registry  /  klaudius  /  0.19.1

klaudius@0.19.1

Scaffold and maintain a Klaudius project — an autonomous web agency pipeline that runs on Claude Code (find, build, deploy, outreach end-to-end).

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason
One or more suspicious static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsNetwork
Supply chain
HighEntropyStringsMinifiedUrlStrings
Manifest
NoLicense
scanned 3 file(s), 174 KB of source, external domains: account.microsoft.com, accounts.zoho.com, api.cloudflare.com, api.netlify.com, api.supabase.com, api.telegram.org, api.twilio.com, api.vercel.com, app.fastmail.com, app.netlify.com, code.claude.com, console.cloud.google.com, console.twilio.com, dash.cloudflare.com, en.wikipedia.org, klaudius.dev, myaccount.google.com, nodejs.org, places.googleapis.com, registry.npmjs.org, supabase.com, vercel.com, www.python.org, xxxx.supabase.co

Source & flagged code

3 flagged · loading source
dist/bin.jsView file
1#!/usr/bin/env node L2: import{a as se,b as ot,c as st,d as we,e as z,g as T,i as it,j as at,l as q,m as rt,n as lt}from"./chunk-H6TMU6MK.js";import{Command as ss}from"commander";import{spawn as ct}from"c... L3: `));let t=[];t.push(yn());let o=await ie();t.push(kn(o)),t.push(await wn(o.command)),t.push(await An()),t.push(await En());for(let a of t){let i=a.status==="ok"?_.green("\u2713"):_...
High
Child Process

Package source references child process execution.

dist/bin.jsView on unpkg · L1
1#!/usr/bin/env node L2: import{a as se,b as ot,c as st,d as we,e as z,g as T,i as it,j as at,l as q,m as rt,n as lt}from"./chunk-H6TMU6MK.js";import{Command as ss}from"commander";import{spawn as ct}from"c... L3: `));let t=[];t.push(yn());let o=await ie();t.push(kn(o)),t.push(await wn(o.command)),t.push(await An()),t.push(await En());for(let a of t){let i=a.status==="ok"?_.green("\u2713"):_...
High
Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/bin.jsView on unpkg · L1
1#!/usr/bin/env node L2: import{a as se,b as ot,c as st,d as we,e as z,g as T,i as it,j as at,l as q,m as rt,n as lt}from"./chunk-H6TMU6MK.js";import{Command as ss}from"commander";import{spawn as ct}from"c... L3: `));let t=[];t.push(yn());let o=await ie();t.push(kn(o)),t.push(await wn(o.command)),t.push(await An()),t.push(await En());for(let a of t){let i=a.status==="ok"?_.green("\u2713"):_... ... L14: `)){let n=o.trim();if(!n||n.startsWith("#"))continue;let a=n.indexOf("=");if(a===-1)continue;let i=n.slice(0,a).trim(),l=Cn(n.slice(a+1).trim());t[i]=l}return t}function gt(e){let ... L15: `,"utf-8")}function At(e,t){let o=new Date().toISOString();return{version:1,templateVersion:e,installedAt:o,updatedAt:o,files:t}}async function Ie(e,t=e){let o=await Dn(e,{withFile... L16: `+X.bold(X.cyan(e))),detail:e=>console.log(X.dim(" "+e))};var Wn="https://registry.npmjs.org/klaudius/latest";async function Yn(e=1500){let t=new AbortController,o=setTimeout(()=...
High
Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/bin.jsView on unpkg · L1

Findings

3 High3 Medium5 Low
HighChild Processdist/bin.js
HighSame File Env Network Executiondist/bin.js
HighCommand Output Exfiltrationdist/bin.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowHigh Entropy Strings
LowUrl Strings
LowNo License