registry / principles-disciple / 1.196.0

principles-disciple@1.196.0

⚠ Under review

Native OpenClaw plugin for Principles Disciple

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis flagged 13 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 140 file(s), 1.06 MB of source, external domains: principles-disciple.dev

Source & flagged code

7 flagged

dist/core/rule-implementation-runtime.jsView file

Lines 1-21javascript

1import { nodeVm } from '../utils/node-vm-polyfill.js';

2import { spawnSync } from 'node:child_process';

3/** Timeout (ms) for compiling RuleCode (defining evaluate + meta). */

High

Child Process

Package source references child process execution.

dist/core/rule-implementation-runtime.jsView on unpkg · L1

4const COMPILE_TIMEOUT_MS = 1000;

5/** Timeout (ms) for executing evaluate(input, helpers) inside the vm. */

6const EVALUATE_PROCESS_TIMEOUT_MS = 3000;

7const EVALUATE_PROCESS_OUTPUT_BYTES = 1024 * 1024;

8const EVALUATION_PROCESS_SOURCE = String.raw `

9const vm = require('node:vm');

10try {

11 const workerData = JSON.parse(require('node:fs').readFileSync(0, 'utf8'));

12 const context = vm.createContext(Object.create(null));

13 new vm.Script(workerData.source, { filename: workerData.filename }).runInContext(context, { timeout: 1000 });

14 const input = workerData.input;

15 const helpers = Object.freeze({

16 isRiskPath: () => input.workspace.isRiskPath,

17 getToolName: () => input.action.toolName,

18 getEstimatedLineChanges: () => input.derived.estimatedLineChanges,

19 getBashRisk: () => input.derived.bashRisk,

20 hasPlanFile: () => input.workspace.hasPlanFile,

21 getPlanStatus: () => input.workspace.planStatus,

scripts/sync-plugin.mjsView file

Lines 3-43javascript

3/**

4 * Principles Disciple Plugin Installer

5 *

6 * A complete installation script that can run after cloning the repo.

7 * Handles dependencies, build, and sync to OpenClaw installation directory.

8 *

9 * Usage:

10 * node scripts/sync-plugin.mjs [options]

11 *

12 * Options:

13 * --lang <zh|en> Language for skills (default: zh)

14 * --skip-build Skip build step (use existing dist/)

dist/core/trajectory.jsView file

Lines 474-514javascript

474 const rawStorage = this.storeRawText('user', input.rawText);

475 const createdAt = input.createdAt ?? nowIso();

476 return this.withWrite(() => {

477

Source & flagged code

7 flagged · loading source

dist/core/rule-implementation-runtime.jsView file

1import { nodeVm } from '../utils/node-vm-polyfill.js'; L2: import { spawnSync } from 'node:child_process'; L3: /** Timeout (ms) for compiling RuleCode (defining evaluate + meta). */

High

Child Process

Package source references child process execution.

dist/core/rule-implementation-runtime.jsView on unpkg · L1

scripts/sync-plugin.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = principles-disciple@1.187.0 matchedIdentity = npm:cHJpbmNpcGxlcy1kaXNjaXBsZQ:1.187.0 similarity = 0.917 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/sync-plugin.mjsView on unpkg

860try { L861: execSync(`"${localShim}" --version`, { stdio: 'pipe', shell: true }); L862: console.log(`✅ PD CLI shim verified: ${localShim}`);

High

Shell

Package source references shell execution.

scripts/sync-plugin.mjsView on unpkg · L860

1341package = principles-disciple; repositoryIdentity = principles; dependency = better-sqlite3 L1341: try { L1342: execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' }); L1343: console.log('✅ Native dependencies verified');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/sync-plugin.mjsView on unpkg · L1341

389try { L390: execSync('npx tsc --emitDeclarationOnly', { L391: cwd: SOURCE_DIR,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/sync-plugin.mjsView on unpkg · L389

23import { fileURLToPath } from 'url'; L24: import { execSync } from 'child_process'; L25: L26: const __filename = fileURLToPath(import.meta.url); L27: const __dirname = dirname(__filename); L28: ... L38: function getHomeDir() { L39: return process.env.HOME L40: || process.env.USERPROFILE ... L52: const raw = readFileSync(configPath, 'utf-8'); L53: const config = JSON.parse(raw); L54: const workspace = config?.agents?.defaults?.workspace;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/sync-plugin.mjsView on unpkg · L23

dist/core/trajectory.jsView file

494) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?) L495: `).run(input.sessionId, input.toolName, input.outcome, input.durationMs ?? null, input.exitCode ?? null, input.errorType ?? null, input.errorMessage ?? null, input.gfiBefore ?? nul... L496: return Number(result.lastInsertRowid); ... L764: summary: row.summary ? String(row.summary) : null, L765: metadata: JSON.parse(String(row.metadata_json ?? '{}')), L766: createdAt: String(row.created_at),

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/core/trajectory.jsView on unpkg · L494

Findings

1 Critical4 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltascripts/sync-plugin.mjs

HighChild Processdist/core/rule-implementation-runtime.js

HighShellscripts/sync-plugin.mjs

HighCopied Package Dependency Bridgescripts/sync-plugin.mjs

HighRuntime Package Installscripts/sync-plugin.mjs

MediumEnvironment Vars

MediumInstall Persistencescripts/sync-plugin.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptodist/core/trajectory.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

dist/core/rule-implementation-runtime.jsView file

Lines 1-21javascript

1import { nodeVm } from '../utils/node-vm-polyfill.js';

2import { spawnSync } from 'node:child_process';

3/** Timeout (ms) for compiling RuleCode (defining evaluate + meta). */

High

Child Process

Package source references child process execution.

dist/core/rule-implementation-runtime.jsView on unpkg · L1

4const COMPILE_TIMEOUT_MS = 1000;

5/** Timeout (ms) for executing evaluate(input, helpers) inside the vm. */

6const EVALUATE_PROCESS_TIMEOUT_MS = 3000;

7const EVALUATE_PROCESS_OUTPUT_BYTES = 1024 * 1024;

8const EVALUATION_PROCESS_SOURCE = String.raw `

9const vm = require('node:vm');

10try {

11 const workerData = JSON.parse(require('node:fs').readFileSync(0, 'utf8'));

12 const context = vm.createContext(Object.create(null));

13 new vm.Script(workerData.source, { filename: workerData.filename }).runInContext(context, { timeout: 1000 });

14 const input = workerData.input;

15 const helpers = Object.freeze({

16 isRiskPath: () => input.workspace.isRiskPath,

17 getToolName: () => input.action.toolName,

18 getEstimatedLineChanges: () => input.derived.estimatedLineChanges,

19 getBashRisk: () => input.derived.bashRisk,

20 hasPlanFile: () => input.workspace.hasPlanFile,

21 getPlanStatus: () => input.workspace.planStatus,

scripts/sync-plugin.mjsView file

Lines 3-43javascript

3/**

4 * Principles Disciple Plugin Installer

5 *

6 * A complete installation script that can run after cloning the repo.

7 * Handles dependencies, build, and sync to OpenClaw installation directory.

8 *

9 * Usage:

10 * node scripts/sync-plugin.mjs [options]

11 *

12 * Options:

13 * --lang <zh|en> Language for skills (default: zh)

14 * --skip-build Skip build step (use existing dist/)

dist/core/trajectory.jsView file

Lines 474-514javascript

474 const rawStorage = this.storeRawText('user', input.rawText);

475 const createdAt = input.createdAt ?? nowIso();

476 return this.withWrite(() => {

477

Lines 369-409javascript

369/**

370 * Build the plugin.

371 */

372function buildPlugin() {

373 console.log('\n🔨 Building plugin (esbuild only — bypassing tsc which may fail on unrelated files)...');

374

375 try {

376 execSync('node esbuild.config.js --production', {

377 cwd: SOURCE_DIR,

378 stdio: 'inherit'

379 });

380 } catch (error) {

381 console.error('\n❌ Build failed');

382 console.error(` ${error.message}`);

383 process.exit(1);

384 }

385

386 // Generate .d.ts declarations separately so a tsc failure on unrelated

387 // files does not invalidate the esbuild bundle. Matches install.mjs pattern.

388 console.log('📝 Generating TypeScript declaration files...');

389 try {

390 execSync('npx tsc --emitDeclarationOnly', {

391 cwd: SOURCE_DIR,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/sync-plugin.mjsView on unpkg · L389

392 stdio: 'inherit'

393 });

394 } catch (error) {

395 console.warn(' ⚠️ Declaration generation failed (non-blocking):', error.message);

396 }

397

398 verifyBundleContents();

399}

400

401/**

402 * Build the Runtime V2 CLI that agents invoke through the `pd` command.

403 * This is intentionally part of plugin sync so installed OpenClaw agents do not

404 * depend on a repo checkout, stale global npm package, or guessed CLI path.

