registry / @educa-corp/sdd-framework / 0.2.3

@educa-corp/sdd-framework@0.2.3

Spec Driven Development workflow framework for Claude Code

Static Scan Results

scanned 8d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessDynamicRequireFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 6 file(s), 67.7 KB of source

Source & flagged code

2 flagged

core/hooks/data-guard.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * data-guard.js — Claude Code PreToolUse Hook

4 *

5 * Blocks AI from reading, writing, or executing commands involving

6 * sensitive files (credentials, secrets, private keys, .env, etc.)

7 *

8 * Install: copy to your project and register in .claude/settings.json

9 * (see hooks/settings.json for registration template)

10 *

11 * Exit codes:

12 * 0 = allow the tool call

13 * 2 = block the tool call (Claude Code interprets this as a hard block)

14 */

16const readline = require('readline');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/hooks/data-guard.jsView on unpkg · L15

18// ── Sensitive file patterns ────────────────────────────────────────────────

20const SENSITIVE_PATH_PATTERNS = [

21 // Environment files

22 /^\.env$/i,

23 /^\.env\./i,

24 /\.env$/i,

26 // Secret/credential files

27 /secret/i,

28 /credential/i,

29 /password/i,

30 /passwd/i,

31 /private[_-]?key/i,

32 /api[_-]?key/i,

33 /access[_-]?token/i,

34 /auth[_-]?token/i,

scripts/init.shView file

•path = scripts/init.sh kind = build_helper sizeBytes = 1962 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/init.shView on unpkg

Source & flagged code

2 flagged · loading source

core/hooks/data-guard.jsView file

15L16: const readline = require('readline'); L17:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/hooks/data-guard.jsView on unpkg · L15

scripts/init.shView file

•path = scripts/init.sh kind = build_helper sizeBytes = 1962 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/init.shView on unpkg

Findings

3 Medium4 Low

MediumDynamic Requirecore/hooks/data-guard.js

MediumShips Build Helperscripts/init.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

core/hooks/data-guard.jsView file

Lines 1-35javascript

1#!/usr/bin/env node

2/**

3 * data-guard.js — Claude Code PreToolUse Hook

4 *

5 * Blocks AI from reading, writing, or executing commands involving

6 * sensitive files (credentials, secrets, private keys, .env, etc.)

7 *

8 * Install: copy to your project and register in .claude/settings.json

9 * (see hooks/settings.json for registration template)

10 *

11 * Exit codes:

12 * 0 = allow the tool call

13 * 2 = block the tool call (Claude Code interprets this as a hard block)

14 */

16const readline = require('readline');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/hooks/data-guard.jsView on unpkg · L15

18// ── Sensitive file patterns ────────────────────────────────────────────────

20const SENSITIVE_PATH_PATTERNS = [

21 // Environment files

22 /^\.env$/i,

23 /^\.env\./i,

24 /\.env$/i,

26 // Secret/credential files

27 /secret/i,

28 /credential/i,

29 /password/i,

30 /passwd/i,

31 /private[_-]?key/i,

32 /api[_-]?key/i,

33 /access[_-]?token/i,

34 /auth[_-]?token/i,

scripts/init.shView file

•path = scripts/init.sh kind = build_helper sizeBytes = 1962 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/init.shView on unpkg