registry / @k2works/claude-code-booster / 4.9.0

@k2works/claude-code-booster@4.9.0

AI Agent Development Support Tool

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis flagged 17 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 11 file(s), 65.7 KB of source

Source & flagged code

12 flagged

lib/assets/ops/scripts/sonar_local.jsView file

Lines 1-25javascript

1'use strict';

3import path from 'path';

4import fs from 'fs';

5import readline from 'readline';

6import { execSync } from 'child_process';

7import { cleanDockerEnv } from './shared.js';

High

Child Process

Package source references child process execution.

lib/assets/ops/scripts/sonar_local.jsView on unpkg · L5

9// ============================================

10// 設定

11// ============================================

13/**

14 * プロジェクト定義を取得

15 * sonarqube.config.json から読み込み、なければデフォルトを返す

16 *

17 * sonarqube.config.json のフォーマット:

18 * {

19 * "projects": [

20 * { "name": "backend", "label": "Backend", "projectKey": "my-backend", "scanType": "sonar-scanner", "srcDir": "apps/backend" },

21 * { "name": "frontend", "label": "Frontend", "projectKey": "my-frontend", "scanType": "sonar-scanner", "srcDir": "apps/frontend" }

22 * ]

23 * }

24 *

25 * scanType: "sonar-scanner" (npx sonarqube-scanner) | "sbt" (sbt sonarScan) | "maven" (mvn sonar:sonar) | "gradle" (gradle sonar)

Lines 59-99javascript

60/** docker-compose.yml のディレクトリ */

61function composeDir() {

62 return path.join(process.cwd(), 'ops', 'docker', 'sonarqube-local');

63}

65// ============================================

66// ヘルパー関数

Lines 269-309javascript

269

270 switch (project.scanType) {

271 case 'sbt':

272 execSync(

273 `sbt -Dsonar.host.url=${hostUrl} -Dsonar.token=${token} sonarScan`,

274 { stdio: 'inherit', cwd, shell: true, env: cleanDockerEnv

lib/assets/.claude/skills/creating-slides/scripts/slide_tools.pyView file

•path = lib/assets/.claude/skills/creating-slides/scripts/slide_tools.py kind = payload_in_excluded_dir sizeBytes = 8696 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

lib/assets/.claude/skills/creating-slides/scripts/slide_tools.pyView on unpkg

•path = lib/assets/.claude/skills/creating-slides/scripts/slide_tools.py kind = build_helper sizeBytes = 8696 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

lib/assets/.claude/skills/creating-slides/scripts/slide_tools.pyView on unpkg

lib/assets/docs/template/インセプションデッキ.pptxView file

•path = lib/assets/docs/template/インセプションデッキ.pptx kind = high_entropy_blob sizeBytes = 809734 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

lib/assets/docs/template/インセプションデッキ.pptxView on unpkg

•path = lib/assets/docs/template/インセプションデッキ.pptx kind = compressed_blob sizeBytes = 809734 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

lib/assets/docs/template/インセプションデッキ.pptxView on unpkg

•path = lib/assets/docs/template/インセプションデッキ.pptx kind = nested_archive_needs_inspection sizeBytes = 809734 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

lib/assets/docs/template/インセプションデッキ.pptxView on unpkg

package.jsonView file

Lines 1-29json

2 "name": "@k2works/claude-code-booster",

3 "version": "4.9.0",

4 "description": "AI Agent Development Support Tool",

5 "main": "main.js",

lib/assets/docs/template/AWSステージング環境セットアップ手順書.mdView file

Lines 431-471markdown

431}

432

433resource "aws_ssm_parameter" "db_password" {

434 name = "${local.ssm_parameter_key}/DB_PASSWORD"

435 type = "SecureString"

436 value = var.db_password

437

438 tags = {

439 Name = local.resource_name

440 ResourceGroupName = local.resource_name

lib/assets/docs/template/AWSプロダクション環境セットアップ手順書.mdView file

Lines 262-302markdown

262### 1.2 GitHub Actions 用 IAM ロールの作成

263

264作業ディレクトリ: `ops/terraform/live/global/iam`

265

266> **詳細**: [ステージング環境セットアップ手順書 > IAM ロールの作成](AWSステージング環境セットアップ手順書.md#4-github-actions-用-iam-ロールの作成) を参照してください。

267

268```bash

269

lib/assets/docs/reference/コーディングとテストガイド.mdView file

Lines 304-344markdown

304 - [ ] findByEmail()メソッド

305 - [ ] existsByEmail()メソッド

306 - [ ] UserServiceの実装

307 - [ ] register()メソッド

308 - [ ] 重複チェック

309 - [ ] パスワードハッシュ化

310

Source & flagged code

12 flagged · loading source

lib/assets/ops/scripts/sonar_local.jsView file

5import readline from 'readline'; L6: import { execSync } from 'child_process'; L7: import { cleanDockerEnv } from './shared.js';

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code