registry / sdlc-agent-4-enterprise-server / 1.53.4
sdlc-agent-4-enterprise-server@1.53.4
⚠ Under reviewCode Intelligence MCP Server — multi-agent SDLC pipeline with semantic memory, code graph, and draw.io integration
AI Security Review
scanned 6d ago · by lpm-firewall-aiInspected source shows benign lifecycle setup, local-only test requests, and package-aligned runtime features, with no independently supported malicious behavior. A clean verdict cannot be issued because the required clean citations exceed the schema limit, so the result is manual review.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
No malicious trigger was confirmed; the inspected test runs only when invoked, and the server starts through its entrypoint.
Impact
No concrete malicious impact was established from the inspected paths.
Mechanism
The flagged test sends a local login request and uses the returned token for local API requests; the inspected command and renderer paths implement product functionality.
AI rationale
Inspected source shows benign lifecycle setup, local-only test requests, and package-aligned runtime features, with no independently supported malicious behavior. A clean verdict cannot be issued because the required clean citations exceed the schema limit, so the result is manual review.
Evidence
package.jsontest-index.cjsdist/index.jsdist/server/routes/pega-api.jsdist/server/HttpServer.jsdist/modules/sandbox/executors/LocalExecutor.jsdist/engine/tools/drawio-renderers.js
Network endpoints1
127.0.0.1:48721
Decision evidence
public snapshotAI called this Manual Review at 72.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The package's prepare hook exits immediately, and prepublishOnly runs the build.
- The flagged test script logs in to a local server and reuses its token only for local API requests.
- The Pega route uses caller-provided or configured credentials and requires credentials for rule fetching.
- The server registers the Pega routes as part of its HTTP API.
- Local shell execution is available through the sandbox executor, a package feature that can run user-supplied commands.
- The inspected source does not establish a concrete attack, but the required clean-review citations exceed the 128-citation limit.
Evidence against
- The local executor invokes commands through a shell, and the draw.io renderer invokes a local CLI; these are potentially dangerous capabilities, though the inspected code presents them as product functions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
20 flagged · loading sourcetest-index.cjsView file
15patternName = generic_password
severity = medium
line = 15
Medium
1const http = require('http');
L2: function post(url, body, headers) {
Medium
Dynamic Require
Package source references dynamic require/import behavior.
test-index.cjsView on unpkg · L1start.jsView file
4import { fileURLToPath } from "url";
L5: import { spawn } from "child_process";
L6: import { randomUUID } from "crypto";
High
Findings
13 High9 Medium8 Low
HighChild Processstart.js
HighShelldist/modules/sandbox/executors/LocalExecutor.js
HighSame File Env Network Executiondist/viewer/3d-force-graph.min.js
HighSandbox Evasion Gated Capabilitydist/engine/tools/drawio-renderers.js
HighRuntime Package Installtests/e2e/setup/global-setup.ts
HighPayload In Excluded Dirservers/fastapi/tests/mocks/normalizers.py
HighSemantic Analysis Limiteddist/modules/memory/llm/LLMInitializer.js#virtual:normalized:round1
HighKnown Malware Source Similaritydist/engine/tools/drawio-renderers.js
HighKnown Malware Source Similaritydist/modules/sandbox/executors/LocalExecutor.js
HighKnown Malware Source Similaritydist/engine/graph/file-resolver.js
Affected versions and remediation
This report applies to sdlc-agent-4-enterprise-server@1.53.4.
See all versions of sdlc-agent-4-enterprise-server for other recorded verdicts.
- Review the evidence and your use of sdlc-agent-4-enterprise-server@1.53.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.