registry / @chrono-meta/fh-gate / 1.4.48

@chrono-meta/fh-gate@1.4.48

FH runtime adapters — run FH governance, skills, and agents via Claude or Codex with machine-parseable gates.

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis flagged 5 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcess

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 704 B of source

Source & flagged code

3 flagged

plugins/fh-meta/skills/public-surface-audit/SKILL.mdView file

Lines 131-171markdown

131Then remove any hit whose `file` + matched `token` is on the Step 2 allowlist. Do this for **every**

132pattern row before producing the report — do not stop at the first HIT.

133

134**Binary / generated carve-out**: `-I` already skips binaries. Additionally note (do not auto-suppress)

135hits inside generated artifacts (e.g. `paper/*.html` exported from a private source) — these are real

136leaks on the public surface and must be reported, but the fix is "regenerate from a sanitized source",

137not "edit the HTML by hand". Flag them with a `(generated artifact)` note.

138

139---

140

141## Step 3b. FP Hygiene — Placeholder & Example Exclusion

142

143A scan that flags its own placeholders erodes trust. Two **value-shape** classes are never real leaks

144and are dropped before the report — imported from `gstack-redact`'s canonical-example allowlist, scoped

145in PSA's direction to the *matched token* (not the whole line, so a real leak sharing a substring still

146reports):

147

148- **Angle-bracket placeholders** — the matched token is itself a placeholder (`<your-unix-username>`,

149 `<company-asset>`, `{project}`). PSA dogfoods these in Step 1; the scan must not report them as leaks.

150- **Canonical dummy values** — the matched token is a documented example/dummy (`EXAMPLE`, `dummy`,

151 `changeme`, `REDACTED`, `xxxx`, AWS-doc keys like `AKIAIOSFODNN7EXAMPLE`). A high-entropy *example* is

Critical

Critical Secret

Package contains a critical-looking secret pattern.

plugins/fh-meta/skills/public-surface-audit/SKILL.mdView on unpkg · L151

Critical

Secret Pattern

AWS access key ID in plugins/fh-meta/skills/public-surface-audit/SKILL.md

plugins/fh-meta/skills/public-surface-audit/SKILL.mdView on unpkg · L151

152 not a secret.

153

154```bash

155# FP-hygiene tests the MATCHED TOKEN only — never the whole line. A line-level `grep -v` would

156# suppress a real leak that merely *mentions* an example (e.g. `user=<realname> # see EXAMPLE.md`),

157# violating PSA's "allowlist tight" rule. So extract the matched span per hit and drop it only when

158# the span is *entirely* a placeholder/example (anchored ^…$).

159PLACEHOLDER='^(<[a-z0-9_-]+>|\{project\}|EXAMPLE|dummy|changeme|REDACTED|xxxx)$'

160grep -nIE "$regex" $(cat /tmp/_psa_tracked.txt) 2>/dev/null | while IFS= read -r hit; do

161 tok=$(printf '%s' "$hit" | grep -oiE "$regex" | head -1)

162 printf '%s' "$tok" | grep -qiE "$PLACEHOLDER" && continue # token IS a placeholder → drop

163 printf '%s\n' "$hit"

164done

165```

166

167This differs from the Step 2 allowlist: Step 2 suppresses by **file::token legitimacy**, Step 3b by

168**token value-shape**. Both run — Step 2 then Step 3b. Keep it tight (PSA's "allowlist tight" rule): if a

169token only *contains* an example substring but is otherwise a real private value, it still reports.

170

171---

scripts/fh-gate.shView file

•path = scripts/fh-gate.sh kind = build_helper sizeBytes = 21599 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/fh-gate.shView on unpkg

Source & flagged code

3 flagged · loading source

plugins/fh-meta/skills/public-surface-audit/SKILL.mdView file

151patternName = aws_access_key severity = critical line = 151 matchedText = `changem...* is

Critical

Critical Secret

Package contains a critical-looking secret pattern.

plugins/fh-meta/skills/public-surface-audit/SKILL.mdView on unpkg · L151

151patternName = aws_access_key severity = critical line = 151 matchedText = `changem...* is

Critical

Secret Pattern

AWS access key ID in plugins/fh-meta/skills/public-surface-audit/SKILL.md

plugins/fh-meta/skills/public-surface-audit/SKILL.mdView on unpkg · L151

scripts/fh-gate.shView file

•path = scripts/fh-gate.sh kind = build_helper sizeBytes = 21599 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/fh-gate.shView on unpkg

Findings

2 Critical1 Medium2 Low

CriticalCritical Secretplugins/fh-meta/skills/public-surface-audit/SKILL.md

CriticalSecret Patternplugins/fh-meta/skills/public-surface-audit/SKILL.md

MediumShips Build Helperscripts/fh-gate.sh

LowNon Install Lifecycle Scripts

LowScripts Present