405 */

406function buildPdCli() {

407 console.log('\n🔨 Building PD CLI...');

408

409 if (!existsSync(join(PD_CLI_SOURCE_DIR, 'package.json'))) {

Lines 840-880javascript

840 writeFileSync(

841 join(globalBin, 'pd.ps1'),

842 `$shim = "${pluginPs.replace(/`/g, '``').replace(/"/g, '`"')}"\r\n& $shim @args\r\nexit $LASTEXITCODE\r\n`,

843 'utf-8'

844 );

845 } else {

846 const pluginSh = join(INSTALLED_BIN_DIR, 'pd');

847 const globalSh = join(globalBin, 'pd');

848 writeFileSync(globalSh, `#!/usr/bin/env sh\nexec "${pluginSh.replace(/"/g, '\\"')}" "$@"\n`, 'utf-8');

849 chmodSync(globalSh, 0o755);

850 }

851 console.log(`✅ Global pd shim installed: ${globalBin}`);

852 } catch (err) {

853 console.warn(`⚠️ Could not install global pd shim: ${err.message}`);

854 console.warn(` Use plugin-local shim: ${join(INSTALLED_BIN_DIR, isWindows() ? 'pd.cmd' : 'pd')}`);

855 }

856}

857

858function verifyPdCliShim() {

859 const localShim = join(INSTALLED_BIN_DIR, isWindows() ? 'pd.cmd' : 'pd');

860 try {

861 execSync(`"${localShim}" --version`, { stdio: 'pipe', shell: true });

862 console.log(`✅ PD CLI shim verified: ${localShim}`);

High

Shell

Package source references shell execution.

scripts/sync-plugin.mjsView on unpkg · L860

863 } catch (err) {

864 console.error(`❌ PD CLI shim verification failed: ${err.message}`);

865 process.exit(1);

866 }

867}

868

869/**

870 * Recursive directory copy (Windows-safe, no symlinks).

871 */

872function copyDir(src, dest) {

873 mkdirSync(dest, { recursive: true });

874 for (const entry of readdirSync(src)) {

875 const srcPath = join(src, entry);

876 const destPath = join(dest, entry);

877 if (lstatSync(srcPath).isDirectory()) {

878 copyDir(srcPath, destPath);

879 } else {

880 copyFileSync(srcPath, destPath);

Lines 1321-1361javascript

1321

1322 syncFilteredManifest(args.lang);

1323 syncPdCli();

1324

1325 // IMPORTANT: npm install must run FIRST, then injectLocalWorkspacePackages

1326 // overwrites @principles/core with the local monorepo version.

1327 //

1328 // Why: @principles/core on npm (v1.164.0-1.174.0, from a different publish

1329 // line) is semantically "^1.74.1"-compatible but its exports field does NOT

1330 // include ./principle-tree-ledger that pd-cli/health.js requires. The npm

1331 // registry version must never be used — only the local monorepo build has

1332 // the correct exports. Injecting BEFORE npm install is useless because npm

1333 // overwrites the injected copy. The authoritative source is always the

1334 // local monorepo, applied AFTER npm install.

1335 installTargetDependencies();

1336 injectLocalWorkspacePackages();

1337 verifyInjectedWorkspaceDeps();

1338 verifyPdCliShim();

1339

1340 console.log('\n🔍 Verifying installed plugin can load native dependencies...');

1341 try {

1342 execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' });

1343 console.log('✅ Native dependencies verified');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/sync-plugin.mjsView on unpkg · L1341

1344 } catch (error) {

1345 console.warn('\n⚠️ Native module better-sqlite3 failed to load. Attempting automatic rebuild...');

1346 try {

1347 execSync('npm rebuild better-sqlite3', { cwd: INSTALL_DIR, stdio: 'inherit' });

1348 execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' });

1349 console.log('✅ Rebuild successful!');

1350 } catch (rebuildErr) {

1351 console.error('\n❌ CRITICAL: better-sqlite3 rebuild failed!');

1352 process.exit(1);

1353 }

1354 }

1355

1356 const bootstrapScript = join(SOURCE_DIR, 'scripts', 'bootstrap-rules.mjs');

1357 if (existsSync(bootstrapScript)) {

1358 console.log('\n🧠 Synchronizing principles to active rules (Bootstrap)...');

1359 try {

1360 const workspaceDir = getConfiguredWorkspaceDir();

1361 const targetStateDir = join(workspaceDir, '.state');