registry / @diguike/claudedoctor / 0.1.0

@diguike/claudedoctor@0.1.0

克劳德医生 · 给 Claude Code 做封禁风险体检的 CLI：检测 → 修复 → 复验。只算有因果的信号，每条带置信度与出处。

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 50.9 KB of source, external domains: 127.0.0.1, api.ipapi.is, api.ipdata.co, code.claude.com, dev.to, github.com, ip-api.com, news.ycombinator.com, support.claude.com, venturebeat.com, www.anthropic.com

Source & flagged code

4 flagged

dist/cli.jsView file

Lines 16-56javascript

16 for (let key of __getOwnPropNames(from))

17 if (!__hasOwnProp.call(to, key) && key !== except)

18 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

19 }

20 return to;

21};

22var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

23 // If the importer is in node compatibility mode or this is not an ESM

24 // file that has been converted to a CommonJS file using a Babel-

25 // compatible transform (i.e. "__esModule" has not been set), then set

26 // "default" to the CommonJS "module.exports" for node compatibility.

27 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

28 mod

29));

31// ../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js

32var require_picocolors = __commonJS({

33 "../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js"(exports, module) {

34 var p = process || {};

35 var argv = p.argv || [];

36 var env = p.env || {};

37 var isColorSupported = !(!!env.NO_COLOR || argv.includes("--no-color")) && (!!env.FORCE_COLOR || argv.includes("--color") || p.platform === "win32" || (p.stdout || {}).isTTY && env.TERM !== "dumb" || !!

38 var formatter = (open, close, replace = open) => (input) => {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L36

39 let string = "" + input, index = string.indexOf(close, open.length);

40 return ~index ? open + replaceClose(string, close, replace, index) + close : open + string + close;

41 };

42 var replaceClose = (string, close, replace, index) => {

43 let result = "", cursor = 0;

44 do {

45 result += string.substring(cursor, index) + replace;

46 cursor = index + close.length;

47 index = string.indexOf(close, cursor);

48 } while (~index);

49 return result + string.substring(cursor);

50 };

51 var createColors = (enabled = isColorSupported) => {

52 let f = enabled ? formatter : () => String;

53 return {

54 isColorSupported: enabled,

55 reset: f("\x1B[0m", "\x1B[0m"),

56 bold: f("\x1B[1m", "\x1B[22m", "\x1B[22m\x1B[1m"),

Lines 557-597javascript

557 level = "attention";

558 headline = `\u6709 ${warnCount} \u9879\u9700\u8981\u6CE8\u610F\uFF08\u975E\u786E\u5B9A\u5C01\u53F7\uFF0C\u4F46\u6709\u56E0\u679C\u6216\u536B\u751F\u95EE\u9898\uFF09`;

559 } else {

560 level = "healthy";

561 headline = "\u5B98\u65B9\u914D\u7F6E\uFF0C\u672A\u89C1\u5DF2\u77E5\u5C01\u53F7\u5411\u91CF";

562 }

Lines 943-983javascript

943 }

944 server.close();

945 clearTimeout(timer);

946 resolve(r);

947 };

948 const server = createServer((req, res) => {

949 const chunks = [];

bin/claudedoctor.mjsView file

Lines 1-20javascript

1#!/usr/bin/env node

2/**

3 * claudedoctor / cdoc — launcher. Loads the compiled CLI from ../dist.

4 * Run `pnpm -F @claudedoctor/cli build` first (or `pnpm -r build`).

5 */

6import { fileURLToPath } from 'node:url';

7import { dirname, join } from 'node:path';

8import { existsSync } from 'node:fs';

Source & flagged code

4 flagged · loading source

dist/cli.jsView file

577// src/collect.ts L578: import { execFileSync } from "node:child_process"; L579: import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L577

963const port = server.address().port; L964: child = spawn("claude", ["-p", "ping"], { L965: env: { ...process.env, ANTHROPIC_BASE_URL: `http://127.0.0.1:${port}` }, L966: stdio: "ignore"

