registry / dba-master / 1.2.1

dba-master@1.2.1

MCP server para introspecção profunda de bancos Oracle, voltado a consumo por agentes de IA

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 9 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 40 file(s), 146 KB of source, external domains: opencode.ai

Source & flagged code

3 flagged

dist/setup/index.jsView file

Lines 1-22javascript

1import { intro, outro, note, multiselect, spinner, isCancel, cancel, log, text, select, password as promptPassword, confirm } from "@clack/prompts";

2import fs from "node:fs";

3import { execFileSync } from "node:child_process";

4import { resolve, dirname } from "node:path";

5import { fileURLToPath } from "node:url";

6import { homedir } from "node:os";

7import { installMcp, uninstallMcp } from "./install-mcp.js";

8import { installAgents, uninstallAgents } from "./install-agents.js";

9import { showBanner } from "./banner.js";

10const __dirname = dirname(fileURLToPath(import.meta.url));

11// Exemplo de connectString por engine, mostrado no prompt do configure.

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/setup/index.jsView on unpkg · L2

12const CONNECT_EXAMPLE = {

13 oracle: "localhost:1521/ORCL",

14 postgres: "postgresql://user:senha@localhost:5432/db",

15 mysql: "mysql://user:senha@localhost:3306/db",

16 sqlserver: "Server=localhost,1433;Database=db",

17};

18const connectExample = (engine) => CONNECT_EXAMPLE[engine] ?? CONNECT_EXAMPLE.oracle;

19// Nome de env var a partir do nome da conexão: DBA_<CONN>_<CAMPO>.

20const envVarName = (connName, field) => `DBA_${connName.toUpperCase().replace(/[^A-Z0-9]+/g, "_").replace(/^_+|_

21// Escapa valor p/ string entre aspas simples do shell POSIX.

22const sqEscape = (s) => s.replace(/'/g, `'\\''`);

dist/src/config.test.jsView file

Lines 35-71javascript

35 assert.strictEqual(connections.dev.poolMax, DEFAULT_POOL_MAX);

36 assert.strictEqual(connections.dev.readOnly, true);

37 assert.deepStrictEqual(connections.dev.schemaFilter, []);

38 });

39 test("preserva settings explícitos do connections.json", () => {

Source & flagged code

3 flagged · loading source

dist/setup/index.jsView file

2import fs from "node:fs"; L3: import { execFileSync } from "node:child_process"; L4: import { resolve, dirname } from "node:path"; ... L9: import { showBanner } from "./banner.js"; L10: const __dirname = dirname(fileURLToPath(import.meta.url)); L11: // Exemplo de connectString por engine, mostrado no prompt do configure. ... L25: function shellRcPath() { L26: const sh = process.env.SHELL ?? ""; L27: if (sh.includes("zsh")) L28: return resolve(homedir(), ".zshrc"); L29: if (sh.includes("bash")) ... L41: function upsertEnvVars(connName, pairs) {

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code