registry / Staged payload carrier / sdlc-agent-4-enterprise-server / 1.35.0

sdlc-agent-4-enterprise-server@1.35.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

Warn rather than block: a dormant remote native-payload facility and first-party MCP configuration capability remain, but there is no install hook, covert trigger, confirmed malicious payload, or data-exfiltration path. The static hints for tests, WASM, and credential fixtures were not evidence of an attack.

Static reason

One or more suspicious static signals were detected.

Trigger

Explicit server/runtime use of the native-binding resolver or an authenticated MCP-management API request.

Impact

A future caller of the dormant resolver could execute a remotely hosted native binding; authorized administrators can configure child MCP commands for this server.

Mechanism

hash-pinned native binding download and authenticated workspace MCP configuration

AI rationale

Evidence

package.jsonsrc/engine/db/resolver/index.tssrc/engine/db/resolver/download.tssrc/engine/db/resolver/manifest.tssrc/server/routes/admin/mcp-crud.ts~/.code-intel/native-addons/better-sqlite3/v12.10.0/node-v<major>-<platform>-<arch>/better_sqlite3.node.code-intel/orchestration.json

Network endpoints1

github.com/dnguyenminh/Kiro-SDLC-Agents/releases/download/better-sqlite3-v12.10.0/better-sqlite3-v12.10.0-node-v20-linux-x64.node

Decision evidence

public snapshot

AI called this Suspicious at 82.0% confidence as Dangerous Capability with high false-positive risk.

Evidence for warning

Contains a dormant resolver that can fetch a platform-native SQLite .node payload into a user cache.
The remote native payload URLs are release-hosted and hash-pinned, but native code provenance cannot be established by source inspection.
A protected admin API can add MCP command/env configuration and connect it at runtime.

Evidence against

package.json has no preinstall, install, or postinstall hook; prepublishOnly is publish-time only.
The native downloader verifies SHA-256 and removes a mismatched file.
No in-package call to resolveNativeBinding/preResolveBinding was found in inspected source or dist.
MCP configuration writes are scoped to the workspace data directory and require authentication plus MCP_MANAGE permission.
No credential harvesting, secret exfiltration, destructive action, or foreign AI-agent config mutation was found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem

Source & flagged code

29 flagged

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

dist/database/adapters/MysqlAdapter.jsView file

89} L90: async execAsync(sql) { await this.pool.promise().query(sql); } L91: async transactionAsync(fn) {

High

Shell

Package source references shell execution.

dist/database/adapters/MysqlAdapter.jsView on unpkg · L89

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

test-index.cjsView file

Lines 1-21javascript

1const http = require('http');

2function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/engine/tools/drawio-renderers.jsView file

Lines 1-21javascript

1import * as fs from 'fs';

2import { execSync } from 'child_process';

3let _cachedDrawioCliPath = null;

4export

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

src/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

servers/nextjs/app/api/templates/route.tsView file

•stage = ast_semantic_analysis; reason = ast_alias_growth_limit_exceeded; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

servers/nextjs/app/api/templates/route.tsView on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4 matchedText = user: 's...24',

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

dist/modules/memory/masking/detectors/CredentialDetector.jsView file

4patternName = generic_password severity = medium line = 4 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in dist/modules/memory/masking/detectors/CredentialDetector.js

dist/modules/memory/masking/detectors/CredentialDetector.jsView on unpkg · L4

check-pg.cjsView file

3patternName = generic_password severity = medium line = 3 matchedText = const cl... });

Medium

Secret Pattern

Hardcoded password in check-pg.cjs

check-pg.cjsView on unpkg · L3

check-llm-tasks.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-llm-tasks.cjs

check-llm-tasks.cjsView on unpkg · L2

fix-schema.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-schema.cjs

fix-schema.cjsView on unpkg · L2

check-structure.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-structure.cjs

check-structure.cjsView on unpkg · L2

verify-schema.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in verify-schema.cjs

verify-schema.cjsView on unpkg · L2

check-project-ids.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in check-project-ids.cjs

check-project-ids.cjsView on unpkg · L2

fix-project-id.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-project-id.cjs

fix-project-id.cjsView on unpkg · L2

fix-pg-schema-final.cjsView file

6patternName = generic_password severity = medium line = 6 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-pg-schema-final.cjs

fix-pg-schema-final.cjsView on unpkg · L6

recreate-index-tables.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in recreate-index-tables.cjs

recreate-index-tables.cjsView on unpkg · L2

fix-sequences.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in fix-sequences.cjs

fix-sequences.cjsView on unpkg · L2

analyze-perf.cjsView file

2patternName = generic_password severity = medium line = 2 matchedText = const po... });

Medium

Secret Pattern

Hardcoded password in analyze-perf.cjs

analyze-perf.cjsView on unpkg · L2

src/modules/memory/masking/detectors/CredentialDetector.tsView file

7patternName = generic_password severity = medium line = 7 matchedText = password...,}',

Medium

Secret Pattern

Hardcoded password in src/modules/memory/masking/detectors/CredentialDetector.ts

src/modules/memory/masking/detectors/CredentialDetector.tsView on unpkg · L7

Source & flagged code

29 flagged · loading source

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14 matchedText = const r ...x');

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

Findings

2 Critical7 High22 Medium7 Low

CriticalCritical Secretsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

CriticalSecret Patternsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

HighChild Processstart.js

HighShelldist/database/adapters/MysqlAdapter.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limitedservers/nextjs/app/api/templates/route.ts

MediumDynamic Requiretest-index.cjs

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.35.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.35.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-24 02:29:43.902Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code