registry / AI-agent capability abuse / sdlc-agent-4-enterprise-server / 1.27.0

sdlc-agent-4-enterprise-server@1.27.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No install-time attack chain or automatic exfiltration was found. The shipped extension-rewrite and remote-installer capabilities remain real and warrant a warning.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User manually runs scripts/debug/inject_all_logs.js or launches start.js with START_OLLAMA enabled.

Impact

Modified IDE extension code or execution of the selected runtime installer.

Mechanism

Explicit extension rewrite and opt-in remote installer execution.

AI rationale

No install-time attack chain or automatic exfiltration was found. The shipped extension-rewrite and remote-installer capabilities remain real and warrant a warning.

Evidence

package.jsondist/index.jsscripts/debug/inject_all_logs.jsstart.jsC:\Users\ASUS\.antigravity-ide\extensions\dnguyenminh.kiro-sdlc-agents-2.0.0\out\extension.jsC:\Users\ASUS\.antigravity-ide\extensions\dnguyenminh.kiro-sdlc-agents-2.0.0\kiro_debug.log

Network endpoints1

ollama.com/install.sh

Decision evidence

public snapshot

AI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

User-invoked debug script overwrites an installed Antigravity IDE extension and injects logging code.
A separate startup script can run a remote shell installer when START_OLLAMA is enabled.

Evidence against

package.json declares only prepublishOnly; no install, preinstall, or postinstall hook.
The declared bin/main is dist/index.js, which starts the package's MCP server; it does not invoke debug scripts or start.js.
No source evidence of automatic credential exfiltration, stealth persistence, or foreign agent-control writes during installation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedProtestwareUrlStrings

Manifest

Source & flagged code

30 flagged

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

dist/database/adapters/MysqlAdapter.jsView file

89} L90: async execAsync(sql) { await this.pool.promise().query(sql); } L91: async transactionAsync(fn) {

High

Shell

Package source references shell execution.

dist/database/adapters/MysqlAdapter.jsView on unpkg · L89

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

test-index.cjsView file

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

15patternName = generic_password severity = medium line = 15 matchedText = const lo... });

Medium

Secret Pattern

Hardcoded password in test-index.cjs

test-index.cjsView on unpkg · L15

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/engine/tools/drawio-renderers.jsView file

1import * as fs from 'fs'; L2: import { execSync } from 'child_process'; L3: let _cachedDrawioCliPath = null; ... L13: const candidates = []; L14: if (process.platform === 'win32') { L15: candidates.push('C:\\Program Files\\draw.io\\draw.io.exe', `${process.env.LOCALAPPDATA || ''}\\Programs\\draw.io\\draw.io.exe`, `${process.env.PROGRAMFILES || ''}\\draw.io\\draw.io... L16: } ... L45: const xml = fs.readFileSync(inputPath, 'utf-8'); L46: const encoded = Buffer.from(xml).toString('base64'); L47: const viewerUrl = `https://viewer.diagrams.net/?lightbox=1&nav=0#R${encoded}`; L48: await orchestrationEngine.executeUpstreamTool('chrome-devtools-mcp', 'navigate_page', {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/engine/tools/drawio-renderers.jsView on unpkg · L1

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

src/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

servers/nextjs/app/api/templates/route.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

servers/nextjs/app/api/templates/route.tsView on unpkg

dist/modules/security/agentshield/rules/HttpEndpointRule.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = sdlc-agent-4-enterprise-server@1.26.0 matchedIdentity = npm:[redacted]:1.26.0 similarity = 0.900 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/modules/security/agentshield/rules/HttpEndpointRule.jsView on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4 matchedText = user: 's...24',

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

dist/modules/memory/masking/detectors/CredentialDetector.jsView file

4patternName = generic_password severity = medium line = 4 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in dist/modules/memory/masking/detectors/CredentialDetector.js

dist/modules/memory/masking/detectors/CredentialDetector.jsView on unpkg · L4

check-pg.cjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const cl... });

Medium

Secret Pattern

Hardcoded password in check-pg.cjs

check-pg.cjsView on unpkg · L3

check-llm-tasks.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-llm-tasks.cjs

check-llm-tasks.cjsView on unpkg · L2

fix-schema.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-schema.cjs

fix-schema.cjsView on unpkg · L2

check-structure.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-structure.cjs

check-structure.cjsView on unpkg · L2

verify-schema.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in verify-schema.cjs

verify-schema.cjsView on unpkg · L2

check-project-ids.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-project-ids.cjs

check-project-ids.cjsView on unpkg · L2

fix-project-id.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-project-id.cjs

fix-project-id.cjsView on unpkg · L2

fix-pg-schema-final.cjsView file

6patternName = generic_password severity = medium line = 6 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-pg-schema-final.cjs

fix-pg-schema-final.cjsView on unpkg · L6

recreate-index-tables.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in recreate-index-tables.cjs

recreate-index-tables.cjsView on unpkg · L2

fix-sequences.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-sequences.cjs

fix-sequences.cjsView on unpkg · L2

analyze-perf.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in analyze-perf.cjs

analyze-perf.cjsView on unpkg · L2

src/modules/memory/masking/detectors/CredentialDetector.tsView file

7patternName = generic_password severity = medium line = 7 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in src/modules/memory/masking/detectors/CredentialDetector.ts

src/modules/memory/masking/detectors/CredentialDetector.tsView on unpkg · L7

Source & flagged code

30 flagged · loading source

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

Findings

3 Critical7 High22 Medium7 Low

CriticalCritical Secretsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

CriticalPrevious Version Dangerous Deltadist/modules/security/agentshield/rules/HttpEndpointRule.js

CriticalSecret Patternsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

HighChild Processstart.js

HighShelldist/database/adapters/MysqlAdapter.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limitedservers/nextjs/app/api/templates/route.ts

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.27.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.27.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-16 18:37:52.946Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code