registry  /  @the-bearded-bear/claude-craft  /  8.19.5

@the-bearded-bear/claude-craft@8.19.5

⚠ Under review

A comprehensive framework for AI-assisted development with Claude Code. Install standardized rules, agents, and commands for your projects.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 50 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemNetworkShell
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 74 file(s), 942 KB of source, external domains: 127.0.0.1, api.example.com, github.com, org.example, svelte.dev, www.w3.org

Source & flagged code

41 flagged · loading source
cli/lib/update.jsView file
7import path from 'path'; L8: import { spawnSync } from 'child_process'; L9: import c from './colors.js';
High
Child Process

Package source references child process execution.

cli/lib/update.jsView on unpkg · L7
cli/lib/skill.jsView file
10* MVP scope: L11: * - `skill add <pkg>` → npm install + copy markdown files L12: * - `skill list` → list installed community skills ... L22: import fs from 'fs'; L23: import { spawnSync } from 'child_process'; L24: import c from './colors.js';
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

cli/lib/skill.jsView on unpkg · L10
Infra/install-kubernetes-rules.shView file
path = Infra/install-kubernetes-rules.sh kind = build_helper sizeBytes = 12401 magicHex = [redacted]
Medium
Ships Build Helper

Package ships non-JavaScript build or shell helper files.

Infra/install-kubernetes-rules.shView on unpkg
cli/kanban/client/dist/assets/jetbrains-mono-vietnamese-600-normal-OWROknRo.woffView file
path = [redacted]-mono-vietnamese-600-normal-OWROknRo.woff kind = high_entropy_blob sizeBytes = 5476 magicHex = [redacted]
High
Ships High Entropy Blob

Package ships high-entropy non-source blobs.

cli/kanban/client/dist/assets/jetbrains-mono-vietnamese-600-normal-OWROknRo.woffView on unpkg
Tools/Ralph/.ralph/hooks/stop-dod-gate.shView file
path = Tools/Ralph/.ralph/hooks/stop-dod-gate.sh kind = payload_in_excluded_dir sizeBytes = 3846 magicHex = [redacted]
High
Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

Tools/Ralph/.ralph/hooks/stop-dod-gate.shView on unpkg
cli/lib/doctor.jsView file
matchType = previous_version_dangerous_delta matchedPackage = @the-bearded-bear/claude-craft@8.19.0 matchedIdentity = npm:[redacted]:8.19.0 similarity = 0.878 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

cli/lib/doctor.jsView on unpkg
Infra/i18n/pt/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/pt/Ansible/agents/ansible-security.md

Infra/i18n/pt/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/de/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/de/Ansible/agents/ansible-security.md

Infra/i18n/de/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/fr/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/fr/Ansible/agents/ansible-security.md

Infra/i18n/fr/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/es/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/es/Ansible/agents/ansible-security.md

Infra/i18n/es/Ansible/agents/ansible-security.mdView on unpkg · L104
Infra/i18n/en/Ansible/agents/ansible-security.mdView file
104patternName = generic_password severity = medium line = 104 matchedText = app_db_p... }}"
Medium
Secret Pattern

Hardcoded password in Infra/i18n/en/Ansible/agents/ansible-security.md

Infra/i18n/en/Ansible/agents/ansible-security.mdView on unpkg · L104
Dev/i18n/pt/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/PHP/rules/07-testing-php.md

Dev/i18n/pt/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/PHP/rules/07-testing-php.md

Dev/i18n/pt/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/pt/Flutter/rules/07-testing-flutter.mdView file
427patternName = generic_password severity = medium line = 427 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/Flutter/rules/07-testing-flutter.md

Dev/i18n/pt/Flutter/rules/07-testing-flutter.mdView on unpkg · L427
Dev/i18n/pt/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/Flutter/commands/check-security.md

Dev/i18n/pt/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/pt/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = passwo...
Medium
Secret Pattern

Hardcoded password in Dev/i18n/pt/React/rules/07-testing-react.md

Dev/i18n/pt/React/rules/07-testing-react.mdView on unpkg · L267
Dev/i18n/de/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/PHP/rules/07-testing-php.md

Dev/i18n/de/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/PHP/rules/07-testing-php.md

Dev/i18n/de/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/de/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/Flutter/commands/check-security.md

Dev/i18n/de/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/de/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/React/rules/07-testing-react.md

Dev/i18n/de/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/React/rules/07-testing-react.md

