registry / moflo / 4.11.6

moflo@4.11.6

MoFlo — AI agent orchestration for Claude Code. A standalone, opinionated toolkit with semantic memory, learned routing, gates, spells, and the /flo issue-execution skill.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 27 finding(s) at 97.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 637 file(s), 7.11 MB of source, external domains: api.moflo.io, api.npmjs.org, api.openai.com, api.pinata.cloud, claude.com, cli.github.com, cloudflare-ipfs.com, dev.moflo.io, docs.anthropic.com, dweb.link, fonts.googleapis.com, fonts.gstatic.com, gateway.pinata.cloud, git-scm.com, github.com, graph.microsoft.com, imapflow.com, ipfs.io, nodejs.org, nvd.nist.gov, outlook.live.com, pinata.cloud, playwright.dev, registry.npmjs.org, slack.com, staging.moflo.io, storage.googleapis.com, us-central1-claude-flow.cloudfunctions.net, w3s.link, www.apple.com, www.docker.com

Source & flagged code

19 flagged

package.jsonView file

Lines 33-73json

33 "!**/__tests__/**",

34 ".claude/commands/**/*.md",

35 ".claude/agents/**/*.md",

36 ".claude/helpers/**",

37 ".claude/guidance/shipped/**",

38 ".claude/skills/**/*.md",

39 "!.claude/**/*.db",

40 "!.claude/**/*.map",

41 "README.md",

42 "LICENSE",

43 "retired-files.json",

44 "scripts/prune-native-binaries.mjs",

45 "scripts/post-install-notice.mjs",

46 "scripts/post-install-bootstrap.mjs"

47 ],

48 "scripts": {

49 "dev": "tsx watch src/cli/index.ts",

50 "prebuild": "node scripts/sync-version.mjs && node scripts/clean-dist.mjs",

51 "build": "tsc",

52 "prepublishOnly": "npm run build",

53 "postinstall": "node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 "test": "node scripts/test-runner.mjs",

55 "test:ui": "vitest --ui",

56 "test:smoke": "node harness/consumer-smoke/run.mjs",

57 "test:smoke:populated": "node harness/consumer-smoke/run-populated.mjs",

58 "bench": "vitest run --config vitest.bench.config.ts",

59 "lint": "eslint src/ bin/ .claude/scripts/ --ext .ts,.tsx,.mts,.cts,.js,.mjs,.cjs --max-warnings 0",

60 "security:audit": "npm audit --omit=dev --audit-level high",

61 "security:fix": "npm audit fix",

62 "version": "node scripts/sync-version.mjs && git add src/cli/version.ts",

63 "flo": "node bin/cli.js"

64 },

65 "dependencies": {

66 "@anush008/tokenizers": "^0.6.0",

67 "@modelcontextprotocol/sdk": "^1.0.0",

68 "js-yaml": "^5.2.0",

69 "lru-cache": "^11.3.5",

70 "onnxruntime-node": "^1.27.0",

71 "semver": "^7.7.4",

72 "tar": "^7.5.16",

73 "valibot": "^1.3.1"

dist/src/cli/guidance/manifest-validator.jsView file

Lines 682-722javascript

682 // Trace 2: Secret detected and blocked

683 {

684 traceId: 'default-secret-blocked',

685 name: 'Secret detected and blocked',

686 description: 'Verifies that secrets in tool parameters are detected and blocked',

687 events: [

688 {

bin/generate-code-map.mjsView file

Lines 10-50javascript

10 * 5. file: — ONE PER FILE with exported types (file-level granularity)

11 *

12 * The `file:` entries are the key improvement — they enable precise semantic search

13 * for individual types, entities, and services instead of diluting results across

bin/hooks.mjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/**

3 * Cross-platform Claude Code hook runner

4 * Works on Windows (cmd/powershell) and Linux/WSL (bash)

5 *

High

Shell

Package source references shell execution.

bin/hooks.mjsView on unpkg · L3

6 * Usage: node .claude/scripts/hooks.mjs <hook-type> [args...]

7 *

8 * Hook types:

9 * pre-edit --file <path>

10 * post-edit --file <path> --success <bool>

dist/src/cli/guidance/analyzer.jsView file

Lines 2023-2063javascript

2023 },

2024 {

2025 id: 'refactor-consolidate-validators',

2026 description: 'Consolidate duplicate validation helpers',

2027 taskClass: 'refactor',

2028 prompt: 'Consolidate the duplicate assertion evaluation functions across analyzer and headless modules into a shared validation utility.',

2029

bin/run-migrations.mjsView file

Lines 41-81javascript

41 const manifest = listMigrations(projectRoot);

42 const keys = Object.keys(manifest);

43 if (keys.length === 0) {

44 console.log('(no migrations recorded)');

45 }

bin/lib/file-sync.mjsView file

Lines 1-21javascript

1/**

2 * Shared file-sync helper for the launcher (#854 §3) and the postinstall

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/lib/file-sync.mjsView on unpkg · L1

3 * bootstrap (#857 / #975).

4 *

5 * Both layers used to inline the same retry/breaker + copy logic. They drifted

6 * once already (the bootstrap added hash-skip + atomic tmp+rename for #975

7 * while the launcher kept the bare copyFileSync), so this module is the single

8 * source of truth.

9 *

dist/src/cli/services/daemon-service.jsView file

8* - Linux: systemd --user unit in ~/.config/systemd/user/ L9: * - Windows: Task Scheduler ONLOGON trigger via schtasks L10: */ ... L14: import { homedir } from 'os'; L15: import { execSync } from 'child_process'; L16: import { locateMofloCliBin } from './moflo-require.js'; ... L31: const resolvedRoot = resolve(projectRoot); L32: const platform = process.platform; L33: if (platform === 'darwin') { ... L93: const slug = projectRootSlug(projectRoot); L94: return join(homedir(), 'Library', 'LaunchAgents', `${PLIST_LABEL}.${slug}.plist`); L95: }

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/cli/services/daemon-service.jsView on unpkg · L8

dist/src/cli/update/executor.jsView file

62// Execute npm install L63: const installCmd = `npm install ${update.package}@${update.latestVersion} --save-exact`; L64: execSync(installCmd, { L65: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cli/update/executor.jsView on unpkg · L62

bin/gate.cjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.11.1 matchedPath = bin/gate.cjs matchedIdentity = npm:bW9mbG8:4.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/gate.cjsView on unpkg

bin/index-tests.mjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.11.1 matchedPath = bin/index-tests.mjs matchedIdentity = npm:bW9mbG8:4.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/index-tests.mjsView on unpkg

bin/index-all.mjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.11.1 matchedPath = bin/index-all.mjs matchedIdentity = npm:bW9mbG8:4.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/index-all.mjsView on unpkg

bin/lib/daemon-recycler.mjsView file

•matchType = normalized_sha256 matchedPackage = moflo@4.11.1 matchedPath = bin/lib/daemon-recycler.mjs matchedIdentity = npm:bW9mbG8:4.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/daemon-recycler.mjsView on unpkg

.claude/agents/core/reviewer.mdView file

81patternName = generic_password severity = medium line = 81 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .claude/agents/core/reviewer.md

.claude/agents/core/reviewer.mdView on unpkg · L81

Source & flagged code

19 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/src/cli/guidance/manifest-validator.jsView file

702patternName = private_key_rsa severity = critical line = 702 matchedText = params: ...' },

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/src/cli/guidance/manifest-validator.jsView on unpkg · L702

702patternName = private_key_rsa severity = critical line = 702 matchedText = params: ...' },

Critical

Secret Pattern

RSA private key in dist/src/cli/guidance/manifest-validator.js

dist/src/cli/guidance/manifest-validator.jsView on unpkg · L702

bin/generate-code-map.mjsView file

30import { fileURLToPath } from 'url'; L31: import { execSync, execFileSync, spawn } from 'child_process'; L32: import { memoryDbPath, MOFLO_DIR, findProjectRoot } from './lib/moflo-paths.mjs';

High

Child Process

Package source references child process execution.

bin/generate-code-map.mjsView on unpkg · L30

bin/hooks.mjsView file

3* Cross-platform Claude Code hook runner L4: * Works on Windows (cmd/powershell) and Linux/WSL (bash) L5: *

High

Shell

Package source references shell execution.

bin/hooks.mjsView on unpkg · L3

•matchType = normalized_sha256 matchedPackage = moflo@4.11.1 matchedPath = bin/hooks.mjs matchedIdentity = npm:bW9mbG8:4.11.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/hooks.mjsView on unpkg

dist/src/cli/guidance/analyzer.jsView file

1284patternName = generic_password severity = medium line = 1284 matchedText = { type: ...' },