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L963

36var env = p.env || {}; L37: var isColorSupported = !(!!env.NO_COLOR || argv.includes("--no-color")) && (!!env.FORCE_COLOR || argv.includes("--color") || p.platform === "win32" || (p.stdout || {}).isTTY && env... L38: var formatter = (open, close, replace = open) => (input) => { ... L108: /** Official Claude Code legal doc — "Authentication and credential use". confirmed. */ L109: ccLegal: "https://code.claude.com/docs/en/legal-and-compliance", L110: /** Anthropic Usage Policy (AUP). confirmed. */ ... L480: scored: false, L481: // access issue, not a ban — don't inflate the risk summary L482: summary: `\u51FA\u53E3\u4E3A\u673A\u623F IP${n.asnOrg ? `\uFF08${n.asnOrg}\uFF09` : ""} \u2014 \u53EF\u80FD\u88AB Cloudflare \u62E6 claude.ai OAuth \u767B\u5F55`, ... L577: // src/collect.ts L578: import { execFileSync } from "node:child_process"; L579: import { existsSync, readFileSync } from "node:fs";

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L36

bin/claudedoctor.mjsView file

17L18: const { main } = await import(entry); L19: process.exit(await main(process.argv.slice(2)));

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/claudedoctor.mjsView on unpkg · L17

Findings

4 High4 Medium4 Low

HighChild Processdist/cli.js

HighShell

HighSame File Env Network Executiondist/cli.js

HighSandbox Evasion Gated Capabilitydist/cli.js

MediumDynamic Requirebin/claudedoctor.mjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/cli.jsView file

Lines 16-56javascript

16 for (let key of __getOwnPropNames(from))

17 if (!__hasOwnProp.call(to, key) && key !== except)

18 __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });

19 }

20 return to;

21};

22var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(

23 // If the importer is in node compatibility mode or this is not an ESM

24 // file that has been converted to a CommonJS file using a Babel-

25 // compatible transform (i.e. "__esModule" has not been set), then set

26 // "default" to the CommonJS "module.exports" for node compatibility.

27 isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,

28 mod

29));

31// ../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js

32var require_picocolors = __commonJS({

33 "../../node_modules/.pnpm/picocolors@1.1.1/node_modules/picocolors/picocolors.js"(exports, module) {

34 var p = process || {};

35 var argv = p.argv || [];

36 var env = p.env || {};

38 var formatter = (open, close, replace = open) => (input) => {

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/cli.jsView on unpkg · L36

39 let string = "" + input, index = string.indexOf(close, open.length);

40 return ~index ? open + replaceClose(string, close, replace, index) + close : open + string + close;

41 };

42 var replaceClose = (string, close, replace, index) => {

43 let result = "", cursor = 0;

44 do {

45 result += string.substring(cursor, index) + replace;

46 cursor = index + close.length;

47 index = string.indexOf(close, cursor);

48 } while (~index);

49 return result + string.substring(cursor);

50 };

51 var createColors = (enabled = isColorSupported) => {

52 let f = enabled ? formatter : () => String;

53 return {

54 isColorSupported: enabled,

55 reset: f("\x1B[0m", "\x1B[0m"),

56 bold: f("\x1B[1m", "\x1B[22m", "\x1B[22m\x1B[1m"),

Lines 557-597javascript

557 level = "attention";

558 headline = `\u6709 ${warnCount} \u9879\u9700\u8981\u6CE8\u610F\uFF08\u975E\u786E\u5B9A\u5C01\u53F7\uFF0C\u4F46\u6709\u56E0\u679C\u6216\u536B\u751F\u95EE\u9898\uFF09`;

559 } else {

560 level = "healthy";

561 headline = "\u5B98\u65B9\u914D\u7F6E\uFF0C\u672A\u89C1\u5DF2\u77E5\u5C01\u53F7\u5411\u91CF";

562 }

Lines 943-983javascript

943 }

944 server.close();

945 clearTimeout(timer);

946 resolve(r);

947 };

948 const server = createServer((req, res) => {

949 const chunks = [];

bin/claudedoctor.mjsView file

Lines 1-20javascript

1#!/usr/bin/env node

2/**

3 * claudedoctor / cdoc — launcher. Loads the compiled CLI from ../dist.

4 * Run `pnpm -F @claudedoctor/cli build` first (or `pnpm -r build`).

5 */

6import { fileURLToPath } from 'node:url';

7import { dirname, join } from 'node:path';

8import { existsSync } from 'node:fs';