registry / sdlc-agent-4-enterprise-server / 1.48.0

sdlc-agent-4-enterprise-server@1.48.0

Code Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration

AI Security Review

scanned 13d ago · by lpm-firewall-ai

Source inspection found no concrete attack behavior: the manifest has no install lifecycle hook, and the flagged process, network, and bundled-code findings fit the server's stated functionality. The npm install call is in a launcher setup helper, while the E2E setup uses temporary isolated data.

Static reason

One or more suspicious static signals were detected.

Trigger

The launcher setup helper or server features are invoked.

Impact

These operations do not establish an attack surface beyond the package's expected, user-invoked capabilities.

Mechanism

The inspected code sets up Next.js dependencies, runs caller-supplied commands through the local executor, discovers the draw.io CLI, and probes the configured LLM service for models.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json identifies a code intelligence SDLC server and uses a no-op prepare script.
start.js runs npm install from its Next.js setup helper; this is not an npm lifecycle hook.
LocalExecutor runs a supplied command with configured time and output limits as a product feature.
Other examined findings are a third-party graph bundle, draw.io CLI discovery, isolated E2E setup, text normalization, and model discovery at the configured LLM base URL.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

GitDependency

Source & flagged code

14 flagged

test-index.cjsView file

Lines 1-35javascript

1const http = require('http');

2function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

3 return new Promise((resolve) => {

4 const u = new URL(url);

5 const data = JSON.stringify(body);

6 const req = http.request({ hostname: u.hostname, port: u.port, path: u.pathname, method: 'POST', headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(data), ...headers } }, res => {

7 let d = ''; res.on('data', c => d += c); res.on('end', () => resolve({ status: res.statusCode, body: d }));

8 });

9 req.on('error', e => resolve({ status: 0, body: e.message }));

10 req.write(data); req.end();

11 });

12}

13async function run() {

14 // Login

15 const login = await post('http://127.0.0.1:48721/api/admin/auth/login', { username: 'admin', password: 'Admin@123456' });

Medium

Secret Pattern

Package contains a possible secret pattern.

test-index.cjsView on unpkg · L15

16 console.log('Login:', login.status);

17 if (login.status !== 200) { console.log('Login failed:', login.body); return; }

18 const token = JSON.parse(login.body).token;

19 console.log('Token:', token.substring(0, 20) + '...');

21 // Trigger full index

22 const idx = await post('http://127.0.0.1:48721/api/index/full', {}, {

23 'Authorization': 'Bearer ' + token,

24 'X-Project-Id': 'SDLC-Agents-4-Enterprise',

25 'X-Workspace-Root': 'c:\\projects\\kiro\\SDLC-Agents-4-Enterprise'

26 });

27 console.log('POST /api/index/full:', idx.status, idx.body.substring(0, 300));

29 // Wait a bit then check progress

30 await new Promise(r => setTimeout(r, 3000));

31 const prog = await new Promise((resolve) => {

32 const u = new URL('http://127.0.0.1:48721/api/index/progress');

33 http.get({ hostname: u.hostname, port: u.port, path: u.pathname, headers: { 'Authorization': 'Bearer ' + token, 'X-Project-Id': 'SDLC-Agents-4-Enterprise' } }, res => {

34 let d = ''; res.on('data', c => d += c); res.on('end', () => resolve({ status: res.statusCode, body: d }));

35 }).on('error', e => resolve({ status: 0, body: e.message }));

start.jsView file

Lines 1-24javascript

1/* This script starts the FastAPI and Next.js servers, setting up user configuration if necessary. It reads environment variables to configure API keys and other settings, ensuring that the user configuration file is created if it doesn't exist. The script also handles the starting of both servers and keeps the Node.js process alive until one of the servers exits. */

3import { join, dirname } from "path";

4import { fileURLToPath } from "url";

5import { spawn } from "child_process";

dist/modules/sandbox/executors/LocalExecutor.jsView file

57return new Promise((resolve) => { L58: // Use `shell: true` so the shell handles command-line quoting natively. L59: // On Windows this invokes cmd.exe (/d /s /c) which correctly interprets

High

Shell

Package source references shell execution.

dist/modules/sandbox/executors/LocalExecutor.jsView on unpkg · L57

dist/viewer/admin/vendor/d3.min.jsView file

1// https://d3js.org v7.9.0 Copyright 2010-2023 Mike Bostock L2: !function(t,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((t="undefined"!=typeof globalThis?globa...

