registry  /  @the-bearded-bear/claude-craft  /  8.19.0

@the-bearded-bear/claude-craft@8.19.0

A comprehensive framework for AI-assisted development with Claude Code. Install standardized rules, agents, and commands for your projects.

Static Scan Results

scanned 15d ago · by rust-scanner

Static analysis flagged 50 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 74 file(s), 943 KB of source, external domains: 127.0.0.1, api.example.com, github.com, org.example, svelte.dev, www.w3.org

Source & flagged code

41 flagged · loading source
cli/lib/update.jsView file
7import path from 'path'; L8: import { spawnSync } from 'child_process'; L9: import c from './colors.js';
High
Child Process

Package source references child process execution.

cli/lib/update.jsView on unpkg · L7
cli/lib/skill.jsView file
10* MVP scope: L11: * - `skill add <pkg>` → npm install + copy markdown files L12: * - `skill list` → list installed community skills ... L22: import fs from 'fs'; L23: import { spawnSync } from 'child_process'; L24: import c from './colors.js';
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/lib/skill.jsView on unpkg · L10
Infra/install-kubernetes-rules.shView file
•path = Infra/install-kubernetes-rules.sh kind = build_helper sizeBytes = 12401 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

Infra/install-kubernetes-rules.shView on unpkg
cli/kanban/client/dist/assets/jetbrains-mono-vietnamese-600-normal-OWROknRo.woffView file
•path = [redacted]-mono-vietnamese-600-normal-OWROknRo.woff kind = high_entropy_blob sizeBytes = 5476 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

cli/kanban/client/dist/assets/jetbrains-mono-vietnamese-600-normal-OWROknRo.woffView on unpkg
Tools/Ralph/.ralph/hooks/stop-dod-gate.shView file
•path = Tools/Ralph/.ralph/hooks/stop-dod-gate.sh kind = payload_in_excluded_dir sizeBytes = 3846 magicHex = [redacted]
High
Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

Tools/Ralph/.ralph/hooks/stop-dod-gate.shView on unpkg
Infra/i18n/pt/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/pt/Ansible/agents/ansible-security.md

Infra/i18n/pt/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/de/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/de/Ansible/agents/ansible-security.md

Infra/i18n/de/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/fr/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/fr/Ansible/agents/ansible-security.md

Infra/i18n/fr/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/es/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/es/Ansible/agents/ansible-security.md

Infra/i18n/es/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/en/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/en/Ansible/agents/ansible-security.md

Infra/i18n/en/Ansible/agents/ansible-security.mdView on unpkg · L104
Dev/i18n/pt/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/PHP/rules/07-testing-php.md

Dev/i18n/pt/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/PHP/rules/07-testing-php.md

Dev/i18n/pt/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/pt/Flutter/rules/07-testing-flutter.mdView file
427patternName = generic_password severity = medium line = 427 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/Flutter/rules/07-testing-flutter.md

Dev/i18n/pt/Flutter/rules/07-testing-flutter.mdView on unpkg · L427
Dev/i18n/pt/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/Flutter/commands/check-security.md

Dev/i18n/pt/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/pt/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = passwo...
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/React/rules/07-testing-react.md

Dev/i18n/pt/React/rules/07-testing-react.mdView on unpkg · L267
Dev/i18n/de/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/PHP/rules/07-testing-php.md

Dev/i18n/de/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/PHP/rules/07-testing-php.md

Dev/i18n/de/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/de/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/Flutter/commands/check-security.md

Dev/i18n/de/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/de/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/React/rules/07-testing-react.md

Dev/i18n/de/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/React/rules/07-testing-react.md

Dev/i18n/de/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/React/rules/07-testing-react.md

Dev/i18n/de/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/fr/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/PHP/rules/07-testing-php.md

Dev/i18n/fr/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/PHP/rules/07-testing-php.md

Dev/i18n/fr/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/fr/Flutter/rules/07-testing-flutter.mdView file
427patternName = generic_password severity = medium line = 427 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/Flutter/rules/07-testing-flutter.md

Dev/i18n/fr/Flutter/rules/07-testing-flutter.mdView on unpkg · L427
Dev/i18n/fr/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/Flutter/commands/check-security.md

Dev/i18n/fr/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/fr/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/React/rules/07-testing-react.md

Dev/i18n/fr/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/React/rules/07-testing-react.md

Dev/i18n/fr/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/React/rules/07-testing-react.md

Dev/i18n/fr/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/es/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/PHP/rules/07-testing-php.md

Dev/i18n/es/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/PHP/rules/07-testing-php.md

Dev/i18n/es/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/es/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/Flutter/commands/check-security.md

Dev/i18n/es/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/es/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/React/rules/07-testing-react.md

Dev/i18n/es/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/React/rules/07-testing-react.md

Dev/i18n/es/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/React/rules/07-testing-react.md

Dev/i18n/es/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/en/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/PHP/rules/07-testing-php.md

Dev/i18n/en/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/PHP/rules/07-testing-php.md

Dev/i18n/en/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/en/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/Flutter/commands/check-security.md

Dev/i18n/en/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/en/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/React/rules/07-testing-react.md

Dev/i18n/en/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/React/rules/07-testing-react.md

Dev/i18n/en/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/React/rules/07-testing-react.md

Dev/i18n/en/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/base/Angular/rules/11-security-angular.mdView file
342patternName = generic_password severity = medium line = 342 matchedText = console....rd);
Medium
Secret Pattern

Hardcoded password in Dev/i18n/base/Angular/rules/11-security-angular.md

Dev/i18n/base/Angular/rules/11-security-angular.mdView on unpkg · L342

Findings

5 High40 Medium5 Low
HighChild Processcli/lib/update.js
HighShell
HighRuntime Package Installcli/lib/skill.js
HighShips High Entropy Blobcli/kanban/client/dist/assets/jetbrains-mono-vietnamese-600-normal-OWROknRo.woff
HighPayload In Excluded DirTools/Ralph/.ralph/hooks/stop-dod-gate.sh
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperInfra/install-kubernetes-rules.sh
MediumStructural Risk Force Deep Review
MediumSecret PatternInfra/i18n/pt/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/de/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/fr/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/es/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/en/Ansible/agents/ansible-security.md
MediumSecret PatternDev/i18n/pt/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/pt/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/pt/Flutter/rules/07-testing-flutter.md
MediumSecret PatternDev/i18n/pt/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/pt/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/de/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/de/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/de/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/de/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/de/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/de/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/fr/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/fr/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/fr/Flutter/rules/07-testing-flutter.md
MediumSecret PatternDev/i18n/fr/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/fr/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/fr/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/fr/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/es/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/es/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/es/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/es/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/es/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/es/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/en/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/en/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/en/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/en/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/en/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/en/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/base/Angular/rules/11-security-angular.md
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings