registry  /  cladding  /  0.7.1

cladding@0.7.1

Reference implementation of the Ironclad standard — multi-agent dev harness for Claude Code.

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 3.29 MB of source, external domains: api.anthropic.com, docs.anthropic.com, docs.expo.dev, github.com, jcgt.org, json-schema.org, platform.claude.com, raw.githubusercontent.com, www.w3.org

Source & flagged code

6 flagged · loading source
dist/clad.jsView file
18(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L19: (Did you mean ${n[0]}?)`:""}L2.suggestSimilar=Zae});var Z2=v(nE=>{var Gae=Be("node:events").EventEmitter,Qk=Be("node:child_process"),Hi=Be("node:path"),eg=Be("node:fs"),Ue=Be("node... L20: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma...
High
Child Process

Package source references child process execution.

dist/clad.jsView on unpkg · L18
584`)}function bTe(t,e){let r=[JJ,"",`# ${e} \u2014 Project Context`,""];if(r.push("## 1. What this project is (observed)",""),t.readmeFirstParagraph?r.push(`> ${t.readmeFirstParagrap... L585: `)}Nf();import{readFileSync as b1e}from"node:fs";import{join as v1e}from"node:path";var S1e="claude-sonnet-4-6",IS=16384;function w1e(t,e="."){if(t)return t;try{let n=b1e(v1e(e,".c... L586: `)}function Ep(t){let e=W5(t);return["# Cladding \xB7 Tier B \xB7 SSoT \u2014 editable, cross-validated \xB7 Refreshed by: clad init / clad refine","# Greenfield seed \u2014 no imp... ... L588: `)}var R1=kt(or(),1);pi();var Y5="<!-- Cladding \xB7 Tier B \xB7 SSoT \u2014 intent + Why/What/Purpose \xB7 Refreshed by: clad init / clad refine -->\n<!-- Onboarding refined from ... L589: <!-- LLM unavailable or response sentinel-miss; the body below quotes your intent verbatim. Re-run with a connected LLM dispatcher to capture inferred domain context. -->`;function... L590: `)}function X5(t){return{mode:is(t,"ONBOARDING_MODE"),projectContext:is(t,"PROJECT_CONTEXT_MD"),capabilities:is(t,"CAPABILITIES_YAML"),architecture:is(t,"ARCHITECTURE_YAML"),specSe...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/clad.jsView on unpkg · L584
331`)} L332: `}var cD=y(()=>{"use strict"});function HNe(t,e,r,n){let i=wI(t),o;switch(e){case"type":o=r.flatMap(s=>[Go(s.path,"compileKotlin"),Go(s.path,"compileTestKotlin")]);break;case"lint"... L333: `)?`\r ... L337: `?s.replace(/\n/g,`\r L338: `):s}function yw(t="."){let e=gw(t,"spec.yaml");if(!hw(e))return null;let r=zX(e,"utf8");if(LX(r))return null;let n=yje(t);if(!n)return null;let i=_je(r,n);return i!==r?(dje(e,i),n... L339: `)}var _7,dm,jr,QD=y(()=>{ja();Q();_7=(t,e)=>{t.name="$ZodError",Object.defineProperty(t,"_zod",{value:t._zod,enumerable:!1}),Object.defineProperty(t,"issues",{value:e,enumerable:!... L340: `).filter(s=>s),i=Math.min(...n.map(s=>s.length-s.trimStart().length)),o=n.map(s=>s.slice(i)).map(s=>" ".repeat(this.indent*2)+s);for(let s of o)this.content.push(s)}compile(){let ... L341: `))}}});var KN,JN=y(()=>{KN={major:4,minor:4,patch:3}});function rj(t){if(t==="")return!0;if(/\s/.test(t)||t.length%4!==0)return!1;try{return atob(t),!0}catch{return!1}}function W7... L342: if (${x}.issues.length) {
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/clad.jsView on unpkg · L331
6globalThis.__CLADDING_BUNDLED = true; L7: var Cae=Object.create;var Uk=Object.defineProperty;var Dae=Object.getOwnPropertyDescriptor;var Nae=Object.getOwnPropertyNames;var jae=Object.getPrototypeOf,Mae=Object.prototype.has... L8: `)}displayWidth(e){return F2(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT... ... L18: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L19: (Did you mean ${n[0]}?)`:""}L2.suggestSimilar=Zae});var Z2=v(nE=>{var Gae=Be("node:events").EventEmitter,Qk=Be("node:child_process"),Hi=Be("node:path"),eg=Be("node:fs"),Ue=Be("node... L20: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma... ... L81: `;return`${m} L82: ${i}${p}`}else return`${f}${s}${d.join(" ")}${s}${p}`}function xg({indent:t,options:{commentString:e}},r,n,i){if(n&&i&&(n=n.replace(/^\n+/,"")),n){let o=wg.indentComment(e(n),t);r.... L83: `:" ")}return Zle.stringifyString({comment:t,type:e,value:a},n,i,o)}};nq.binary=Gle});var Dg=v(Cg=>{"use strict";var Rg=Pe(
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/clad.jsView on unpkg · L6
6Cross-file remote execution chain: dist/clad.js spawns dist/viewer/app.js; helper contains network access plus dynamic code execution. L6: globalThis.__CLADDING_BUNDLED = true; L7: var Cae=Object.create;var Uk=Object.defineProperty;var Dae=Object.getOwnPropertyDescriptor;var Nae=Object.getOwnPropertyNames;var jae=Object.getPrototypeOf,Mae=Object.prototype.has... L8: `)}displayWidth(e){return F2(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT... ... L18: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L19: (Did you mean ${n[0]}?)`:""}L2.suggestSimilar=Zae});var Z2=v(nE=>{var Gae=Be("node:events").EventEmitter,Qk=Be("node:child_process"),Hi=Be("node:path"),eg=Be("node:fs"),Ue=Be("node... L20: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma... ... L81: `;return`${m} L82: ${i}${p}`}else return`${f}${s}${d.join(" ")}${s}${p}`}function xg({indent:t,options:{commentString:e}},r,n,i){if(n&&i&&(n=n.replace(/^\n+/,"")),n){let o=wg.indentComment(e(n),t…
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/clad.jsView on unpkg · L6
409|| (${s} === "string" && ${i} && ${i} == +${i} && !(${i} % 1))`).assign(a,(0,_e._)`+${i}`);return;case"boolean":n.elseIf((0,_e._)`${i} === "false" || ${i} === 0 || ${i} === null`).... L410: || ${s} === "boolean" || ${i} === null`).assign(a,(0,_e._)`[${i}]`)}}}function gUe({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,_e._)`${e} !== undefined`,()=>t.assign((0,_e... L411: missingProperty: ${n},
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/clad.jsView on unpkg · L409

Findings

5 High4 Medium7 Low
HighChild Processdist/clad.js
HighSame File Env Network Executiondist/clad.js
HighCommand Output Exfiltrationdist/clad.js
HighObfuscated Payload Loaderdist/clad.js
HighCross File Remote Execution Contextdist/clad.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/clad.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings