registry / Remote code execution / sdlc-agent-4-enterprise-server / 1.42.0

sdlc-agent-4-enterprise-server@1.42.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package does not perform malicious lifecycle execution, but its exposed runtime configuration path permits unauthenticated command execution with inherited environment variables. This warrants blocking the vulnerable release from normal publication pending a fix.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

A reachable client sends POST /api/mcp-servers after the server is started.

Impact

Remote code execution and exposure of environment-held credentials on the server host.

Mechanism

Unauthenticated MCP configuration creates a stdio child process.

AI rationale

Evidence

src/server/HttpServer.tssrc/modules/orchestration/McpConfigRoutes.tssrc/modules/orchestration/health/TransportFactory.tssrc/config/SandboxConfig.tssrc/modules/sandbox/executors/LocalExecutor.ts.code-intel/orchestration.json

Network endpoints1

0.0.0.0

Decision evidence

public snapshot

AI called this Suspicious at 97.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

The unauthenticated MCP-server configuration route accepts a supplied server configuration and immediately connects it.
A configured command starts a stdio MCP process with the full inherited environment.
The HTTP server protects selected paths but not the mounted MCP configuration routes.
The sandbox defaults to local execution on non-Linux hosts and runs commands through a shell.

Evidence against

No preinstall, install, or postinstall hook is present; prepare immediately exits.
No runtime dependency references this package itself.
The flagged Python fixture is ordinary text-normalization code.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscation

Source & flagged code

30 flagged

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

Lines 1-34typescript

1import { describe, it, expect } from 'vitest';

2import { CredentialDetector } from '../detectors/CredentialDetector.js';

4describe('CredentialDetector', () => {

5 const detector = new CredentialDetector();

7 it('detects sk- API key', () => {

8 const r = detector.detect('key: sk-abc123xyz789abcdefghijklm');

9 expect(r.length).toBeGreaterThanOrEqual(1);

10 expect(r[0].type).toBe('api_key');

11 });

13 it('detects ghp_ GitHub PAT', () => {

14 const r = detector.detect('ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx');

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

15 expect(r.length).toBeGreaterThanOrEqual(1);

16 expect(r[0].type).toBe('api_key');

17 });

19 it('detects JWT token', () => {

20 const jwt = 'eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0NTY3ODkwIn0.dozjgNryP4J3jVmNHl0w5N';

21 const r = detector.detect(jwt);

22 const jwts = r.filter(d => d.type === 'jwt');

23 expect(jwts.length).toBe(1);

24 });

26 it('detects password in config', () => {

27 const r = detector.detect('password=MyS3cr3tP@ss');

28 const pwds = r.filter(d => d.type === 'password');

29 expect(pwds.length).toBe(1);

30 });

32 it('detects connection string', () => {

33 const r = detector.detect('postgres://admin:secret@db.host:5432/mydb');

34 const conns = r.filter(d => d.type === 'connection_string');

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

Lines 1-24javascript

1/* This script starts the FastAPI and Next.js servers, setting up user configuration if necessary. It reads environment variables to configure API keys and other settings, ensuring that the user configuration file is created if it doesn't exist. The script also handles the starting of both servers and keeps the Node.js process alive until one of the servers exits. */

3import { join, dirname } from "path";

4import { fileURLToPath } from "url";

5import { spawn } from "child_process";

dist/database/adapters/MysqlAdapter.jsView file

Lines 69-109javascript

69 }

70 prepare(sql) {

71 return {

72 run: (...params) => this.run(sql, params),

73 get: (

dist/viewer/admin/vendor/d3.min.jsView file

Lines 1-3javascript

2!function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&

test-index.cjsView file

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

15patternName = generic_password severity = medium line = 15

Medium

Secret Pattern

Hardcoded password in test-index.cjs

test-index.cjsView on unpkg · L15

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

Lines 11-51javascript

11 }

12 analyze(content, _options) {

13 const lines = content.split('\n');

14 const lineCount

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

dist/engine/tools/drawio-renderers.jsView file

Lines 1-21javascript

1import * as fs from 'fs';

2import { execSync } from 'child_process';

3let _cachedDrawioCliPath = null;

4export

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

dist/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

dist/viewer/admin/vendor/babel.min.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/viewer/admin/vendor/babel.min.jsView on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

dist/modules/memory/masking/detectors/CredentialDetector.jsView file

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in dist/modules/memory/masking/detectors/CredentialDetector.js

dist/modules/memory/masking/detectors/CredentialDetector.jsView on unpkg · L4

check-pg.cjsView file

3patternName = generic_password severity = medium line = 3

Medium

Secret Pattern

Hardcoded password in check-pg.cjs

check-pg.cjsView on unpkg · L3

check-llm-tasks.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in check-llm-tasks.cjs

check-llm-tasks.cjsView on unpkg · L2

fix-schema.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in fix-schema.cjs

fix-schema.cjsView on unpkg · L2

check-structure.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in check-structure.cjs

check-structure.cjsView on unpkg · L2

verify-schema.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in verify-schema.cjs

verify-schema.cjsView on unpkg · L2

check-project-ids.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in check-project-ids.cjs

check-project-ids.cjsView on unpkg · L2

fix-project-id.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in fix-project-id.cjs

fix-project-id.cjsView on unpkg · L2

fix-pg-schema-final.cjsView file

6patternName = generic_password severity = medium line = 6

Medium

Secret Pattern

Hardcoded password in fix-pg-schema-final.cjs

fix-pg-schema-final.cjsView on unpkg · L6

recreate-index-tables.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in recreate-index-tables.cjs

recreate-index-tables.cjsView on unpkg · L2

fix-sequences.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in fix-sequences.cjs

fix-sequences.cjsView on unpkg · L2

analyze-perf.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in analyze-perf.cjs

analyze-perf.cjsView on unpkg · L2

src/modules/memory/masking/detectors/CredentialDetector.tsView file

7patternName = generic_password severity = medium line = 7

Medium

Secret Pattern

Hardcoded password in src/modules/memory/masking/detectors/CredentialDetector.ts

src/modules/memory/masking/detectors/CredentialDetector.tsView on unpkg · L7

Source & flagged code

30 flagged · loading source

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

Findings

3 Critical7 High22 Medium8 Low

CriticalCritical Secretsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

CriticalPrevious Version Dangerous Deltadist/engine/tools/drawio-renderers.js

CriticalSecret Patternsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

HighChild Processstart.js

HighShelldist/database/adapters/MysqlAdapter.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limiteddist/viewer/admin/vendor/babel.min.js

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.42.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.42.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-10 13:22:03.325Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code