registry / @venturewild/workspace / 0.6.35

@venturewild/workspace@0.6.35

⚠ Under review

Claude Code Web — Replit/Lovable-style chat-first browser UI that wraps the AI agent already installed on your machine.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 65 file(s), 1.74 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.z.ai, bellard.org, claude.ai, fb.me, github.com, lea.verou.me, opensource.org, reactjs.org, registry.npmjs.org, sync.venturewild.llc, www.w3.org

Source & flagged code

3 flagged

server/src/skills.mjsView file

Lines 16-56javascript

16// Claude Code expands+runs headless (verified §2) — the same stdin path we already use.

17//

18// Curation (which skills are pinned/hidden + their order) lives under

19// ~/.wild-workspace/powers/ (CLAUDE.md #1 — never the synced repo, never localStorage).

21import fs from 'node:fs';

22import path from 'node:path';

23import os from 'node:os';

25// Bounds so a workspace stuffed with skills can't bloat the store/UI.

26const CAP = { skills: 80, name: 64, desc: 280 };

28// --- frontmatter parse -----------------------------------------------------

29// Minimal, dependency-free. We only need a few scalar keys; the description often

30// CONTAINS colons ("Usage: /foo"), so we split on the FIRST colon only. Never throws.

32export function parseFrontmatter(text = '') {

33 const out = {};

34 if (typeof text !== 'string') return out;

35 // Frontmatter is the block between the first two `---` fences at the top.

36 const m = text.match(/^?---\s*\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/src/skills.mjsView on unpkg · L36

37 if (!m) return out;

38 for (const rawLine of m[1].split(/\r?\n/)) {

39 const line = rawLine.trim();

40 if (!line || line.startsWith('#')) continue;

41 const i = line.indexOf(':');

42 if (i < 0) continue;

43 const key = line.slice(0, i).trim();

44 let val = line.slice(i + 1).trim();

45 // strip matching surrounding quotes

46 if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {

47 val = val.slice(1, -1);

48 }

49 out[key] = val;

50 }

51 return out;

52}

54function asBool(v, dflt) {

55 if (v === undefined) return dflt;

56 const s = String(v).trim().toLowerCase();

•Trigger-reachable chain: manifest.bin -> server/bin/wild-workspace.mjs -> server/src/index.mjs -> server/src/skills.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/src/skills.mjsView on unpkg

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View file

•path = web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2 kind = high_entropy_blob sizeBytes = 17524 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View on unpkg

Source & flagged code

3 flagged · loading source

server/src/skills.mjsView file

36contains invisible/control Unicode U+FEFF (zero width no-break space) const m = text.match(/^<U+FEFF>?---\s*\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/src/skills.mjsView on unpkg · L36

•Trigger-reachable chain: manifest.bin -> server/bin/wild-workspace.mjs -> server/src/index.mjs -> server/src/skills.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/src/skills.mjsView on unpkg

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View file

•path = web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2 kind = high_entropy_blob sizeBytes = 17524 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View on unpkg

Findings

2 Critical1 High4 Medium6 Low

CriticalTrojan Source Unicodeserver/src/skills.mjs

CriticalTrigger Reachable Dangerous Capabilityserver/src/skills.mjs

HighShips High Entropy Blobweb/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

server/src/skills.mjsView file

Lines 16-56javascript

16// Claude Code expands+runs headless (verified §2) — the same stdin path we already use.

17//

18// Curation (which skills are pinned/hidden + their order) lives under

19// ~/.wild-workspace/powers/ (CLAUDE.md #1 — never the synced repo, never localStorage).

21import fs from 'node:fs';

22import path from 'node:path';

23import os from 'node:os';

25// Bounds so a workspace stuffed with skills can't bloat the store/UI.

26const CAP = { skills: 80, name: 64, desc: 280 };

28// --- frontmatter parse -----------------------------------------------------

29// Minimal, dependency-free. We only need a few scalar keys; the description often

30// CONTAINS colons ("Usage: /foo"), so we split on the FIRST colon only. Never throws.

32export function parseFrontmatter(text = '') {

33 const out = {};

34 if (typeof text !== 'string') return out;

35 // Frontmatter is the block between the first two `---` fences at the top.

36 const m = text.match(/^?---\s*\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/src/skills.mjsView on unpkg · L36

37 if (!m) return out;

38 for (const rawLine of m[1].split(/\r?\n/)) {

39 const line = rawLine.trim();

40 if (!line || line.startsWith('#')) continue;

41 const i = line.indexOf(':');

42 if (i < 0) continue;

43 const key = line.slice(0, i).trim();

44 let val = line.slice(i + 1).trim();

45 // strip matching surrounding quotes

46 if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {

47 val = val.slice(1, -1);

48 }

49 out[key] = val;

50 }

51 return out;

52}

54function asBool(v, dflt) {

55 if (v === undefined) return dflt;

56 const s = String(v).trim().toLowerCase();

•Trigger-reachable chain: manifest.bin -> server/bin/wild-workspace.mjs -> server/src/index.mjs -> server/src/skills.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/src/skills.mjsView on unpkg

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View file

•path = web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2 kind = high_entropy_blob sizeBytes = 17524 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View on unpkg