auth.md

MediumSecret Patternskills/engineering/better-auth/references/advanced-features.md

MediumSecret Patternskills/engineering/better-auth/SKILL.md

MediumSecret Patternskills/kilo-kit/quality/testing/SKILL.md

MediumSecret Patternskills/kilo-kit/development/backend/SKILL.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvalskills/operations/chrome-devtools/scripts/evaluate.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

24 flagged

skills/operations/chrome-devtools/scripts/evaluate.jsView file

Lines 11-50javascript

11 if (!args.script) {

12 outputError(new Error('--script is required'));

13 return;

14 }

16 try {

17 const browser = await getBrowser({

18 headless: args.headless !== 'false'

19 });

21 const page = await getPage(browser);

23 // Navigate if URL provided

24 if (args.url) {

25 await page.goto(args.url, {

26 waitUntil: args['wait-until'] || 'networkidle2'

27 });

28 }

30 const result = await page.evaluate((script) => {

31 // eslint-disable-next-line no-eval

32 return eval(script);

33 }, args.script);

Low

Eval

Package source references a known benign dynamic code generation pattern.

skills/operations/chrome-devtools/scripts/evaluate.jsView on unpkg · L31

35 outputJSON({

36 success: true,

37 result: result,

38 url: page.url()

39 });

41 if (args.close !== 'false') {

42 await closeBrowser();

43 }

44 } catch (error) {

45 outputError(error);

46 }

47}

49evaluate();

skills/design/mobile-design/scripts/mobile_audit.pyView file

•path = skills/design/mobile-design/scripts/mobile_audit.py kind = build_helper sizeBytes = 35976 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/design/mobile-design/scripts/mobile_audit.pyView on unpkg

skills/design/ui-styling/scripts/tests/test_shadcn_add.pyView file

•path = skills/design/ui-styling/scripts/tests/test_shadcn_add.py kind = payload_in_excluded_dir sizeBytes = 9920 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/design/ui-styling/scripts/tests/test_shadcn_add.pyView on unpkg

skills/engineering/backend-development/references/backend-testing.mdView file

Lines 40-80markdown

40```typescript

41// Good: Test single responsibility

42describe('UserService', () => {

43 describe('createUser', () => {

44 it('should create user with valid data', async () => {

45 const

skills/engineering/better-auth/references/database-integration.mdView file

Lines 20-78markdown

21export const auth = betterAuth({

22 database: new Database("./sqlite.db"),

23 // or

24 database: new Database(":memory:") // In-memory for testing

25});

26```

28### PostgreSQL

30```ts

31import { betterAuth } from "better-auth";

skills/engineering/better-auth/references/email-password-auth.mdView file

Lines 31-91markdown

31 password: {

32 minLength: 8,

33 requireUppercase: true,

34 requireLowercase: true,

35 requireNumbers: true,

36 requireSpecialChars: true

37 }

38 }

39});

40```

42## Client Usage

skills/engineering/better-auth/references/advanced-features.mdView file

47patternName = generic_password severity = medium line = 47 matchedText = password...tity

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L47

68patternName = generic_password severity = medium line = 68 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L68

77patternName = generic_password severity = medium line = 77 matchedText = password...ord"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/references/advanced-features.md

skills/engineering/better-auth/references/advanced-features.mdView on unpkg · L77

skills/engineering/better-auth/SKILL.mdView file

100patternName = generic_password severity = medium line = 100 matchedText = password...23",

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/SKILL.md

skills/engineering/better-auth/SKILL.mdView on unpkg · L100

107patternName = generic_password severity = medium line = 107 matchedText = password...123"

Medium

Secret Pattern

Hardcoded password in skills/engineering/better-auth/SKILL.md

skills/engineering/better-auth/SKILL.mdView on unpkg · L107

skills/kilo-kit/quality/testing/SKILL.mdView file

261patternName = generic_password severity = medium line = 261 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/quality/testing/SKILL.md

skills/kilo-kit/quality/testing/SKILL.mdView on unpkg · L261

275patternName = generic_password severity = medium line = 275 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/quality/testing/SKILL.md

skills/kilo-kit/quality/testing/SKILL.mdView on unpkg · L275

skills/kilo-kit/development/backend/SKILL.mdView file

378patternName = generic_password severity = medium line = 378 matchedText = const dt.... };

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/development/backend/SKILL.md

skills/kilo-kit/development/backend/SKILL.mdView on unpkg · L378

402patternName = generic_password severity = medium line = 402 matchedText = .send({ ...' })

Medium

Secret Pattern

Hardcoded password in skills/kilo-kit/development/backend/SKILL.md

skills/kilo-kit/development/backend/SKILL.mdView on unpkg · L402