registry / superclawd / 0.1.102
superclawd@0.1.102
Claude Code, supercharged — your team's standards, every session. The superclawd CLI loads your workspace's skills, agents, commands, workflows, and live directives into Claude Code as a plugin.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged runtime behavior corresponds to documented repo-memory scoping and the package's own authenticated workspace service. The manifest has no install-time hook; the publish hook only builds the package.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
Running the superclawd CLI; device authentication is initiated through its login flow.
Impact
No malicious impact was found in the reviewed flows.
Mechanism
The CLI sends the documented repository fingerprint with its catalog request and authenticates with SuperClawd services.
AI rationale
The flagged runtime behavior corresponds to documented repo-memory scoping and the package's own authenticated workspace service. The manifest has no install-time hook; the publish hook only builds the package.
Evidence
~/.superclawd/config.json~/.superclawd/update-state.json
Network endpoints3
api.superclawd.commcp-api.superclawd.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/index.js as the package CLI and main entry; its only publish lifecycle script builds the package.
- The CLI derives a repository identifier from the origin Git remote, falling back to the current directory, and sends it as repoFingerprint when fetching its catalog.
- The README describes repo memory as scoped by a Git-remote fingerprint, matching that data flow.
- Device authentication uses the SuperClawd API as part of the CLI login flow.
Evidence against
- The CLI uses child_process for expected tasks such as Git identification and launching Claude Code.
- The package makes authenticated requests to SuperClawd services, which matches its workspace and memory features.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
13 flaggeddist/index.jsView file
2Source sends the broad process environment to a literal external destination.
L2: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Un={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Wn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Bn(se,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function qn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
L5: `)}catch{}}function ct(e,t,n=!1){et(lt(e))||Jn(e,{notifications:n?!1:qn(),...t?{workspace:t}:{}})}function ut(){et(se)||Y({credentials:{keyId:"",secret:"",workspace:""},preferences...
L6: `)};function Vn(){try{switch(process.platform){case"darwin":return
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L22import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Un={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Wn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Bn(se,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function qn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
High
Findings
1 Critical11 High3 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/hook-helper.mjs#virtual:normalized:round1
HighKnown Malware Source Similaritydist/hook-helper.mjs
HighKnown Malware Source Similaritydist/index.js
HighKnown Malware Source Similaritydist/mcp-server.mjs
Affected versions and remediation
This report applies to superclawd@0.1.102.
See all versions of superclawd for other recorded verdicts.
- Review the evidence and your use of superclawd@0.1.102 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.