registry / @lucidetech/shiprun / 0.6.0

@lucidetech/shiprun@0.6.0

Scans your vibe-coded Next.js + Supabase app and tells you exactly what's missing to make it production-ready.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package is a local security/readiness scanner with user-invoked report generation and Claude Code helper setup. The main unresolved risk is first-party AI-agent lifecycle mutation, not malware or install-time compromise.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs shiprun scan or shiprun deploy

Impact

Claude Code may run the package-owned SessionStart hook in the target repo and generated agents may influence future assistant behavior within shiprun-scoped findings.

Mechanism

local scanner writes reports, state, and Claude Code hook/agent helper files

Rationale

Source inspection supports a warning for first-party, user-invoked Claude control-surface setup, but not a publish block. Scanner hits for secrets/network are package-aligned detectors and documentation examples rather than embedded secrets or exfiltration.

Evidence

package.jsondist/cli.jsdist/hook.jsdist/deploy.jsdist/fixer.jsdist/checks/secrets.jsdist/checks/dependencies.jsREADME.mdSHIPRUN.mdshiprun-report/./.shiprun/findings.json./.shiprun/history.jsonl./.shiprun/changelog.md./.claude/settings.json./.claude/hooks/shiprun-context.cjs./.claude/context/shiprun-house-rules.md./.claude/agents/shiprun-fix-*.mdCLAUDE.md./.shiprun/deploy-manifest.json.gitignore.github/workflows/ci.yml.env.example

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

dist/cli.js default scan calls ensureSessionStartHook unless --no-hook is passed.
dist/hook.js writes .claude/hooks/shiprun-context.cjs and registers it in .claude/settings.json SessionStart.
dist/deploy.js user-invoked deploy writes .claude/context, .claude/agents, and a managed CLAUDE.md block.

Evidence against

package.json has no preinstall/install/postinstall; prepare/prepublishOnly only run npm build.
Generated hook only reads .shiprun/findings.json and history.jsonl, prints a local summary, and has no network code.
No external network endpoints found; npm audit/git ls-files are scanner checks, not payload download or exfiltration.
Secret patterns in dist/checks/secrets.js are regex detectors for user project scanning, not embedded credentials.
Writes are documented CLI behavior for reports, local state, fix scaffolding, and Claude helper files.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 24 file(s), 126 KB of source

Source & flagged code

2 flagged

dist/checks/secrets.jsView file

Lines 1-38javascript

1import { readFileSync, existsSync } from "node:fs";

2import { execFileSync } from "node:child_process";

3import { relative } from "node:path";

4import { listFiles } from "../walk.js";

5const SERVER_ONLY_HINTS = [/\/api\//, /\/server\//, /route\.ts$/, /route\.js$/, /\.server\.ts$/, /middleware\.ts$/];

6function isLikelyServerFile(relPath) {

7 return SERVER_ONLY_HINTS.some((re) => re.test(relPath.replace(/\\/g, "/")));

9// Literal key prefixes for common providers — these are live-credential shaped strings,

10// not just env var *names*, so a match here is much higher-confidence than the generic scan.

11const LITERAL_KEY_PATTERNS = [

12 { name: "AWS access key", re: /AKIA[0-9A-Z]{16}/ },

13 { name: "Stripe live secret key", re: /sk_live_[0-9a-zA-Z]{16,}/ },

14 { name: "Stripe live restricted key", re: /rk_live_[0-9a-zA-Z]{16,}/ },

15 { name: "OpenAI API key", re: /sk-[a-zA-Z0-9]{20,}T3BlbkFJ[a-zA-Z0-9]{20,}|sk-proj-[a-zA-Z0-9_-]{20,}/ },

16 { name: "GitHub personal access token", re: /gh[pousr]_[A-Za-z0-9]{36,}/ },

17 { name: "Slack token", re: /xox[baprs]-[A-Za-z0-9-]{10,}/ },

18 { name: "Google/Firebase private key", re: /"private_key"\s*:\s*"-----BEGIN PRIVATE KEY-----/ },

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/checks/secrets.jsView on unpkg · L18

Critical

Secret Pattern

RSA private key in dist/checks/secrets.js

dist/checks/secrets.jsView on unpkg · L18

19 { name: "SendGrid API key", re: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/ },

20 { name: "Discord bot token", re: /[a-zA-Z0-9_-]{24}\.[a-zA-Z0-9_-]{6}\.[a-zA-Z0-9_-]{27}/ },

21 { name: "Database URL connection string", re: /postgres(?:ql)?:\/\/[^:]+:[^@]+@[^/]+/ },

