agile-sddf@4.0.0

Agile Spec-Driven-Development Framework for AI agents

AI Security Review

scanned 9d ago · by lpm-firewall-ai

The manifest has no lifecycle hook, and the inspected CLI and installer perform an explicit, destination-validated copy. The flagged files contain a test fixture and documentation/release validation logic; no concrete attack behavior was found.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A user runs agile-sddf install.

Impact

No harmful effect was identified in the reviewed behavior.

Mechanism

The CLI validates the selected runtime and copies package-owned skills and compatible agents to its configured destination.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json exposes a CLI and declares no lifecycle hook.
The CLI reaches installation only for an explicit install command; the installer copies package-owned skills and compatible agents to a selected runtime destination.
The flagged Python file is a test fixture with example assertions, not executable package setup.
verify-release.js checks manifests for a self-dependency.
check-doc-links.js validates local documentation links and rejects unsupported schemes.

Evidence against

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 27 file(s), 318 KB of source, external domains: github.com

Source & flagged code

6 flagged

skills/story-verify/examples/pytest-project/tests/test_auth.pyView file

Lines 1-16text

1# Test example for story-verify: pytest project

2# Used as input fixture to verify skill detects pytest and runs tests

4def test_login_success():

5 """Successful login returns a token."""

6 result = {"token": "abc123", "user_id": 1}

7 assert result["token"] is not None

8 assert result["user_id"] == 1

Low

Ai Review Evidence

The flagged Python file is a test fixture with example assertions, not executable package setup.

skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkg · L4

11def test_login_failure():

12 """Invalid credentials raise an error — this test is intentionally failing."""

13 # This test FAILS to demonstrate the VERIFY BLOQUEADO path (AC-5)

14 result = {"token": None, "error": "invalid_credentials"}

15 assert result["token"] is not None # intentional failure

•path = skills/story-verify/examples/pytest-project/tests/test_auth.py kind = payload_in_excluded_dir sizeBytes = 615 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkg

•path = skills/story-verify/examples/pytest-project/tests/test_auth.py kind = build_helper sizeBytes = 615 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkg

scripts/verify-release.jsView file

•stage = ast_semantic_analysis; reason = ast_trace_path_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

scripts/verify-release.jsView on unpkg

scripts/check-doc-links.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = agile-sddf@3.3.1 matchedIdentity = npm:YWdpbGUtc2RkZg:3.3.1 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/check-doc-links.jsView on unpkg

package.jsonView file

Lines 11-51json

11 "spec-driven-development",

12 "claude-code",

13 "ai-agents",

14 "user-stories"

15 ],

16 "license": "MIT",

17 "repository": {

Source & flagged code

6 flagged · loading source

skills/story-verify/examples/pytest-project/tests/test_auth.pyView file

•path = skills/story-verify/examples/pytest-project/tests/test_auth.py kind = payload_in_excluded_dir sizeBytes = 615 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkg

•path = skills/story-verify/examples/pytest-project/tests/test_auth.py kind = build_helper sizeBytes = 615 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/story-verify/examples/pytest-project/tests/test_auth.pyView on unpkg

4def test_login_success(): """Successful login returns a token.""" result = {"token": "abc123", "user_id": 1} assert result["token"] is not None assert result["user_

Low

Ai Review Evidence

Findings

3 High3 Medium6 Low

HighPayload In Excluded Dirskills/story-verify/examples/pytest-project/tests/test_auth.py

HighSemantic Analysis Limitedscripts/verify-release.js

HighPrevious Version Dangerous Deltascripts/check-doc-links.js

MediumEnvironment Vars

MediumShips Build Helperskills/story-verify/examples/pytest-project/tests/test_auth.py

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidenceskills/story-verify/examples/pytest-project/tests/test_auth.py

Affected versions and remediation

This report applies to agile-sddf@4.0.0.

See all versions of agile-sddf for other recorded verdicts.

Review the evidence and your use of agile-sddf@4.0.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-14 03:31:11.376Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.