registry / sdlc-agent-4-enterprise-server / 1.36.0

sdlc-agent-4-enterprise-server@1.36.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 27d ago · by lpm-firewall-ai

The package is an MCP code-intelligence server with no npm install lifecycle and no self-dependency chain. Shell and network use that was inspected is local tooling or an explicit opt-in runtime installer, so it does not show a concrete attack.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

No automatic install or import trigger. Optional behavior starts only when the user runs the server, tests, or start.js with START_OLLAMA set.

Impact

No unconsented credential theft, persistence, or foreign agent-control write was established from the inspected entry and required files.

Mechanism

The published entry loads the MCP server. Git, draw.io, and tag API calls stay local or operator-selected. The remote Ollama installer is gated by an environment flag.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 78.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has no preinstall, install, or postinstall hook; main and bin both point at dist/index.js, and prepublishOnly only runs the build.
start.js is not the package entrypoint. Its Ollama installer runs only when START_OLLAMA is truthy and the binary is missing.
E2E global setup launches the local server with tsx into an isolated temp directory and is not an install trigger.
dist/viewer/3d-force-graph.min.js is the published 3d-force-graph 1.80.0 bundle, with no separate payload hook.
drawio-renderers.js shells out only to locate a local draw.io CLI and export a diagram.
The tag viewer fetches the package's own /api/kb/tags routes, config hashes the local git origin for a project id, and the FastAPI mock normalizer only collapses whitespace.

Evidence against

start.js can pipe https://ollama.com/install.sh into a shell, but only after an explicit START_OLLAMA opt-in and only when that script is run.
The SQLite resolver can download platform .node builds from the author's GitHub release and verifies them before load; that is runtime database setup, not an install hook.

Behavioral surface

Source & flagged code

13 flagged

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

tests/e2e/setup/global-setup.tsView file

Lines 28-80typescript

28 const port = addr.port;

29 srv.close(() => resolve(port));

30 });

31 srv.on('error', reject);

32 });

33}

35export async function setup(): Promise<void> {

36 // 1. Create isolated temp directory for all DB files

37 tempDataDir = fs.mkdtempSync(path.join(os.tmpdir(), 'sa4e-e2e-'));

38 console.log(`[E2E Setup] Temp data dir: ${tempDataDir}`);

40 // 2. Find a free port

41 assignedPort = await findFreePort();

42 console.log(`[E2E Setup] Using free port: ${assignedPort}`);

44 // 3. Write port to temp file so test files can read it

45 fs.writeFileSync(PORT_FILE_PATH, String(assignedPort), 'utf-8');

47 // 4. Start server with isolated environment

48 const serverEntry = path.resolve(__dirname, '../../../src/index.ts');

49 serverProcess = spawn('npx', ['tsx', serverEntry], {

50 cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

51 env: {

52 ...process.env,

53 CODE_INTEL_DATA_DIR: tempDataDir,

54 CODE_INTEL_WORKSPACE: tempDataDir,

55 CODE_INTEL_PORT: String(assignedPort),

56 ADMIN_INITIAL_PASSWORD: E2E_PASSWORD,

57 NODE_ENV: 'test',

58 LOG_LEVEL: 'warn',

59 },

60 stdio: ['ignore', 'pipe', 'pipe'],

61 shell: true,

62 });

High

Shell

Package source references shell execution.

tests/e2e/setup/global-setup.tsView on unpkg · L60

64 serverProcess.stdout?.on('data', (d) => {

65 const line = d.toString();

66 if (line.includes('"level":50') || line.includes('"level":40')) {

67 process.stderr.write(`[E2E Server] ${line}`);

68 }

69 });

71 serverProcess.stderr?.on('data', (d) => {

72 process.stderr.write(`[E2E Server ERR] ${d.toString()}`);

73 });

75 // 5. Wait for server to become healthy

76 await waitForHealth();

77 console.log(`[E2E Setup] Server ready on port ${assignedPort}`);

78}

80export async function teardown(): Promise<void> {

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

test-index.cjsView file

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/engine/tools/drawio-renderers.jsView file

1import * as fs from 'fs'; L2: import { execSync } from 'child_process'; L3: let _cachedDrawioCliPath = null; ... L13: const candidates = []; L14: if (process.platform === 'win32') { L15: candidates.push('C:\\Program Files\\draw.io\\draw.io.exe', `${process.env.LOCALAPPDATA || ''}\\Programs\\draw.io\\draw.io.exe`, `${process.env.PROGRAMFILES || ''}\\draw.io\\draw.io... L16: } ... L45: const xml = fs.readFileSync(inputPath, 'utf-8'); L46: const encoded = Buffer.from(xml).toString('base64'); L47: const viewerUrl = `https://viewer.diagrams.net/?lightbox=1&nav=0#R${encoded}`; L48: await orchestrationEngine.executeUpstreamTool('chrome-devtools-mcp', 'navigate_page', {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/engine/tools/drawio-renderers.jsView on unpkg · L1

src/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

dist/viewer/tags.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/viewer/tags.js#virtual:normalized:round1View on unpkg

dist/config/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = sdlc-agent-4-enterprise-server@1.42.3 matchedIdentity = npm:[redacted]:1.42.3 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/config/index.jsView on unpkg

Source & flagged code

13 flagged · loading source

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

tests/e2e/setup/global-setup.tsView file

60stdio: ['ignore', 'pipe', 'pipe'], L61: shell: true, L62: });

High

Shell

Package source references shell execution.

tests/e2e/setup/global-setup.tsView on unpkg · L60

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.ts

Findings

1 Critical7 High6 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/config/index.js

HighChild Processstart.js

HighShelltests/e2e/setup/global-setup.ts

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limiteddist/viewer/tags.js#virtual:normalized:round1

MediumDynamic Requiretest-index.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Module

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.36.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.36.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-26 05:08:57.428Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.