22];

23function gitTrackedFiles(root) {

24 try {

25 const out = execFileSync("git", ["ls-files"], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });

26 return new Set(out.split("\n").map((f) => f.trim()).filter(Boolean));

27 }

28 catch {

29 return undefined; // not a git repo, or git unavailable — skip the tracked-file check

30 }

31}

32export async function checkSecrets(stack) {

33 const findings = [];

34 // .env files present but not gitignored

35 const envFiles = await listFiles(stack.root, [".env", ".env.local", ".env.production", ".env.development"]);

36 if (envFiles.length > 0) {

37 const gitignorePath = `${stack.root}/.gitignore`;

38 const gitignore = existsSync(gitignorePath) ? readFileSync(gitignorePath, "utf8") : "";

Source & flagged code

2 flagged · loading source

dist/checks/secrets.jsView file

18patternName = private_key_rsa severity = critical line = 18 matchedText = { name: .../ },

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/checks/secrets.jsView on unpkg · L18

18patternName = private_key_rsa severity = critical line = 18 matchedText = { name: .../ },

Critical

Secret Pattern

RSA private key in dist/checks/secrets.js

dist/checks/secrets.jsView on unpkg · L18

Findings

2 Critical2 Medium4 Low

CriticalCritical Secretdist/checks/secrets.js

CriticalSecret Patterndist/checks/secrets.js

MediumNetwork

MediumEnvironment Vars

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

Source & flagged code

2 flagged

dist/checks/secrets.jsView file

Lines 1-38javascript

1import { readFileSync, existsSync } from "node:fs";

2import { execFileSync } from "node:child_process";

3import { relative } from "node:path";

4import { listFiles } from "../walk.js";

5const SERVER_ONLY_HINTS = [/\/api\//, /\/server\//, /route\.ts$/, /route\.js$/, /\.server\.ts$/, /middleware\.ts$/];

6function isLikelyServerFile(relPath) {

7 return SERVER_ONLY_HINTS.some((re) => re.test(relPath.replace(/\\/g, "/")));

9// Literal key prefixes for common providers — these are live-credential shaped strings,

10// not just env var *names*, so a match here is much higher-confidence than the generic scan.

11const LITERAL_KEY_PATTERNS = [

12 { name: "AWS access key", re: /AKIA[0-9A-Z]{16}/ },

13 { name: "Stripe live secret key", re: /sk_live_[0-9a-zA-Z]{16,}/ },

14 { name: "Stripe live restricted key", re: /rk_live_[0-9a-zA-Z]{16,}/ },

15 { name: "OpenAI API key", re: /sk-[a-zA-Z0-9]{20,}T3BlbkFJ[a-zA-Z0-9]{20,}|sk-proj-[a-zA-Z0-9_-]{20,}/ },

16 { name: "GitHub personal access token", re: /gh[pousr]_[A-Za-z0-9]{36,}/ },

17 { name: "Slack token", re: /xox[baprs]-[A-Za-z0-9-]{10,}/ },

18 { name: "Google/Firebase private key", re: /"private_key"\s*:\s*"-----BEGIN PRIVATE KEY-----/ },

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/checks/secrets.jsView on unpkg · L18

Critical

Secret Pattern

RSA private key in dist/checks/secrets.js

dist/checks/secrets.jsView on unpkg · L18

19 { name: "SendGrid API key", re: /SG\.[a-zA-Z0-9_-]{22}\.[a-zA-Z0-9_-]{43}/ },

20 { name: "Discord bot token", re: /[a-zA-Z0-9_-]{24}\.[a-zA-Z0-9_-]{6}\.[a-zA-Z0-9_-]{27}/ },

21 { name: "Database URL connection string", re: /postgres(?:ql)?:\/\/[^:]+:[^@]+@[^/]+/ },

22];

23function gitTrackedFiles(root) {

24 try {

25 const out = execFileSync("git", ["ls-files"], { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });

26 return new Set(out.split("\n").map((f) => f.trim()).filter(Boolean));

27 }

28 catch {

29 return undefined; // not a git repo, or git unavailable — skip the tracked-file check

30 }

31}

32export async function checkSecrets(stack) {

33 const findings = [];

34 // .env files present but not gitignored

35 const envFiles = await listFiles(stack.root, [".env", ".env.local", ".env.production", ".env.development"]);

36 if (envFiles.length > 0) {

37 const gitignorePath = `${stack.root}/.gitignore`;

38 const gitignore = existsSync(gitignorePath) ? readFileSync(gitignorePath, "utf8") : "";