agile-sddf@3.1.2
Agile Spec-Driven-Development Framework for AI agents
AI Security Review
scanned 1mo ago · by lpm-firewall-aiStatic inspection found a user-invoked AI-agent extension installer but no automatic lifecycle execution, self-dependency, network activity, credential access, or payload execution. The scanner's flagged test file is ordinary readable test fixture content.
Static reason
No blocking static signals were detected.
Trigger
The user runs agile-sddf install, optionally with --global or --force.
Impact
Installed runtime instructions may affect later AI-agent behavior; no exfiltration, remote execution, or stealth persistence was found.
Mechanism
Explicit copying of packaged AI skills and agent definitions into runtime configuration directories.
AI rationale
Static inspection found a user-invoked AI-agent extension installer but no automatic lifecycle execution, self-dependency, network activity, credential access, or payload execution. The scanner's flagged test file is ordinary readable test fixture content.
Evidence
scripts/install.jsconfig/runtimes.jsonpackage.json.claude/skills.claude/agents.opencode/skills.opencode/agents.github/skills.github/agents
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package provides an explicit CLI installer that copies its skills and agent definitions into selected AI runtime directories, including user-global locations.
- The installer can overwrite existing runtime files when the user supplies --force, affecting Claude Code, OpenCode, or GitHub Copilot configuration.
- The high-severity flagged Python file is a readable pytest fixture with an intentionally failing assertion, not a hidden binary or payload.
Evidence against
- package.json has no preinstall, install, postinstall, or prepare lifecycle script and has no self-dependency.
- No package runtime code performs network requests, secret harvesting, dynamic evaluation, or remote payload loading.
- The bundled postinstall module is inert and states that copying requires the explicit CLI command.
Behavioral surface
ChildProcessEnvironmentVarsFilesystem
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourceskills/story-verify/examples/pytest-project/tests/test_auth.pyView file
•path = skills/story-verify/examples/pytest-project/tests/test_auth.py
kind = payload_in_excluded_dir
sizeBytes = 630
magicHex = [redacted]
High
Payload In Excluded Dir
Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkg•path = skills/story-verify/examples/pytest-project/tests/test_auth.py
kind = build_helper
sizeBytes = 630
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkgscripts/verify-release.jsView file
•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1
Findings
2 High6 Medium4 Low
HighPayload In Excluded Dirskills/story-verify/examples/pytest-project/tests/test_auth.py
HighSemantic Analysis Limitedscripts/verify-release.js
MediumEnvironment Vars
MediumShips Build Helperskills/story-verify/examples/pytest-project/tests/test_auth.py
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidenceconfig/runtimes.json
MediumAi Review Evidencescripts/install.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to agile-sddf@3.1.2.
See all versions of agile-sddf for other recorded verdicts.
- Review the evidence and your use of agile-sddf@3.1.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.