registry  /  cladding  /  0.8.0

cladding@0.8.0

Reference implementation of the Ironclad standard — multi-agent dev harness for Claude Code.

Static Scan Results

scanned 9d ago · by rust-scanner

Static analysis flagged 16 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsEvalFilesystemNetwork
Supply chain
HighEntropyStringsMinifiedObfuscatedProtestwareUrlStrings
ManifestNo manifest risk signals triggered.
scanned 3 file(s), 3.38 MB of source, external domains: api.anthropic.com, docs.anthropic.com, docs.expo.dev, github.com, jcgt.org, json-schema.org, json.schemastore.org, platform.claude.com, raw.githubusercontent.com, www.w3.org

Source & flagged code

6 flagged · loading source
dist/clad.jsView file
18(Did you mean one of ${n.join(", ")}?)`:n.length===1?` L19: (Did you mean ${n[0]}?)`:""}CU.suggestSimilar=Ole});var FU=v(ME=>{var Tle=Be("node:events").EventEmitter,CE=Be("node:child_process"),Xi=Be("node:path"),Pg=Be("node:fs"),Ue=Be("node... L20: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma...
High
Child Process

Package source references child process execution.

dist/clad.jsView on unpkg · L18
697`)}function JPe(t,e){let r=[uY,"",`# ${e} \u2014 Project Context`,""];if(r.push("## 1. What this project is (observed)",""),t.readmeFirstParagraph?r.push(`> ${t.readmeFirstParagrap... L698: `)}vp();import{readFileSync as JMe}from"node:fs";import{join as YMe}from"node:path";var XMe="claude-sonnet-4-6",xw=16384;function QMe(t,e="."){if(t)return t;try{let n=JMe(YMe(e,".c... L699: `)}function dm(t){let e=c7(t);return["# Cladding \xB7 Tier B \xB7 SSoT \u2014 editable, cross-validated \xB7 Refreshed by: clad init / clad refine","# Greenfield seed \u2014 no imp... ... L701: `)}var BD=At(sr(),1);_n();var d7="<!-- Cladding \xB7 Tier B \xB7 SSoT \u2014 intent + Why/What/Purpose \xB7 Refreshed by: clad init / clad refine -->\n<!-- Onboarding refined from ... L702: <!-- LLM unavailable or response sentinel-miss; the body below quotes your intent verbatim. Re-run with a connected LLM dispatcher to capture inferred domain context. -->`;function... L703: `)}function f7(t){return{mode:ms(t,"ONBOARDING_MODE"),projectContext:ms(t,"PROJECT_CONTEXT_MD"),capabilities:ms(t,"CAPABILITIES_YAML"),architecture:ms(t,"ARCHITECTURE_YAML"),specSe...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/clad.jsView on unpkg · L697
404L405: `)}p.write("payload.value = newResult;"),p.write("return payload;");let _=p.compile();return(S,x)=>_(f,S,x)},o,s=ic,a=!rc.jitless,l=a&&MN.value,u=e.catchall,d;t._zod.parse=(f,p)=>{... L406: L407: Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let s of t.seen.entries()){let a=s[1];if(e===s[0]){o(s);continue}if(t.external){let l=t.exter... L408: ]))`;continue}else if(n[c]==="$"){i+=`($|(?=[\r ... L414: || (${s} === "string" && ${i} && ${i} == +${i} && !(${i} % 1))`).assign(a,(0,_e._)`+${i}`);return;case"boolean":n.elseIf((0,_e._)`${i} === "false" || ${i} === 0 || ${i} === null`).... L415: || ${s} === "boolean" || ${i} === null`).assign(a,(0,_e._)`[${i}]`)}}}function V6e({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,_e._)`${e} !== undefined`,()=>t.assign((0,_e... L416: missingProperty: ${n}, L417: depsCount: ${e}, L418: deps: ${r}}`};var EGe={keyword:"dependencies",type:"object",schemaType:"object",error:Vi.error,code(t){let[e,r]=AGe(t);cae(t,e),lae(t,r)}};function AGe({schema:t}){let e={},r={};fo... L419: `);let n=r??t,i=lVe(n,e),o=bce.get(i);if(o)return o;if(!vce(i))throw new Error(`agents/${n}.md not found at ${i}`);let s
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/clad.jsView on unpkg · L404
6globalThis.__CLADDING_BUNDLED = true; L7: var gle=Object.create;var SE=Object.defineProperty;var yle=Object.getOwnPropertyDescriptor;var _le=Object.getOwnPropertyNames;var ble=Object.getPrototypeOf,vle=Object.prototype.has... L8: `)}displayWidth(e){return IU(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT... ... L18: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L19: (Did you mean ${n[0]}?)`:""}CU.suggestSimilar=Ole});var FU=v(ME=>{var Tle=Be("node:events").EventEmitter,CE=Be("node:child_process"),Xi=Be("node:path"),Pg=Be("node:fs"),Ue=Be("node... L20: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma... ... L81: `;return`${m} L82: ${i}${p}`}else return`${f}${s}${d.join(" ")}${s}${p}`}function ty({indent:t,options:{commentString:e}},r,n,i){if(n&&i&&(n=n.replace(/^\n+/,"")),n){let o=ey.indentComment(e(n),t);r.... L83: `:" ")}return Ode.stringifyString({comment:t,type:e,value:a},n,i,o)}};Jq.binary=Tde});var fy=v(dy=>{"use strict";var uy=Ie(
High
Obfuscated Payload Loader

