registry / principles-disciple / 1.197.3

principles-disciple@1.197.3

⚠ Under review

Turn repeated Agent corrections into Owner-approved, observable, reversible behavior principles. Stop correcting the same AI behavior across sessions.

Static Scan Results

scanned 6d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 7 file(s), 331 KB of source, external domains: api.anthropic.com, api.cerebras.ai, api.cloudflare.com, api.deepseek.com, api.fireworks.ai, api.groq.com, api.individual.githubcopilot.com, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, bedrock-runtime.eu-central-1.amazonaws.com, bedrock-runtime.us-east-1.amazonaws.com, gateway.ai.cloudflare.com, generativelanguage.googleapis.com, principles-disciple.dev, router.huggingface.co

Oversized source lightweight scan

dist/bundle.js3.80 MB file, sampled 256 KB

FilesystemChildProcessEnvironmentVarsShellDynamicRequireHighEntropyStringsMinifiedUrlStringsapi.anthropic.comapi.cerebras.aiapi.cloudflare.comapi.deepseek.comapi.fireworks.aiapi.groq.comapi.individual.githubcopilot.comapi.kimi.comapi.minimax.ioapi.minimaxi.comapi.mistral.aiapi.moonshot.aibedrock-runtime.eu-central-1.amazonaws.combedrock-runtime.us-east-1.amazonaws.comgateway.ai.cloudflare.comgenerativelanguage.googleapis.comprinciples-disciple.devrouter.huggingface.co

Source & flagged code

9 flagged

scripts/install-dependencies.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execFileSync } = require('child_process');

4const { existsSync, readFileSync } = require('fs');

High

Child Process

Package source references child process execution.

scripts/install-dependencies.cjsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/install-dependencies.cjsView on unpkg · L2

5const { join } = require('path');

7const PLUGIN_DIR = join(__dirname, '..');

9console.log('Setting up Principles Disciple plugin dependencies...');

11const packageJsonPath = join(PLUGIN_DIR, 'package.json');

12if (!existsSync(packageJsonPath)) {

13 console.log('Not in plugin directory, skipping dependency setup');

14 process.exit(0);

15}

17const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'));

18const dependencyNames = ['micromatch', '@sinclair/typebox', 'better-sqlite3'];

19const DEPENDENCIES = dependencyNames.map((name) => {

20 const version = packageJson.dependencies?.[name] || packageJson.devDependencies?.[name];

21 if (!version) {

22 throw new Error(`Missing dependency version in package.json for ${name}`);

scripts/sync-plugin.mjsView file

Lines 3-43javascript

3/**

4 * Principles Disciple Plugin Installer

5 *

6 * A complete installation script that can run after cloning the repo.

7 * Handles dependencies, build, and sync to OpenClaw installation directory.

8 *

9 * Usage:

10 * node scripts/sync-plugin.mjs [options]

11 *

12 * Options:

13 * --lang <zh|en> Language for skills (default: zh)

14 * --skip-build Skip build step (use existing dist/)

dist/bundle.jsView file

•path = dist/bundle.js kind = oversized_source_file sizeBytes = 3983557 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/bundle.jsView on unpkg

Source & flagged code

9 flagged · loading source

scripts/install-dependencies.cjsView file

2L3: const { execFileSync } = require('child_process'); L4: const { existsSync, readFileSync } = require('fs');

High

Child Process

Package source references child process execution.

scripts/install-dependencies.cjsView on unpkg · L2

2L3: const { execFileSync } = require('child_process'); L4: const { existsSync, readFileSync } = require('fs');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/install-dependencies.cjsView on unpkg · L2

scripts/sync-plugin.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = principles-disciple@1.187.0 matchedIdentity = npm:cHJpbmNpcGxlcy1kaXNjaXBsZQ:1.187.0 similarity = 0.833 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

scripts/sync-plugin.mjsView on unpkg

860try { L861: execSync(`"${localShim}" --version`, { stdio: 'pipe', shell: true }); L862: console.log(`✅ PD CLI shim verified: ${localShim}`);

High

Shell

Package source references shell execution.

scripts/sync-plugin.mjsView on unpkg · L860

1341package = principles-disciple; repositoryIdentity = principles; dependency = better-sqlite3 L1341: try { L1342: execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' }); L1343: console.log('✅ Native dependencies verified');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/sync-plugin.mjsView on unpkg · L1341

389try { L390: execSync('npx tsc --emitDeclarationOnly', { L391: cwd: SOURCE_DIR,

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

scripts/sync-plugin.mjsView on unpkg · L389

23import { fileURLToPath } from 'url'; L24: import { execSync } from 'child_process'; L25: L26: const __filename = fileURLToPath(import.meta.url); L27: const __dirname = dirname(__filename); L28: ... L38: function getHomeDir() { L39: return process.env.HOME L40: || process.env.USERPROFILE ... L52: const raw = readFileSync(configPath, 'utf-8'); L53: const config = JSON.parse(raw); L54: const workspace = config?.agents?.defaults?.workspace;

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

scripts/sync-plugin.mjsView on unpkg · L23

Low

Weak Crypto

Package source references weak cryptographic algorithms.

