registry / signposts / 0.1.0

signposts@0.1.0

Keep your AI coding agent on the rails — a rules repository that catches the mistakes your agent makes before they land, and learns new guardrails as you work.

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNativeBindingsShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 34 file(s), 252 KB of source, external domains: github.com

Source & flagged code

4 flagged

rules/git-hygiene/no-git-discard.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2// rules/check-git-discard.mjs — blocks a git command that would silently

3// destroy uncommitted work.

4//

5// `git checkout -- <paths>` and `git restore <paths>` overwrite the working

6// tree with no undo. In an agent session, reverting a dirty file is almost

7// never wanted without a stash (origin: 2026-06-10, a stray `git checkout --`

8// during cache debugging wiped a file's entire uncommitted rewrite). This is a

9// PreToolUse hook on Bash — it must fire BEFORE the command runs; a post-hoc

10// check can't un-destroy work — so it is wired in .claude/settings.json, not

11// lefthook.

12//

13// Scope is deliberately narrow (prefer false negatives over blocking real

14// work): only the `--` pathspec form of checkout (branch switching passes) and

15// `git restore` forms that touch the working tree (`--staged`-only passes).

16// A literal `# discard-ok` comment in the command lets a deliberate discard

17// through.

18//

19// Usage: hook mode (default): reads PreToolUse JSON on stdin (exit 2 blocks)

20// node rules/check-git-discard.mjs --test (self-test)

22import { execFileSync } from 'node:child_process';

23import { readFileSync, mkdtempSync, writeFileSync, rmSync } from 'node:fs';

High

Child Process

Package source references child process execution.

rules/git-hygiene/no-git-discard.mjsView on unpkg · L21

24import { tmpdir } from 'node:os';

25import { join } from 'node:path';

27// ── pure ─────────────────────────────────────────────────────────────────────

29const OPERATORS = new Set([';', '&&', '||', '|', '&', '|&']);

31// Shell-ish tokeniser: respects quotes (so a commit message mentioning

32// "git checkout --" doesn't false-positive) and emits shell operators as

33// their own tokens. Returns null on unparseable input (unclosed quote) —

34// callers must be permissive then.

35export function tokenize(cmd) {

36 const tokens = [];

37 let cur = '';

38 let started = false;

39 let i = 0;

40 const push = () => { if (started) tokens.push(cur); cur = ''; started = false; };

41 while (i < cmd.length) {

src/engine.mjsView file

Lines 118-158javascript

118 return { ...r, when: r.when || ['edit', 'commit'] };

119}

120

121// Resolve `use:` (always a path) to a runnable: a JS script module or a shell path.

122// Returns { kind, js } for JavaScript, { kind:'content', shell } for a shell script.

123async function resolveScript(use, root) {

124 if

src/cli/uninstall.mjsView file

Lines 28-68javascript

28 '.claude/hooks/signposts.mjs', '.claude/hooks/signposts-core.mjs',

29 '.claude/hooks/signposts-test.mjs', '.claude/hooks/lefthook-on-write.sh',

30 '.claude/hooks/strip-claude-attribution.sh',

31];

32const OUR_DEVDEPS = ['signposts', 'lefthook', '@ast-grep/cli', '@ast-grep/napi'];

src/hooks/lefthook-on-write.shView file

•path = src/hooks/lefthook-on-write.sh kind = build_helper sizeBytes = 1468 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/hooks/lefthook-on-write.shView on unpkg

Source & flagged code

4 flagged · loading source

rules/git-hygiene/no-git-discard.mjsView file

21L22: import { execFileSync } from 'node:child_process'; L23: import { readFileSync, mkdtempSync, writeFileSync, rmSync } from 'node:fs';

High

Child Process

Package source references child process execution.

rules/git-hygiene/no-git-discard.mjsView on unpkg · L21

src/engine.mjsView file

138if (c.type === 'js') { L139: try { const mod = (await import(c.abs)).default; if (mod) return { kind: mod.kind || 'content', js: mod }; } L140: catch { return null; }