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/viewer/admin/vendor/d3.min.jsView on unpkg · L1

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView file

31``, L32: `Basic metadata:`, L33: `- Lines: ${lineCount}`, ... L61: for (let i = 0; i < Math.min(content.length, 1000); i++) { L62: const code = content.charCodeAt(i); L63: // Allow common whitespace: tab(9), newline(10), carriage return(13)

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/engine/tools/artifact-analyzer/analyzers/FallbackAnalyzer.jsView on unpkg · L31

dist/viewer/3d-force-graph.min.jsView file

1// Version 1.80.0 3d-force-graph - https://github.com/vasturiano/3d-force-graph L2: !function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):(e="undefined"!=typeof globalThis?globalThis:... L3: // <http://www.w3.org/TR/2008/REC-WCAG20-20081211/#contrast-ratiodef (WCAG Version 2) L4: // Analyze the 2 colors and returns the color contrast defined by (WCAG Version 2) L5: op.readability=function(e,t){var n=op(e),i=op(t);return(Math.max(n.getLuminance(),i.getLuminance())+.05)/(Math.min(n.getLuminance(),i.getLuminance())+.05)},op.isReadable=function(e...

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/viewer/3d-force-graph.min.jsView on unpkg · L1

dist/engine/tools/drawio-renderers.jsView file

Lines 1-21javascript

1import * as fs from 'fs';

2import { execSync } from 'child_process';

3let _cachedDrawioCliPath = null;

4export

tests/e2e/setup/global-setup.tsView file

48const serverEntry = path.resolve(__dirname, '../../../src/index.ts'); L49: serverProcess = spawn('npx', ['tsx', serverEntry], { L50: cwd: path.resolve(__dirname, '../../..'),

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

tests/e2e/setup/global-setup.tsView on unpkg · L48

dist/engine/parsers/grammars/tree-sitter-go.wasmView file

•path = [redacted]-sitter-go.wasm kind = wasm_module sizeBytes = 217182 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

dist/engine/parsers/grammars/tree-sitter-go.wasmView on unpkg

models/onnx-runtime/generate-identity-model.pyView file

•path = models/onnx-runtime/generate-identity-model.py kind = build_helper sizeBytes = 802 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

models/onnx-runtime/generate-identity-model.pyView on unpkg

servers/fastapi/tests/mocks/normalizers.pyView file

•path = [redacted].py kind = payload_in_excluded_dir sizeBytes = 489 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

servers/fastapi/tests/mocks/normalizers.pyView on unpkg

dist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 12

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1View on unpkg

check-tasks-quick.cjsView file

4patternName = generic_password severity = medium line = 4

Medium

Secret Pattern

Hardcoded password in check-tasks-quick.cjs

check-tasks-quick.cjsView on unpkg · L4

Source & flagged code

14 flagged · loading source

test-index.cjsView file

15patternName = generic_password severity = medium line = 15

Medium

Secret Pattern

Package contains a possible secret pattern.

test-index.cjsView on unpkg · L15

1const http = require('http'); L2: function post(url, body, headers) {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

test-index.cjsView on unpkg · L1

start.jsView file

4import { fileURLToPath } from "url"; L5: import { spawn } from "child_process"; L6: import { randomUUID } from "crypto";

High

Child Process

Package source references child process execution.

start.jsView on unpkg · L4

Findings

7 High9 Medium8 Low

HighChild Processstart.js

HighShelldist/modules/sandbox/executors/LocalExecutor.js

HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js

HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js

HighRuntime Package Installtests/e2e/setup/global-setup.ts

HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py

HighSemantic Analysis Limiteddist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1

MediumSecret Patterntest-index.cjs

MediumDynamic Requiretest-index.cjs

MediumNetwork

MediumEnvironment Vars

MediumShips Wasm Moduledist/engine/parsers/grammars/tree-sitter-go.wasm

Affected versions and remediation

This report applies to sdlc-agent-4-enterprise-server@1.48.0.

See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.

Review the evidence and your use of sdlc-agent-4-enterprise-server@1.48.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-10 15:10:32.417Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.