scripts/sync-plugin.mjsView on unpkg · L23

dist/bundle.jsView file

•path = dist/bundle.js kind = oversized_source_file sizeBytes = 3983557 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/bundle.jsView on unpkg

Findings

1 Critical5 High4 Medium5 Low

CriticalPrevious Version Dangerous Deltascripts/sync-plugin.mjs

HighChild Processscripts/install-dependencies.cjs

HighShellscripts/sync-plugin.mjs

HighCopied Package Dependency Bridgescripts/sync-plugin.mjs

HighRuntime Package Installscripts/sync-plugin.mjs

HighOversized Source Filedist/bundle.js

MediumDynamic Requirescripts/install-dependencies.cjs

MediumEnvironment Vars

MediumInstall Persistencescripts/sync-plugin.mjs

MediumStructural Risk Force Deep Review

LowScripts Present

LowWeak Cryptoscripts/sync-plugin.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

9 flagged

scripts/install-dependencies.cjsView file

Lines 1-22javascript

1#!/usr/bin/env node

3const { execFileSync } = require('child_process');

4const { existsSync, readFileSync } = require('fs');

High

Child Process

Package source references child process execution.

scripts/install-dependencies.cjsView on unpkg · L2

Medium

Dynamic Require

Package source references dynamic require/import behavior.

scripts/install-dependencies.cjsView on unpkg · L2

5const { join } = require('path');

7const PLUGIN_DIR = join(__dirname, '..');

9console.log('Setting up Principles Disciple plugin dependencies...');

11const packageJsonPath = join(PLUGIN_DIR, 'package.json');

12if (!existsSync(packageJsonPath)) {

13 console.log('Not in plugin directory, skipping dependency setup');

14 process.exit(0);

15}

17const packageJson = JSON.parse(readFileSync(packageJsonPath, 'utf8'));

18const dependencyNames = ['micromatch', '@sinclair/typebox', 'better-sqlite3'];

19const DEPENDENCIES = dependencyNames.map((name) => {

20 const version = packageJson.dependencies?.[name] || packageJson.devDependencies?.[name];

21 if (!version) {

22 throw new Error(`Missing dependency version in package.json for ${name}`);

scripts/sync-plugin.mjsView file

Lines 3-43javascript

3/**

4 * Principles Disciple Plugin Installer

5 *

6 * A complete installation script that can run after cloning the repo.

7 * Handles dependencies, build, and sync to OpenClaw installation directory.

8 *

9 * Usage:

10 * node scripts/sync-plugin.mjs [options]

11 *

12 * Options:

13 * --lang <zh|en> Language for skills (default: zh)

14 * --skip-build Skip build step (use existing dist/)

dist/bundle.jsView file

•path = dist/bundle.js kind = oversized_source_file sizeBytes = 3983557 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/bundle.jsView on unpkg

Lines 1321-1361javascript

1321

1322 syncFilteredManifest(args.lang);

1323 syncPdCli();

1324

1325 // IMPORTANT: npm install must run FIRST, then injectLocalWorkspacePackages

1326 // overwrites @principles/core with the local monorepo version.

1327 //

1328 // Why: @principles/core on npm (v1.164.0-1.174.0, from a different publish

1329 // line) is semantically "^1.74.1"-compatible but its exports field does NOT

1330 // include ./principle-tree-ledger that pd-cli/health.js requires. The npm

1331 // registry version must never be used — only the local monorepo build has

1332 // the correct exports. Injecting BEFORE npm install is useless because npm

1333 // overwrites the injected copy. The authoritative source is always the

1334 // local monorepo, applied AFTER npm install.

1335 installTargetDependencies();

1336 injectLocalWorkspacePackages();

1337 verifyInjectedWorkspaceDeps();

1338 verifyPdCliShim();

1339

1340 console.log('\n🔍 Verifying installed plugin can load native dependencies...');

1341 try {

1342 execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' });

1343 console.log('✅ Native dependencies verified');

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

scripts/sync-plugin.mjsView on unpkg · L1341

1344 } catch (error) {

1345 console.warn('\n⚠️ Native module better-sqlite3 failed to load. Attempting automatic rebuild...');

1346 try {

1347 execSync('npm rebuild better-sqlite3', { cwd: INSTALL_DIR, stdio: 'inherit' });

1348 execSync(`node -e "require('better-sqlite3')"`, { cwd: INSTALL_DIR, stdio: 'pipe' });

1349 console.log('✅ Rebuild successful!');

1350 } catch (rebuildErr) {

1351 console.error('\n❌ CRITICAL: better-sqlite3 rebuild failed!');

1352 process.exit(1);

1353 }

1354 }

1355

1356 const bootstrapScript = join(SOURCE_DIR, 'scripts', 'bootstrap-rules.mjs');

1357 if (existsSync(bootstrapScript)) {

1358 console.log('\n🧠 Synchronizing principles to active rules (Bootstrap)...');

1359 try {

1360 const workspaceDir = getConfiguredWorkspaceDir();

1361 const targetStateDir = join(workspaceDir, '.state');