registry / @venturewild/workspace / 0.6.36

@venturewild/workspace@0.6.36

⚠ Under review

Claude Code Web — Replit/Lovable-style chat-first browser UI that wraps the AI agent already installed on your machine.

Static Scan Results

scanned 4d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 67 file(s), 1.76 MB of source, external domains: 127.0.0.1, api.anthropic.com, api.z.ai, bellard.org, claude.ai, fb.me, github.com, lea.verou.me, opensource.org, reactjs.org, registry.npmjs.org, sync.venturewild.llc, www.w3.org

Source & flagged code

3 flagged

server/src/skills.mjsView file

Lines 17-57javascript

17//

18// Curation (which skills are pinned/hidden + their order) lives under

19// ~/.wild-workspace/powers/ (CLAUDE.md #1 — never the synced repo, never localStorage).

21import fs from 'node:fs';

22import path from 'node:path';

23import os from 'node:os';

24import { KNOWN_ACTION_COMMANDS, bucketOf, friendlyLabel, friendlyDesc } from './capabilities.mjs';

26// Bounds so a workspace stuffed with skills can't bloat the store/UI.

27const CAP = { skills: 80, name: 64, desc: 280 };

29// --- frontmatter parse -----------------------------------------------------

30// Minimal, dependency-free. We only need a few scalar keys; the description often

31// CONTAINS colons ("Usage: /foo"), so we split on the FIRST colon only. Never throws.

33export function parseFrontmatter(text = '') {

34 const out = {};

35 if (typeof text !== 'string') return out;

36 // Frontmatter is the block between the first two `---` fences at the top.

37 const m = text.match(/^?---\s*\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/src/skills.mjsView on unpkg · L37

38 if (!m) return out;

39 for (const rawLine of m[1].split(/\r?\n/)) {

40 const line = rawLine.trim();

41 if (!line || line.startsWith('#')) continue;

42 const i = line.indexOf(':');

43 if (i < 0) continue;

44 const key = line.slice(0, i).trim();

45 let val = line.slice(i + 1).trim();

46 // strip matching surrounding quotes

47 if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {

48 val = val.slice(1, -1);

49 }

50 out[key] = val;

51 }

52 return out;

53}

55function asBool(v, dflt) {

56 if (v === undefined) return dflt;

57 const s = String(v).trim().toLowerCase();

•Trigger-reachable chain: manifest.bin -> server/bin/wild-workspace.mjs -> server/src/index.mjs -> server/src/skills.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/src/skills.mjsView on unpkg

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View file

•path = web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2 kind = high_entropy_blob sizeBytes = 17524 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View on unpkg

Source & flagged code

3 flagged · loading source

server/src/skills.mjsView file

37contains invisible/control Unicode U+FEFF (zero width no-break space) const m = text.match(/^<U+FEFF>?---\s*\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/src/skills.mjsView on unpkg · L37

•Trigger-reachable chain: manifest.bin -> server/bin/wild-workspace.mjs -> server/src/index.mjs -> server/src/skills.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/src/skills.mjsView on unpkg

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View file

•path = web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2 kind = high_entropy_blob sizeBytes = 17524 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View on unpkg

Findings

2 Critical1 High4 Medium6 Low

CriticalTrojan Source Unicodeserver/src/skills.mjs

CriticalTrigger Reachable Dangerous Capabilityserver/src/skills.mjs

HighShips High Entropy Blobweb/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2

MediumDynamic Require

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

server/src/skills.mjsView file

Lines 17-57javascript

17//

18// Curation (which skills are pinned/hidden + their order) lives under

19// ~/.wild-workspace/powers/ (CLAUDE.md #1 — never the synced repo, never localStorage).

21import fs from 'node:fs';

22import path from 'node:path';

23import os from 'node:os';

24import { KNOWN_ACTION_COMMANDS, bucketOf, friendlyLabel, friendlyDesc } from './capabilities.mjs';

26// Bounds so a workspace stuffed with skills can't bloat the store/UI.

27const CAP = { skills: 80, name: 64, desc: 280 };

29// --- frontmatter parse -----------------------------------------------------

30// Minimal, dependency-free. We only need a few scalar keys; the description often

31// CONTAINS colons ("Usage: /foo"), so we split on the FIRST colon only. Never throws.

33export function parseFrontmatter(text = '') {

34 const out = {};

35 if (typeof text !== 'string') return out;

36 // Frontmatter is the block between the first two `---` fences at the top.

37 const m = text.match(/^?---\s*\r?\n([\s\S]*?)\r?\n---/);

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

server/src/skills.mjsView on unpkg · L37

38 if (!m) return out;

39 for (const rawLine of m[1].split(/\r?\n/)) {

40 const line = rawLine.trim();

41 if (!line || line.startsWith('#')) continue;

42 const i = line.indexOf(':');

43 if (i < 0) continue;

44 const key = line.slice(0, i).trim();

45 let val = line.slice(i + 1).trim();

46 // strip matching surrounding quotes

47 if ((val.startsWith('"') && val.endsWith('"')) || (val.startsWith("'") && val.endsWith("'"))) {

48 val = val.slice(1, -1);

49 }

50 out[key] = val;

51 }

52 return out;

53}

55function asBool(v, dflt) {

56 if (v === undefined) return dflt;

57 const s = String(v).trim().toLowerCase();

•Trigger-reachable chain: manifest.bin -> server/bin/wild-workspace.mjs -> server/src/index.mjs -> server/src/skills.mjs Reachable file contains a blocking source-risk pattern.

Critical

Trigger Reachable Dangerous Capability

A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.

server/src/skills.mjsView on unpkg

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View file

•path = web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2 kind = high_entropy_blob sizeBytes = 17524 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

web/dist/assets/atkinson-hyperlegible-latin-700-normal-GZI4o3u0.woff2View on unpkg