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/engine.mjsView on unpkg · L138

src/cli/uninstall.mjsView file

48if (existsSync(rel('.git'))) { L49: log(`${tag}unarm lefthook (npx lefthook uninstall)`); L50: if (!dryRun) spawnSync('bash', ['-lc', 'npx --no-install lefthook uninstall'], { cwd: target, stdio: 'ignore' }); L51: }

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

src/cli/uninstall.mjsView on unpkg · L48

src/hooks/lefthook-on-write.shView file

•path = src/hooks/lefthook-on-write.sh kind = build_helper sizeBytes = 1468 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/hooks/lefthook-on-write.shView on unpkg

Findings

3 High4 Medium4 Low

HighChild Processrules/git-hygiene/no-git-discard.mjs

HighShell

HighRuntime Package Installsrc/cli/uninstall.mjs

MediumDynamic Requiresrc/engine.mjs

MediumEnvironment Vars

MediumShips Build Helpersrc/hooks/lefthook-on-write.sh

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

rules/git-hygiene/no-git-discard.mjsView file

Lines 1-41javascript

1#!/usr/bin/env node

2// rules/check-git-discard.mjs — blocks a git command that would silently

3// destroy uncommitted work.

4//

5// `git checkout -- <paths>` and `git restore <paths>` overwrite the working

6// tree with no undo. In an agent session, reverting a dirty file is almost

7// never wanted without a stash (origin: 2026-06-10, a stray `git checkout --`

8// during cache debugging wiped a file's entire uncommitted rewrite). This is a

9// PreToolUse hook on Bash — it must fire BEFORE the command runs; a post-hoc

10// check can't un-destroy work — so it is wired in .claude/settings.json, not

11// lefthook.

12//

13// Scope is deliberately narrow (prefer false negatives over blocking real

14// work): only the `--` pathspec form of checkout (branch switching passes) and

15// `git restore` forms that touch the working tree (`--staged`-only passes).

16// A literal `# discard-ok` comment in the command lets a deliberate discard

17// through.

18//

19// Usage: hook mode (default): reads PreToolUse JSON on stdin (exit 2 blocks)

20// node rules/check-git-discard.mjs --test (self-test)

22import { execFileSync } from 'node:child_process';

23import { readFileSync, mkdtempSync, writeFileSync, rmSync } from 'node:fs';

High

Child Process

Package source references child process execution.

rules/git-hygiene/no-git-discard.mjsView on unpkg · L21

24import { tmpdir } from 'node:os';

25import { join } from 'node:path';

29const OPERATORS = new Set([';', '&&', '||', '|', '&', '|&']);

31// Shell-ish tokeniser: respects quotes (so a commit message mentioning

32// "git checkout --" doesn't false-positive) and emits shell operators as

33// their own tokens. Returns null on unparseable input (unclosed quote) —

34// callers must be permissive then.

35export function tokenize(cmd) {

36 const tokens = [];

37 let cur = '';

38 let started = false;

39 let i = 0;

40 const push = () => { if (started) tokens.push(cur); cur = ''; started = false; };

41 while (i < cmd.length) {

src/engine.mjsView file

Lines 118-158javascript

118 return { ...r, when: r.when || ['edit', 'commit'] };

119}

120

121// Resolve `use:` (always a path) to a runnable: a JS script module or a shell path.

122// Returns { kind, js } for JavaScript, { kind:'content', shell } for a shell script.

123async function resolveScript(use, root) {

124 if

src/cli/uninstall.mjsView file

Lines 28-68javascript

28 '.claude/hooks/signposts.mjs', '.claude/hooks/signposts-core.mjs',

29 '.claude/hooks/signposts-test.mjs', '.claude/hooks/lefthook-on-write.sh',

30 '.claude/hooks/strip-claude-attribution.sh',

31];

32const OUR_DEVDEPS = ['signposts', 'lefthook', '@ast-grep/cli', '@ast-grep/napi'];

src/hooks/lefthook-on-write.shView file

•path = src/hooks/lefthook-on-write.sh kind = build_helper sizeBytes = 1468 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/hooks/lefthook-on-write.shView on unpkg