Source contains an obfuscator-style string-array loader that reconstructs and executes hidden code.

dist/clad.jsView on unpkg · L6
6Cross-file remote execution chain: dist/clad.js spawns dist/viewer/app.js; helper contains network access plus dynamic code execution. L6: globalThis.__CLADDING_BUNDLED = true; L7: var gle=Object.create;var SE=Object.defineProperty;var yle=Object.getOwnPropertyDescriptor;var _le=Object.getOwnPropertyNames;var ble=Object.getPrototypeOf,vle=Object.prototype.has... L8: `)}displayWidth(e){return IU(e).length}styleTitle(e){return e}styleUsage(e){return e.split(" ").map(r=>r==="[options]"?this.styleOptionText(r):r==="[command]"?this.styleSubcommandT... ... L18: (Did you mean one of ${n.join(", ")}?)`:n.length===1?` L19: (Did you mean ${n[0]}?)`:""}CU.suggestSimilar=Ole});var FU=v(ME=>{var Tle=Be("node:events").EventEmitter,CE=Be("node:child_process"),Xi=Be("node:path"),Pg=Be("node:fs"),Ue=Be("node... L20: - specify the name in Command constructor or using .name()`);return r=r||{},r.isDefault&&(this._defaultCommandName=e._name),(r.noHelp||r.hidden)&&(e._hidden=!0),this._registerComma... ... L81: `;return`${m} L82: ${i}${p}`}else return`${f}${s}${d.join(" ")}${s}${p}`}function ty({indent:t,options:{commentString:e}},r,n,i){if(n&&i&&(n=n.replace(/^\n+/,"")),n){let o=ey.indentComment(e(n),t…
High
Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

dist/clad.jsView on unpkg · L6
414|| (${s} === "string" && ${i} && ${i} == +${i} && !(${i} % 1))`).assign(a,(0,_e._)`+${i}`);return;case"boolean":n.elseIf((0,_e._)`${i} === "false" || ${i} === 0 || ${i} === null`).... L415: || ${s} === "boolean" || ${i} === null`).assign(a,(0,_e._)`[${i}]`)}}}function V6e({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,_e._)`${e} !== undefined`,()=>t.assign((0,_e... L416: missingProperty: ${n},
Low
Eval

Package source references a known benign dynamic code generation pattern.

dist/clad.jsView on unpkg · L414

Findings

5 High4 Medium7 Low
HighChild Processdist/clad.js
HighSame File Env Network Executiondist/clad.js
HighCommand Output Exfiltrationdist/clad.js
HighObfuscated Payload Loaderdist/clad.js
HighCross File Remote Execution Contextdist/clad.js
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEvaldist/clad.js
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings