registry / @nextsparkjs/ai-workflow / 0.1.0-beta.178

@nextsparkjs/ai-workflow@0.1.0-beta.178

AI workflow templates for NextSpark - Claude Code agents, commands, skills, and multi-editor support

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 22 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 19.1 KB of source

Source & flagged code

18 flagged

package.jsonView file

Lines 13-35json

13 "keywords": [

14 "nextjs",

15 "ai",

16 "workflow",

17 "claude",

18 "cursor",

19 "agents",

20 "developer-tools"

21 ],

22 "type": "module",

23 "main": "./scripts/setup.mjs",

24 "files": [

25 "claude",

26 "cursor",

27 "scripts",

28 "README.md"

29 ],

30 "scripts": {

31 "setup": "node scripts/setup.mjs",

32 "sync": "node scripts/sync.mjs",

33 "postinstall": "node scripts/postinstall.mjs || true"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L33

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L33

34 }

35}

claude/skills/nextjs-api-development/scripts/generate-crud-tests.pyView file

Lines 154-194python

154 return f'''/// <reference types="cypress" />

155

156/**

157 * {pascal} API - CRUD Tests

158 *

159 * Basic CRUD operations for /api/v1/{entity} endpoints

160 * Uses superadmin API key for full access with team context

161 */

162

163import * as allure from 'allure-cypress'

164

165const {pascal}APIController = require('../../../src/controllers/{pascal}APIController.js')

claude/agents/api-tester.mdView file

Lines 58-108markdown

59```bash

60# Start development server (if not running)

61pnpm dev &

63# Wait for server to be ready

64sleep 10

66# Verify server is running

67curl -s

claude/agents/db-validator.mdView file

Lines 153-193markdown

153**Pass Criteria:**

154- [ ] User table has 5+ test users

155- [ ] Main entity tables have 20+ records

156- [ ] Related tables have proportional records

157

158### 5. Verify Test Users

159

160```sql

161-- Check test users exist

162SELECT id,

claude/commands/how-to/use-devtools.mdView file

Lines 550-590markdown

550 • /how-to:manage-test-coverage - Testing strategy

551 • /how-to:create-api - Create API endpoints

552

553🔙 Back to menu: /how-to:start

554```

555

556---

557

558## Interactive Options

559

560### "How do I make someone a developer?"

561

562

claude/commands/how-to/setup-authentication.mdView file

197patternName = generic_password severity = medium line = 197 matchedText = password...34',

Medium

Secret Pattern

Hardcoded password in claude/commands/how-to/setup-authentication.md

claude/commands/how-to/setup-authentication.mdView on unpkg · L197

203patternName = generic_password severity = medium line = 203 matchedText = password...34',

Medium

Secret Pattern

Hardcoded password in claude/commands/how-to/setup-authentication.md

claude/commands/how-to/setup-authentication.mdView on unpkg · L203

claude/commands/how-to/use-superadmin.mdView file

108patternName = generic_password severity = medium line = 108 matchedText = password...34',

Medium

Secret Pattern

Hardcoded password in claude/commands/how-to/use-superadmin.md

claude/commands/how-to/use-superadmin.mdView on unpkg · L108

claude/skills/cypress-e2e/SKILL.mdView file

112patternName = generic_password severity = medium line = 112 matchedText = // Team-...34')

Medium

Secret Pattern

Hardcoded password in claude/skills/cypress-e2e/SKILL.md

claude/skills/cypress-e2e/SKILL.mdView on unpkg · L112

121patternName = generic_password severity = medium line = 121 matchedText = // Core ...34')

Medium

Secret Pattern

Hardcoded password in claude/skills/cypress-e2e/SKILL.md

claude/skills/cypress-e2e/SKILL.mdView on unpkg · L121

claude/skills/jest-unit/references/component-testing.mdView file

42patternName = generic_password severity = medium line = 42 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in claude/skills/jest-unit/references/component-testing.md

claude/skills/jest-unit/references/component-testing.mdView on unpkg · L42

claude/skills/better-auth/SKILL.mdView file

708patternName = generic_password severity = medium line = 708 matchedText = user.pas...ord'

Medium

Secret Pattern

Hardcoded password in claude/skills/better-auth/SKILL.md

claude/skills/better-auth/SKILL.mdView on unpkg · L708

claude/skills/scheduled-actions/SKILL.mdView file

579patternName = generic_password severity = medium line = 579 matchedText = password...n DB

Medium

Secret Pattern

Hardcoded password in claude/skills/scheduled-actions/SKILL.md

claude/skills/scheduled-actions/SKILL.mdView on unpkg · L579

Source & flagged code

18 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.mjs || true

High

@nextsparkjs/ai-workflow@0.1.0-beta.178

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code