Dev/i18n/de/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/de/React/rules/07-testing-react.md

Dev/i18n/de/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/fr/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/PHP/rules/07-testing-php.md

Dev/i18n/fr/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/PHP/rules/07-testing-php.md

Dev/i18n/fr/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/fr/Flutter/rules/07-testing-flutter.mdView file
427patternName = generic_password severity = medium line = 427 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/Flutter/rules/07-testing-flutter.md

Dev/i18n/fr/Flutter/rules/07-testing-flutter.mdView on unpkg · L427
Dev/i18n/fr/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/Flutter/commands/check-security.md

Dev/i18n/fr/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/fr/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/React/rules/07-testing-react.md

Dev/i18n/fr/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/React/rules/07-testing-react.md

Dev/i18n/fr/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/fr/React/rules/07-testing-react.md

Dev/i18n/fr/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/es/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/PHP/rules/07-testing-php.md

Dev/i18n/es/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/PHP/rules/07-testing-php.md

Dev/i18n/es/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/es/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/Flutter/commands/check-security.md

Dev/i18n/es/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/es/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/React/rules/07-testing-react.md

Dev/i18n/es/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/React/rules/07-testing-react.md

Dev/i18n/es/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/es/React/rules/07-testing-react.md

Dev/i18n/es/React/rules/07-testing-react.mdView on unpkg · L419
Dev/i18n/en/PHP/rules/07-testing-php.mdView file
244patternName = generic_password severity = medium line = 244 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/PHP/rules/07-testing-php.md

Dev/i18n/en/PHP/rules/07-testing-php.mdView on unpkg · L244
280patternName = generic_password severity = medium line = 280 matchedText = password...23',
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/PHP/rules/07-testing-php.md

Dev/i18n/en/PHP/rules/07-testing-php.mdView on unpkg · L280
Dev/i18n/en/Flutter/commands/check-security.mdView file
37patternName = generic_password severity = medium line = 37 matchedText = ❌ final ...23";
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/Flutter/commands/check-security.md

Dev/i18n/en/Flutter/commands/check-security.mdView on unpkg · L37
Dev/i18n/en/React/rules/07-testing-react.mdView file
267patternName = generic_password severity = medium line = 267 matchedText = password...123'
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/React/rules/07-testing-react.md

Dev/i18n/en/React/rules/07-testing-react.mdView on unpkg · L267
385patternName = generic_password severity = medium line = 385 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/React/rules/07-testing-react.md

Dev/i18n/en/React/rules/07-testing-react.mdView on unpkg · L385
419patternName = generic_password severity = medium line = 419 matchedText = result.c... });
Medium
Secret Pattern

Hardcoded password in Dev/i18n/en/React/rules/07-testing-react.md

Dev/i18n/en/React/rules/07-testing-react.mdView on unpkg · L419

Findings

1 Critical5 High39 Medium5 Low
CriticalPrevious Version Dangerous Deltacli/lib/doctor.js
HighChild Processcli/lib/update.js
HighShell
HighRuntime Package Installcli/lib/skill.js
HighShips High Entropy Blobcli/kanban/client/dist/assets/jetbrains-mono-vietnamese-600-normal-OWROknRo.woff
HighPayload In Excluded DirTools/Ralph/.ralph/hooks/stop-dod-gate.sh
MediumNetwork
MediumEnvironment Vars
MediumShips Build HelperInfra/install-kubernetes-rules.sh
MediumStructural Risk Force Deep Review
MediumSecret PatternInfra/i18n/pt/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/de/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/fr/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/es/Ansible/agents/ansible-security.md
MediumSecret PatternInfra/i18n/en/Ansible/agents/ansible-security.md
MediumSecret PatternDev/i18n/pt/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/pt/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/pt/Flutter/rules/07-testing-flutter.md
MediumSecret PatternDev/i18n/pt/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/pt/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/de/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/de/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/de/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/de/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/de/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/de/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/fr/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/fr/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/fr/Flutter/rules/07-testing-flutter.md
MediumSecret PatternDev/i18n/fr/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/fr/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/fr/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/fr/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/es/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/es/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/es/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/es/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/es/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/es/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/en/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/en/PHP/rules/07-testing-php.md
MediumSecret PatternDev/i18n/en/Flutter/commands/check-security.md
MediumSecret PatternDev/i18n/en/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/en/React/rules/07-testing-react.md
MediumSecret PatternDev/i18n/en/React/rules/07-testing-react.md
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings