registry / sdlc-agent-4-enterprise-server / 1.23.0

sdlc-agent-4-enterprise-server@1.23.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 3mo ago · by lpm-firewall-ai

The suspicious primitives are package-aligned, user-invoked features or an optional container launcher, not install-time or covert behavior. Source inspection found no concrete malicious chain.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs the package bin or invokes its MCP tools.

Impact

No unsolicited credential exfiltration, destructive action, or control-surface mutation established.

Mechanism

User-invoked MCP web tools and verified native-binding resolution.

AI rationale

The suspicious primitives are package-aligned, user-invoked features or an optional container launcher, not install-time or covert behavior. Source inspection found no concrete malicious chain.

Evidence

package.jsonsrc/index.tssrc/engine/db/resolver/index.tssrc/engine/db/resolver/download.tssrc/engine/db/resolver/manifest.tssrc/modules/web/WebModule.ts

Network endpoints2

github.com/dnguyenminh/Kiro-SDLC-Agents/releases/download/better-sqlite3-v12.10.0/api.duckduckgo.com/

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

Runtime can download a hashed native SQLite binding.
start.js has a START_OLLAMA-gated shell installer.
Web module exposes user-invoked fetch/download/API tools.

Evidence against

package.json has no preinstall/install/postinstall hook.
Bin entry is dist/index.js; no import-time installer found.
Native download uses a fixed GitHub URL and SHA-256 verification.
Web tools are explicit MCP capabilities with SSRF checks and workspace-bound downloads.
No credential harvesting, exfiltration, stealth persistence, or agent-config writes found.
Test secret finding is synthetic credential-detector input.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedProtestware

Source & flagged code

17 flagged

dist/modules/memory/masking/__tests__/CredentialDetector.test.jsView file

11patternName = github_pat severity = critical line = 11 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/modules/memory/masking/__tests__/CredentialDetector.test.jsView on unpkg · L11

11patternName = github_pat severity = critical line = 11 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in dist/modules/memory/masking/__tests__/CredentialDetector.test.js

dist/modules/memory/masking/__tests__/CredentialDetector.test.jsView on unpkg · L11

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

dist/database/adapters/MysqlAdapter.jsView file

89} L90: async execAsync(sql) { await this.pool.promise().query(sql); } L91: async transactionAsync(fn) {

High

Shell

Package source references shell execution.

dist/database/adapters/MysqlAdapter.jsView on unpkg · L89

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

dist/admin/services/user.service.jsView file

30throw { code: AdminErrorCode.WEAK_PASSWORD }; L31: const bcrypt = require('bcrypt'); L32: const userId = crypto.randomUUID();

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/admin/services/user.service.jsView on unpkg · L30

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/engine/tools/drawio-renderers.jsView file

1import * as fs from 'fs'; L2: import { execSync } from 'child_process'; L3: let _cachedDrawioCliPath = null; ... L13: const candidates = []; L14: if (process.platform === 'win32') { L15: candidates.push('C:\\Program Files\\draw.io\\draw.io.exe', `${process.env.LOCALAPPDATA || ''}\\Programs\\draw.io\\draw.io.exe`, `${process.env.PROGRAMFILES || ''}\\draw.io\\draw.io... L16: } ... L43: const xml = fs.readFileSync(inputPath, 'utf-8'); L44: const encoded = Buffer.from(xml).toString('base64'); L45: const viewerUrl = `https://viewer.diagrams.net/?lightbox=1&nav=0#R${encoded}`; L46: await orchestrationEngine.executeUpstreamTool('chrome-devtools-mcp', 'navigate_page', {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/engine/tools/drawio-renderers.jsView on unpkg · L1

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

src/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

servers/nextjs/app/api/templates/route.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

servers/nextjs/app/api/templates/route.tsView on unpkg

dist/modules/memory/masking/detectors/CredentialDetector.jsView file

4patternName = generic_password severity = medium line = 4 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in dist/modules/memory/masking/detectors/CredentialDetector.js

dist/modules/memory/masking/detectors/CredentialDetector.jsView on unpkg · L4

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

src/modules/memory/masking/detectors/CredentialDetector.tsView file

7patternName = generic_password severity = medium line = 7 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in src/modules/memory/masking/detectors/CredentialDetector.ts

src/modules/memory/masking/detectors/CredentialDetector.tsView on unpkg · L7

Source & flagged code

17 flagged · loading source

dist/modules/memory/masking/__tests__/CredentialDetector.test.jsView file

11patternName = github_pat severity = critical line = 11 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/modules/memory/masking/__tests__/CredentialDetector.test.jsView on unpkg · L11

11patternName = github_pat severity = critical line = 11 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in dist/modules/memory/masking/__tests__/CredentialDetector.test.js

dist/modules/memory/masking/__tests__/CredentialDetector.test.jsView on unpkg · L11

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

Findings

3 Critical7 High9 Medium7 Low

CriticalCritical Secretdist/modules/memory/masking/__tests__/CredentialDetector.test.js

CriticalSecret Patterndist/modules/memory/masking/__tests__/CredentialDetector.test.js

CriticalSecret Patternsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

HighChild Processstart.js

HighShelldist/database/adapters/MysqlAdapter.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limitedservers/nextjs/app/api/templates/route.ts

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.23.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.23.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-09 16:16:14.158Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.