registry / sdlc-agent-4-enterprise-server / 1.33.0

sdlc-agent-4-enterprise-server@1.33.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 27d ago · by lpm-firewall-ai

The published entry is dist/index.js and package.json has no install lifecycle hook. Inspected shell and fetch uses stay local to the server, viewer, and tests, so no concrete attack surface remains.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

No automatic install or import trigger was found. Behavior starts only when a user runs the server binary, start.js, or tests.

Impact

No credential theft, remote payload execution, persistence, or unconsented agent-control write was established from the inspected entry points.

Mechanism

The package serves a local code-intelligence MCP server, a viewer, and test helpers. Shell use is limited to reading a git remote for a project id and locating a local draw.io binary.

AI rationale

The published entry is dist/index.js and package.json has no install lifecycle hook. Inspected shell and fetch uses stay local to the server, viewer, and tests, so no concrete attack surface remains.

Decision evidence

public snapshot

AI called this Clean at 84.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json names dist/index.js as main and bin and defines only dev, build, start, prepublishOnly, test, and lint scripts, with no preinstall, install, or postinstall hook.
start.js is a manual launcher that joins local servers/fastapi and servers/nextjs paths; it is not an npm lifecycle entry.
E2E global setup creates a temp data directory and starts the server only under the test harness.
dist/viewer/3d-force-graph.min.js is the vendored 3d-force-graph 1.80.0 browser bundle.
drawio-renderers looks up a local draw.io binary with which or where and does not download code.
servers/fastapi/tests/mocks/normalizers.py only collapses whitespace and sorts test payloads.
Viewer tags.js fetches same-origin knowledge-base tag APIs using window.__MCP_BASE.
Config hashes a local git origin URL only to derive a short project id when the server loads configuration.

Evidence against

git remote get-url origin and draw.io CLI lookup use execSync only after the process is started, not during npm install.
No webhook, install-time network call, or self-dependency on this package name was found.

Source & flagged code

13 flagged

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

tests/e2e/setup/global-setup.tsView file

60stdio: ['ignore', 'pipe', 'pipe'], L61: shell: true, L62: });

High

Shell

Package source references shell execution.

tests/e2e/setup/global-setup.tsView on unpkg · L60

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

test-index.cjsView file

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/engine/tools/drawio-renderers.jsView file

1import * as fs from 'fs'; L2: import { execSync } from 'child_process'; L3: let _cachedDrawioCliPath = null; ... L13: const candidates = []; L14: if (process.platform === 'win32') { L15: candidates.push('C:\\Program Files\\draw.io\\draw.io.exe', `${process.env.LOCALAPPDATA || ''}\\Programs\\draw.io\\draw.io.exe`, `${process.env.PROGRAMFILES || ''}\\draw.io\\draw.io... L16: } ... L45: const xml = fs.readFileSync(inputPath, 'utf-8'); L46: const encoded = Buffer.from(xml).toString('base64'); L47: const viewerUrl = `https://viewer.diagrams.net/?lightbox=1&nav=0#R${encoded}`; L48: await orchestrationEngine.executeUpstreamTool('chrome-devtools-mcp', 'navigate_page', {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/engine/tools/drawio-renderers.jsView on unpkg · L1

src/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

dist/viewer/tags.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/viewer/tags.js#virtual:normalized:round1View on unpkg

dist/config/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = sdlc-agent-4-enterprise-server@1.42.3 matchedIdentity = npm:[redacted]:1.42.3 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/config/index.jsView on unpkg

Source & flagged code

13 flagged · loading source

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

tests/e2e/setup/global-setup.tsView file

60stdio: ['ignore', 'pipe', 'pipe'], L61: shell: true, L62: });

High

Shell

Package source references shell execution.

tests/e2e/setup/global-setup.tsView on unpkg · L60

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.ts

Findings

1 Critical7 High6 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/config/index.js

HighChild Processstart.js

HighShelltests/e2e/setup/global-setup.ts

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limiteddist/viewer/tags.js#virtual:normalized:round1

MediumDynamic Requiretest-index.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Module

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.33.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.33.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 05:08:48.758Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Behavioral surface

Source & flagged code