Medium

Secret Pattern

Hardcoded password in dist/src/cli/guidance/analyzer.js

dist/src/cli/guidance/analyzer.jsView on unpkg · L1284

2067patternName = generic_password severity = medium line = 2067 matchedText = { type: ...' },

Medium

Secret Pattern

Hardcoded password in dist/src/cli/guidance/analyzer.js

dist/src/cli/guidance/analyzer.jsView on unpkg · L2067

2043{ type: 'must-match-pattern', value: 'escape|validate|regex|filter', severity: 'major' }, L2044: { type: 'must-not-contain', value: 'eval(', severity: 'critical' }, L2045: ],

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/cli/guidance/analyzer.jsView on unpkg · L2043

bin/run-migrations.mjsView file

61try { L62: const mod = await import(url); L63: if (mod && typeof mod.run === 'function' && typeof mod.name === 'string') {

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/run-migrations.mjsView on unpkg · L61

bin/lib/file-sync.mjsView file

1/** L2: * Shared file-sync helper for the launcher (#854 §3) and the postinstall

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/lib/file-sync.mjsView on unpkg · L1

dist/src/cli/services/daemon-service.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/cli/services/daemon-service.jsView on unpkg · L8

dist/src/cli/update/executor.jsView file

62// Execute npm install L63: const installCmd = `npm install ${update.package}@${update.latestVersion} --save-exact`; L64: execSync(installCmd, { L65: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cli/update/executor.jsView on unpkg · L62

bin/gate.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/gate.cjsView on unpkg

bin/index-tests.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/index-tests.mjsView on unpkg

bin/index-all.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/index-all.mjsView on unpkg

bin/lib/daemon-recycler.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/daemon-recycler.mjsView on unpkg

.claude/agents/core/reviewer.mdView file

81patternName = generic_password severity = medium line = 81 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .claude/agents/core/reviewer.md

.claude/agents/core/reviewer.mdView on unpkg · L81

Findings

2 Critical9 High9 Medium7 Low

CriticalCritical Secretdist/src/cli/guidance/manifest-validator.js

CriticalSecret Patterndist/src/cli/guidance/manifest-validator.js

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/generate-code-map.mjs

HighShellbin/hooks.mjs

HighRuntime Package Installdist/src/cli/update/executor.js

HighKnown Malware Source Similaritybin/gate.cjs

HighKnown Malware Source Similaritybin/index-tests.mjs

HighKnown Malware Source Similaritybin/hooks.mjs

HighKnown Malware Source Similaritybin/index-all.mjs

HighKnown Malware Source Similaritybin/lib/daemon-recycler.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/run-migrations.mjs

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/src/cli/services/daemon-service.js

MediumStructural Risk Force Deep Review

MediumSecret Patterndist/src/cli/guidance/analyzer.js

MediumSecret Pattern.claude/agents/core/reviewer.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/src/cli/guidance/analyzer.js

LowWeak Cryptobin/lib/file-sync.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

19 flagged

package.jsonView file

Lines 33-73json

33 "!**/__tests__/**",

34 ".claude/commands/**/*.md",

35 ".claude/agents/**/*.md",

36 ".claude/helpers/**",

37 ".claude/guidance/shipped/**",

38 ".claude/skills/**/*.md",

39 "!.claude/**/*.db",

40 "!.claude/**/*.map",

41 "README.md",

42 "LICENSE",

43 "retired-files.json",

44 "scripts/prune-native-binaries.mjs",

45 "scripts/post-install-notice.mjs",

46 "scripts/post-install-bootstrap.mjs"

47 ],

48 "scripts": {

49 "dev": "tsx watch src/cli/index.ts",

50 "prebuild": "node scripts/sync-version.mjs && node scripts/clean-dist.mjs",

51 "build": "tsc",

52 "prepublishOnly": "npm run build",

53 "postinstall": "node scripts/prune-native-binaries.mjs && node scripts/post-install-notice.mjs && node scripts/post-install-bootstrap.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L53

