Loading npm security reports…

codesift-mcp@0.15.5: AI-agent control-surface risk | LPM Firewall

registry / codesift-mcp / 0.15.5

codesift-mcp@0.15.5

MCP server for code intelligence — 146 tools for symbol search, call graph, semantic search, route tracing, community detection, LSP bridge, secret detection, conversation search, and Hono framework intelligence

AI Security Review

scanned 9h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. The install hook automatically runs platform setup, which can add project rules and configure AI editor integrations. This is an unconsented mutation of AI-agent control surfaces during npm installation.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

Installing the package through npm invokes its postinstall hook.

Impact

The consumer project and supported AI clients may receive persistent CodeSift instructions and integration configuration without a separate user command.

Mechanism

The hook runs `codesift setup all`; setup covers Codex and Gemini and can append package-provided rules to project instruction files, alongside platform configuration and hooks.

Policy narrative

During npm installation, the postinstall hook invokes setup for all supported platforms. The setup path installs platform integrations and rules, including writing package-provided instructions to Codex and Gemini project instruction files. This changes AI-agent configuration without requiring a separate user command or consent prompt.

AI rationale

The postinstall hook triggers setup across supported platforms, and the setup code writes AI-agent instructions and configures integrations. This meets the policy for unconsented install-time mutation of AI-agent control surfaces.

Evidence

package.jsondist/cli/setup.jsdist/cli/setup/rules.jsAGENTS.mdGEMINI.md

Decision evidence

Source & flagged code

22 flagged · loading source

package.jsonView file

•scripts.postinstall = node ./dist/cli.js setup all 2>/dev/null && echo ' ✨ CodeSift MCP installed and configured for all platforms. ⚠️ Restart your AI client (Cmd+Q for Claude Code) to load new MCP...

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node ./dist/cli.js setup all 2>/dev/null && echo ' ✨ CodeSift MCP installed and configured for all platforms. ⚠️ Restart your AI client (Cmd+Q for Claude Code) to load new MCP...

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/tools/pg-introspection.jsView file

13const pgSpecifier = "pg"; L14: const mod = (await import(/* @vite-ignore */ pgSpecifier)); L15: // Handle both ESM default-export and CJS named-export shapes.

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/tools/pg-introspection.jsView on unpkg · L13

dist/tools/index-tools/snapshots.jsView file

118const raw = await readFile(versionsPath, "utf-8"); L119: storedVersions = JSON.parse(raw); L120: }

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tools/index-tools/snapshots.jsView on unpkg · L118

dist/cli/service.jsView file

6Trigger-reachable persistence chain: scripts.postinstall -> dist/cli.js -> dist/cli/commands.js -> dist/cli/commands-admin.js -> dist/cli/service.js L6: import { fileURLToPath } from "node:url"; L7: import { execFileSync } from "node:child_process"; L8: /** ... L66: export function buildServicePlan(opts) { L67: const home = opts.home ?? homedir(); L68: const os = opts.os ?? platform(); ... L83: unitPath, L84: stdoutLog: join(logDir, "daemon.out.log"), L85: stderrLog: join(logDir, "daemon.err.log"), ... L166: Description=CodeSift shared MCP daemon L167: Documentation=https://github.com/greglas75/codesift L168: After=network.target

High

Trigger Reachable Persistence

A manifest entrypoint or package-local install chain reaches persistence behavior.

dist/cli/service.jsView on unpkg · L6

6import { fileURLToPath } from "node:url"; L7: import { execFileSync } from "node:child_process"; L8: /** ... L66: export function buildServicePlan(opts) { L67: const home = opts.home ?? homedir(); L68: const os = opts.os ?? platform(); ... L83: unitPath, L84: stdoutLog: join(logDir, "daemon.out.log"), L85: stderrLog: join(logDir, "daemon.err.log"), ... L166: Description=CodeSift shared MCP daemon L167: Documentation=https://github.com/greglas75/codesift L168: After=network.target

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/cli/service.jsView on unpkg · L6

dist/cli/git-hooks-installer.jsView file

•Manifest-trigger-reachable source links an external AI-agent control path to a behavior-bearing write operation. function resolvebundledhooksdir() { const here = dirname(fileurltopath(import.meta.url)); const candidates = [ join(here, "..", "..", "hooks"), join(here, "..", "..", "..", "hooks"), ]; for (const c of candidates) { if (existssync(c)) return c; } throw new error(`bundled hooks directory not found. looked in: ${candidates.join(", ")}`); } function sha256(content) { return createhash("sha256").update(content).digest("hex"); }

High

Trigger Reachable External Ai Agent Control Surface Mutation

Manifest-trigger-reachable source writes behavior-bearing configuration into a user or project AI-agent control surface.

dist/cli/git-hooks-installer.jsView on unpkg

dist/parser/languages/tree-sitter-go.wasmView file

•path = dist/parser/languages/tree-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/parser/languages/tree-sitter-go.wasmView on unpkg

hooks/hook-chain.shView file

•path = hooks/hook-chain.sh kind = build_helper sizeBytes = 207 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/hook-chain.shView on unpkg

dist/cli/hooks/pre-tool-use.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 7

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/cli/hooks/pre-tool-use.js#virtual:normalized:round1View on unpkg

dist/install-check.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/install-check.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/install-check.jsView on unpkg

dist/cli/hooks/post-tool-use.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/cli/hooks/post-tool-use.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/hooks/post-tool-use.jsView on unpkg

dist/cli/setup/mcp.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.14.0 matchedPath = dist/cli/setup/mcp.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.14.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/setup/mcp.jsView on unpkg

dist/tools/project-profile-extractors.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/project-profile-extractors.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/project-profile-extractors.jsView on unpkg

dist/cli/hooks/pre-tool-use.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/cli/hooks/pre-tool-use.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/cli/hooks/pre-tool-use.jsView on unpkg

dist/lsp/lsp-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/lsp/lsp-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/lsp/lsp-tools.jsView on unpkg

dist/tools/dependency-audit-freshness-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/dependency-audit-freshness-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/dependency-audit-freshness-tools.jsView on unpkg

dist/tools/dependency-audit-vulnerability-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/dependency-audit-vulnerability-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/dependency-audit-vulnerability-tools.jsView on unpkg

dist/tools/insights-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/insights-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/insights-tools.jsView on unpkg

dist/tools/migration-lint-tools.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/migration-lint-tools.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/migration-lint-tools.jsView on unpkg

dist/tools/wiki-module-builder.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/wiki-module-builder.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/wiki-module-builder.jsView on unpkg

dist/tools/async-correctness.jsView file

•matchType = normalized_sha256 matchedPackage = codesift-mcp@0.17.0 matchedPath = dist/tools/async-correctness.js matchedIdentity = npm:Y29kZXNpZnQtbWNw:0.17.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/tools/async-correctness.jsView on unpkg