registry / Remote code execution / sdlc-agent-4-enterprise-server / 1.42.2

sdlc-agent-4-enterprise-server@1.42.2

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The package has no registry install hook, so the evidence does not establish malicious installation behavior. Its environment-gated remote shell installer and incomplete inspectability of bundled artifacts warrant a warning.

Static reason

One or more suspicious static signals were detected.

Trigger

Running start.js with START_OLLAMA set to a truthy value, or invoking diagram export.

Impact

A compromised remote installer or unsafe export inputs could execute commands in the server runtime context.

Mechanism

Environment-gated remote shell installer and runtime command execution.

AI rationale

Evidence

start.jsdist/engine/tools/drawio-renderers.jsdist/database/adapters/MysqlAdapter.js

Network endpoints2

ollama.comviewer.diagrams.net

Decision evidence

public snapshot

AI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The launcher downloads a remote installer and pipes it directly to a shell when START_OLLAMA is enabled.
The launcher writes runtime configuration that includes provider credentials from the environment.
The Draw.io renderer constructs a shell command and sends diagram content to an external viewer service.
Large minified vendor bundles reduce confidence in complete static behavioral coverage.
The MySQL adapter dynamically loads a database client and passes caller-supplied connection credentials.
The apparent critical credential strings are test fixtures, not harvested secrets.

Evidence against

package.json has no preinstall, install, or postinstall hook; prepare only exits successfully.
The remote installer is gated behind an explicit runtime environment variable, not package installation.
The observed external viewer request is part of a user-invoked diagram export path.
No source inspected showed credential exfiltration, self-dependency, persistence, or foreign AI-agent configuration mutation.

Behavioral surface

Source

Source & flagged code

29 flagged

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

dist/database/adapters/MysqlAdapter.jsView file

89} L90: async execAsync(sql) { await this.pool.promise().query(sql); } L91: async transactionAsync(fn) {

High

Shell

Package source references shell execution.

dist/database/adapters/MysqlAdapter.jsView on unpkg · L89

dist/viewer/admin/vendor/d3.min.jsView file

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/admin/vendor/d3.min.jsView on unpkg · L1

test-index.cjsView file

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

15patternName = generic_password severity = medium line = 15

Medium

Secret Pattern

Hardcoded password in test-index.cjs

test-index.cjsView on unpkg · L15

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

dist/engine/tools/drawio-renderers.jsView file

1import * as fs from 'fs'; L2: import { execSync } from 'child_process'; L3: let _cachedDrawioCliPath = null; ... L13: const candidates = []; L14: if (process.platform === 'win32') { L15: candidates.push('C:\\Program Files\\draw.io\\draw.io.exe', `${process.env.LOCALAPPDATA || ''}\\Programs\\draw.io\\draw.io.exe`, `${process.env.PROGRAMFILES || ''}\\draw.io\\draw.io... L16: } ... L45: const xml = fs.readFileSync(inputPath, 'utf-8'); L46: const encoded = Buffer.from(xml).toString('base64'); L47: const viewerUrl = `https://viewer.diagrams.net/?lightbox=1&nav=0#R${encoded}`; L48: await orchestrationEngine.executeUpstreamTool('chrome-devtools-mcp', 'navigate_page', {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/engine/tools/drawio-renderers.jsView on unpkg · L1

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

dist/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

scripts/rebuild_notice_all.pyView file

•path = scripts/rebuild_notice_all.py kind = build_helper sizeBytes = 10840 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/rebuild_notice_all.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

dist/viewer/admin/vendor/babel.min.jsView file

•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 10

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/viewer/admin/vendor/babel.min.jsView on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

dist/modules/memory/masking/detectors/CredentialDetector.jsView file

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in dist/modules/memory/masking/detectors/CredentialDetector.js

dist/modules/memory/masking/detectors/CredentialDetector.jsView on unpkg · L4

check-pg.cjsView file

3patternName = generic_password severity = medium line = 3

Medium

Secret Pattern

Hardcoded password in check-pg.cjs

check-pg.cjsView on unpkg · L3

check-llm-tasks.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in check-llm-tasks.cjs

check-llm-tasks.cjsView on unpkg · L2

fix-schema.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in fix-schema.cjs

fix-schema.cjsView on unpkg · L2

check-structure.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in check-structure.cjs

check-structure.cjsView on unpkg · L2

verify-schema.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in verify-schema.cjs

verify-schema.cjsView on unpkg · L2

check-project-ids.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in check-project-ids.cjs

check-project-ids.cjsView on unpkg · L2

fix-project-id.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in fix-project-id.cjs

fix-project-id.cjsView on unpkg · L2

fix-pg-schema-final.cjsView file

6patternName = generic_password severity = medium line = 6

Medium

Secret Pattern

Hardcoded password in fix-pg-schema-final.cjs

fix-pg-schema-final.cjsView on unpkg · L6

recreate-index-tables.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in recreate-index-tables.cjs

recreate-index-tables.cjsView on unpkg · L2

fix-sequences.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in fix-sequences.cjs

fix-sequences.cjsView on unpkg · L2

analyze-perf.cjsView file

2patternName = generic_password severity = medium line = 2

Medium

Secret Pattern

Hardcoded password in analyze-perf.cjs

analyze-perf.cjsView on unpkg · L2

src/modules/memory/masking/detectors/CredentialDetector.tsView file

7patternName = generic_password severity = medium line = 7

Medium

Secret Pattern

Hardcoded password in src/modules/memory/masking/detectors/CredentialDetector.ts

src/modules/memory/masking/detectors/CredentialDetector.tsView on unpkg · L7

Source & flagged code

29 flagged · loading source

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView file

14patternName = github_pat severity = critical line = 14

Critical

Critical Secret

Package contains a critical-looking secret pattern.

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

14patternName = github_pat severity = critical line = 14

Critical

Secret Pattern

GitHub personal access token in src/modules/memory/masking/__tests__/CredentialDetector.test.ts

src/modules/memory/masking/__tests__/CredentialDetector.test.tsView on unpkg · L14

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

Findings

2 Critical7 High22 Medium8 Low

CriticalCritical Secretsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

CriticalSecret Patternsrc/modules/memory/masking/__tests__/CredentialDetector.test.ts

HighChild Processstart.js

HighShelldist/database/adapters/MysqlAdapter.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limiteddist/viewer/admin/vendor/babel.min.js

MediumDynamic Requiretest-index.cjs

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.42.2.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.42.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-11 11:14:44.929Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code