donaldrichard19-LVD/pattern-mcp

Review signals: 2 hardcoded secret, 41 known vulnerability.

Reviewed as expected for a test run: attempted writes that failed, so nothing was written.

Gitleaks found a possible hardcoded secret; value withheld. 2 distinct locations. 2 findings.

OSV reports a known vulnerability in this dependency version. 12 distinct locations. 41 findings.

OSV scanned supported lockfiles; unpinned dependencies and unsupported formats are outside this check.

A short run cannot establish that code is safe.

Connections show IP addresses; proxies can hide the final hostname.

Tracing covers dispatched commands and their children, not the whole OS; guest root can interfere with tracing.

Full safety evidence →

• register_design_system registers a components folder as the candidate pool: Real input produced the expected result: pattern-check-app

  Source: Registers *this project's own* design system as the candidate pool

  Input: {"tool": "register_design_system", "arguments": {"project_id": "pattern-check-app", "directory_path": "website/components"}}

  Expected: status registered with the project_id echoed back

  Command: node <guest-path> tools/call {"tool": "register_design_system", "arguments": {"project_id": "pattern-check-app", "directory_path": "website/components"}}

  Observed: pattern-check-app\",\"source_kind\":\"directory_scan\",\"source_path\":\"website/components\",\"registered_at\":\"2026-10-26T00:03:39.368Z\",\"candidate_count\":44,\"candidates_omitted\":44,\"candidates_preview\":[\"AskBeforeBuilding\",\"AvoidsMistakes\",\"Close\",\"Cost\",\"DesignSource\",\"Faq\",\"FounderNote\",\"Grid\",\"Guidance\",\"Hero\"],\"hint\":\"Full candidate list omitted to save context; pass include_candidates: true to get it. The registration is stored in full.\"},\"resolved\":{\"project_root\":\"<guest-path>\",\"design_systems_path\":\"<guest-path>

Examples

• offline ledger boundary check from the Ledger integrity section: command completed successfully

  Source: README.md Ledger integrity and decision provenance section

  Input: none

  Expected: All checks passed.

  Command: node scripts/verify-ledger-boundary.mjs

  Observed: from the verified scoring_fetch, not the raw Mobbin reference ok: coverage_pct parsed correctly from the coverage string ok: serialized output contains no raw HTML blob ok: serialized output contains no evidence text ok: serialized output is small (< 500 bytes) 2. distillCandidate returns null for a custom_build verdict (no existing candidate) ok: returned null 3. assertDistilledCandidateShape rejects a raw (non-distilled) object ok: threw on an object with a disallowed key 4. assertDistilledCandidateShape accepts a properly distilled object ok: did not throw All checks passed.

Local or hosted: both

Build pattern-mcp from source and call its register_design_system MCP tool over stdio to register a components folder as a design system