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L53

54 "test": "node scripts/test-runner.mjs",

55 "test:ui": "vitest --ui",

56 "test:smoke": "node harness/consumer-smoke/run.mjs",

57 "test:smoke:populated": "node harness/consumer-smoke/run-populated.mjs",

58 "bench": "vitest run --config vitest.bench.config.ts",

59 "lint": "eslint src/ bin/ .claude/scripts/ --ext .ts,.tsx,.mts,.cts,.js,.mjs,.cjs --max-warnings 0",

60 "security:audit": "npm audit --omit=dev --audit-level high",

61 "security:fix": "npm audit fix",

62 "version": "node scripts/sync-version.mjs && git add src/cli/version.ts",

63 "flo": "node bin/cli.js"

64 },

65 "dependencies": {

66 "@anush008/tokenizers": "^0.6.0",

67 "@modelcontextprotocol/sdk": "^1.0.0",

68 "js-yaml": "^5.2.0",

69 "lru-cache": "^11.3.5",

70 "onnxruntime-node": "^1.27.0",

71 "semver": "^7.7.4",

72 "tar": "^7.5.16",

73 "valibot": "^1.3.1"

dist/src/cli/guidance/manifest-validator.jsView file

Lines 682-722javascript

682 // Trace 2: Secret detected and blocked

683 {

684 traceId: 'default-secret-blocked',

685 name: 'Secret detected and blocked',

686 description: 'Verifies that secrets in tool parameters are detected and blocked',

687 events: [

688 {

bin/generate-code-map.mjsView file

Lines 10-50javascript

10 * 5. file: — ONE PER FILE with exported types (file-level granularity)

11 *

12 * The `file:` entries are the key improvement — they enable precise semantic search

13 * for individual types, entities, and services instead of diluting results across

bin/hooks.mjsView file

Lines 1-23javascript

1#!/usr/bin/env node

2/**

3 * Cross-platform Claude Code hook runner

4 * Works on Windows (cmd/powershell) and Linux/WSL (bash)

5 *

High

Shell

Package source references shell execution.

bin/hooks.mjsView on unpkg · L3

6 * Usage: node .claude/scripts/hooks.mjs <hook-type> [args...]

7 *

8 * Hook types:

9 * pre-edit --file <path>

10 * post-edit --file <path> --success <bool>

dist/src/cli/guidance/analyzer.jsView file

Lines 2023-2063javascript

2023 },

2024 {

2025 id: 'refactor-consolidate-validators',

2026 description: 'Consolidate duplicate validation helpers',

2027 taskClass: 'refactor',

2028 prompt: 'Consolidate the duplicate assertion evaluation functions across analyzer and headless modules into a shared validation utility.',

2029

bin/run-migrations.mjsView file

Lines 41-81javascript

41 const manifest = listMigrations(projectRoot);

42 const keys = Object.keys(manifest);

43 if (keys.length === 0) {

44 console.log('(no migrations recorded)');

45 }

bin/lib/file-sync.mjsView file

Lines 1-21javascript

1/**

2 * Shared file-sync helper for the launcher (#854 §3) and the postinstall

Low

Weak Crypto

Package source references weak cryptographic algorithms.

bin/lib/file-sync.mjsView on unpkg · L1

3 * bootstrap (#857 / #975).

4 *

5 * Both layers used to inline the same retry/breaker + copy logic. They drifted

6 * once already (the bootstrap added hash-skip + atomic tmp+rename for #975

7 * while the launcher kept the bare copyFileSync), so this module is the single

8 * source of truth.

9 *

dist/src/cli/services/daemon-service.jsView file

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/cli/services/daemon-service.jsView on unpkg · L8

dist/src/cli/update/executor.jsView file

62// Execute npm install L63: const installCmd = `npm install ${update.package}@${update.latestVersion} --save-exact`; L64: execSync(installCmd, { L65: encoding: 'utf-8',

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/src/cli/update/executor.jsView on unpkg · L62

bin/gate.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/gate.cjsView on unpkg

bin/index-tests.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/index-tests.mjsView on unpkg

bin/index-all.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/index-all.mjsView on unpkg

bin/lib/daemon-recycler.mjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

bin/lib/daemon-recycler.mjsView on unpkg

.claude/agents/core/reviewer.mdView file

81patternName = generic_password severity = medium line = 81 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .claude/agents/core/reviewer.md

.claude/agents/core/reviewer.mdView on unpkg · L81