cd <guest-path> && ls -la && cat README.md | head -c 7000; echo; id -u; python3 --version
echo $CDP_URL; curl -s -m 10 -w '\nHTTP %{http_code}\n' $CDP_URL/json/version; echo; ls <guest-path> 2>&1; ls /inputs 2>&1
cd <guest-path> && grep -n -i -E 'node|npm|requires|engines' README.md | head -40; echo ---; grep -n '"node"' package.json; node --version 2>&1; npm --version 2>&1; cat package.json | head -c 1600
cd <guest-path> && grep -n '^## ' README.md | head -60; echo ---; awk '/^## Quick Start/,/^## Recommended/' README.md | head -c 5000
cd <guest-path> && ls -la .coldpass; (npm install --no-audit --no-fund 2>&1 | tail -5); echo "exit=$?"
cd <guest-path> && awk '/^## Try it/,/^## Validation examples/' README.md | head -c 4000; echo; echo ----; awk '/^## Telemetry/,/^## The `_meta`/' README.md | head -c 1500
cd <guest-path> && export PATTERN_TELEMETRY=0 && (npm run build 2>&1 | tail -8); echo "exit=${PIPESTATUS[0]}"; ls dist | head -30
cd <guest-path> && sed -n '1009,1080p' README.md | head -c 5000
cd <guest-path> && find templates -maxdepth 3 | head -40; echo ---; find . -path ./node_modules -prune -o \( -name '*.jsx' -o -name '*.tsx' \) -print | grep -v node_modules | head -20; echo ---; env | grep -c -E 'ANTHROPIC|FIGMA|TYPESAFE' ; ls ~/.pattern 2>&1
cd <guest-path> && export PATTERN_TELEMETRY=0 PATTERN_PROJECT_ROOT=<guest-path> && { printf '%s\n' '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2024-11-05","capabilities":{},"clientInfo":{"name":"t","version":"1"}}}' '{"jsonrpc":"2.0","method":"notifications/initialized"}' '{"jsonrpc":"2.0","id":2,"method":"tools/call","params":{"name":"register_design_system","arguments":{"project_id":"pattern-check-app","directory_path":"website/components"}}}'; sleep 4; } | timeout 20 node dist/index.js 2>/tmp/pattern_err.txt | cut -c1-900; echo "exit=$?"; head -c 600 /tmp/pattern_err.txt
cd <guest-path> && grep -n -i -E 'cron|--once|--now|schedul|setInterval|webhook' src -r | head -10; echo "---scan done"; ls scripts; echo ---; export PATTERN_TELEMETRY=0 && timeout 120 node scripts/verify-ledger-boundary.mjs 2>&1 | tail -15; echo "exit=${PIPESTATUS[0]}"
cd <guest-path> && grep -n -F "Registers *this project's own* design system as the candidate pool" README.md; grep -n -F 'Pattern has no daemon or scheduler' src/index.ts | head -2; grep -n -F 'Run `node scripts/verify-ledger-boundary.mjs`' README.md
cd <guest-path> && mkdir -p .coldpass && cat > .coldpass/probe.json <<'EOF'
{"kind":"mcp","argv":["node","<guest-path>"],"cwd":"<guest-path>","env":{"PATTERN_TELEMETRY":"0","PATTERN_PROJECT_ROOT":"<guest-path>"},"tool":"register_design_system","arguments":{"project_id":"pattern-check-app","directory_path":"website/components"},"expected_text":"pattern-check-app"}
EOF
cat > .coldpass/claims.json <<'EOF'
[{"kind":"claim","claim":"register_design_system registers a components folder as the candidate pool","source":"Registers *this project's own* design system as the candidate pool","input":"project_id pattern-check-app, directory_path website/components","expected":"status registered with the project_id echoed back","probe_kind":"mcp","argv":["node","<guest-path>"],"tool":"register_design_system","arguments":{"project_id":"pattern-check-app","directory_path":"website/components"},"expected_text":"pattern-check-app","cwd":"<guest-path>","env":{"PATTERN_TELEMETRY":"0","PATTERN_PROJECT_ROOT":"<guest-path>"}}]
EOF
cat > .coldpass/examples.json <<'EOF'
[{"kind":"example","claim":"offline ledger boundary check from the Ledger integrity section","source":"README.md Ledger integrity and decision provenance section","input":"none","expected":"All checks passed.","argv":["node","scripts/verify-ledger-boundary.mjs"],"cwd":"<guest-path>","env":{"PATTERN_TELEMETRY":"0"},"expected_text":"All checks passed."}]
EOF
cat > .coldpass/cycles.json <<'EOF'
{"detected":false,"reason":"Pattern is an stdio MCP server with no daemon or scheduler of its own (src/index.ts:5350: each server invocation is transient and the batch sweep tool is meant to be run by an external cron job or CI step). No --once/--now or loop entry point exists in the README or bin entries, so no product cycle was triggered.","checks":[]}
EOF
for f in probe claims examples cycles; do python3 -I -m json.tool .coldpass/$f.json >/dev/null && echo "$f ok"; done
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay 2>&1 | tail -c 4000; echo "exit=${PIPESTATUS[0]}"
cd <guest-path> && <env-var>=<guest-path> python3 -I <guest-path> --validate --replay > /tmp/check_out.txt 2>&1; echo "exit=$?"; python3 -I -c "
import json,sys
t=open('/tmp/check_out.txt').read()
i=t.find('{')
d=json.loads(t[i:]) if i>=0 else {}
print({k:(v if not isinstance(v,(list,dict)) else type(v).__name__) for k,v in d.items()})
print('problems:', d.get('problems', d.get('errors')))
" 2>&1 | head -c 1500; echo; pgrep -fa 'dist/index.js' || echo "no pattern servers running"
cd <guest-path> && cat > .coldpass/report.json <<'EOF'
{"outcome":"working","fault_owner":null,"operation":"Build pattern-mcp from source and call its register_design_system MCP tool over stdio to register a components folder as a design system","operation_scope":"Node 22.23.4 (README requires >=18), npm 10.9.9, offline. Registers website/components (44 candidates). recommend_component and extract_requirements were NOT exercised because they need ANTHROPIC_API_KEY, which is not set in this guest.","steps":["npm install","npm run build (with PATTERN_TELEMETRY=0)","node dist/index.js (MCP stdio) -> tools/call register_design_system {project_id: pattern-check-app, directory_path: website/components}","node scripts/verify-ledger-boundary.mjs (README Ledger section)","<env-var>=<guest-path> python3 -I <guest-path> --validate --replay"],"deviations":["Did not run 'npx pattern-mcp init': it is interactive and writes MCP client configs and API-key prompts; used the README's documented 'Build from source' path (npm install + npm run build) instead.","Checker path /inputs/coldpass-preflight.py does not exist in this guest; no product cycle was triggered (cycles.json detected=false)."],"stuck_step":null,"main_blocker":null,"plain_failure":null,"suggested_fix":null}
EOF
python3 -I -m json.tool .coldpass/report.json >/dev/null && echo report ok; ls -la .coldpass