registry / superclawd / 0.1.5

superclawd@0.1.5

⚠ Under review

Claude Code, supercharged — your team's standards, every session. The superclawd CLI loads your workspace's skills, agents, commands, workflows, and live directives into Claude Code as a plugin.

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 3 file(s), 465 KB of source, external domains: api.superclawd.com, claude.com, github.com, json-schema.org, mcp-api.superclawd.com, raw.githubusercontent.com, registry.npmjs.org, superclawd.com

Source & flagged code

6 flagged

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);

3import{spawn as fn,spawnSync as zr,execSync as Qr}from"node:child_process";import{fileURLToPath as dn}from"node:url";import{existsSync as mn}from"node:fs";import{resolve as Zr,dirname as eo,join as to}from"node:path";import{homedir as hn}from"node:os";import{join as te}from"node:path";import{randomBytes as wn}from"node:crypto";import{readFileSync as Sn,writeFileSync as Ge,mkdirSync as je,chmodSync as kn,existsSync as Fe}from"node:fs";var J=(process.env.SUPERCLAWD_BACKEND||"real").toLowerCase(),k=J==="mock",q=process.env.SUPERCLAWD_MCP_API_URL||"https://mcp-api.superclawd.com",ne=process.env.SU ...

4`,{mode:384});try{kn(ee,384)}catch{}}function Ye(){return b()?.preferences?.skipPermissions===!0}function En(){return b()?.preferences?.notifications===!0}function Be(){return b()?.preferences?.chooseWorkspaceAtStartup!==!1}function ke(e){let t=b()??{};G({...t,credentials:{...t.credentials,workspace:e}})}function oe(){let e=b();e?.credentials?.workspace&&G({...e,credentials:{...e.credentials,workspace:""}})}function He(){return b()?.preferences?.experimental===!0}function qe(){return b()?.preferences?.keepAwake===!0}function Je(){return b()?.preferences?.privateMemory!==!1}function Ve(){return ...

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

5`)}catch{}}function ze(e,t,n=!1){Fe(Xe(e))||Cn(e,{notifications:n?!1:En(),...t?{workspace:t}:{}})}function Qe(){Fe(ee)||G({credentials:{keyId:"",secret:"",workspace:""},preferences:{notifications:!1

6`)};function Rn(){try{switch(process.platform){case"darwin":return ye("caffeinate",["-i","-w",String(process.pid)],{stdio:"ignore"});case"linux":return ye("systemd-inhibit",["--what=sleep:idle","--who=SuperClawd","--why=SuperClawd session running","--mode=block","cat"],{stdio:["pipe","ignore","ignore"]});case"win32":{let e=[`$p = Add-Type -MemberDefinition '[DllImport("kernel32.dll")] public static extern uint SetThreadExecutionState(uint e);' -Name P -Namespace W -PassThru;`,"$p::SetThreadExecutionState(0x80000000 -bor 0x00000001) | Out-Null;","[void][Console]::In.ReadToEnd();"].join(" ");ret ...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L2

7`)}async function Re(e,t,n){let r=Pn.createInterface({input:process.stdin,output:process.stderr});try{process.stderr.write(`

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L2

8${e} ${t} is outdated \u2014 ${n} is available.

9`);let o=(await r.question(" [U] Update now (default) [R] Run anyway > ")).trim().toLowerCase();return o==="r"||o==="run"?"run":"update"}finally{r.close()}}function Y(e,t){at(e,{notifiedAt:Date.now(),...t?{dismissed:t}:{}})}

10`);let s=rt("npm install -g superclawd@latest",{stdio:"inherit",shell:!0});if(s.status!==0)return process.stderr.write(`\u2717 Update failed (npm exited ${s.status??"?"}). Running ${e} for now.

11`),{};let i=rt("superclawd",t,{stdio:"inherit",env:{...process.env,SUPERCLAWD_UPDATED:"1"}});return i.error?(process.stderr.write(`\u2713 Updated to ${r}. Re-run your command.

12`),{exitCode:0}):{exitCode:i.status??0}}import{randomUUID as lt}from"node:crypto";function ut(e){let t={"content-type":"application/json","x-mcp-key-id":e.keyId,"x-mcp-secret":e.secret,"x-workspace-slug":e.workspace,"x-request-id":lt()};return process.env.SUPERCLAWD_EXPERIMENTAL==="true"&&(t["x-experimental"]="true"),t}async function se(e,t,n){let r=`${e.apiUrl}${t}`;if(n){let i=new URLSearchParams;for(let[l,c]of Object.entries(n))c!==void 0&&c!==""&&i.set(l,c);let a=i.toString();a&&(r+=(r.includes("?")?"&":"?")+a)}let o=await fetch(r,{headers:ut(e)}),s=await o.json().catch(()=>null);return{st ...

131. Tests pass and cover new behavior.

142. No secrets or debug logging left in.

153. Public APIs documented.

164. Changelog updated.`}],ht=[{name:"error-codes",description:"Canonical list of this platform's error codes.",content:`E1001 invalid_input

17E1002 unauthorized

18E1003 rate_limited

19E2001 upstream_unavailable`}];var wt=[{id:"workflow-deploy-001",name:"production-deploy",description:"deploying to production, cutting a release, or shipping to prod",itemCount:6,content:`Production deploy workflow:

201. Confirm CI is green on main.

212. Bump version + update changelog.

223. Tag the release.

Long lines were clipped for display.

•matchType = previous_version_dangerous_delta matchedPackage = superclawd@0.1.2 matchedIdentity = npm:c3VwZXJjbGF3ZA:0.1.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

dist/mcp-server.mjsView file

Lines 1-25javascript

1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);

2var ey=Object.create;var di=Object.defineProperty;var ty=Object.getOwnPropertyDescriptor;var ry=Object.getOwnPropertyNames;var ny=

Source & flagged code

6 flagged · loading source

dist/index.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

2import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L3: import{spawn as fn,spawnSync as zr,execSync as Qr}from"node:child_process";import{fileURLToPath as dn}from"node:url";import{existsSync as mn}from"node:fs";import{resolve as Zr,dirn... L4: `,{mode:384});try{kn(ee,384)}catch{}}function Ye(){return b()?.preferences?.sk[redacted]===!0}function En(){return b()?.preferences?.notifications===!0}function Be(){return b()?... L5: `)}catch{}}function ze(e,t,n=!1){Fe(Xe(e))||Cn(e,{notifications:n?!1:En(),...t?{workspace:t}:{}})}function Qe(){Fe(ee)||G({credentials:{keyId:"",secret:"",workspace:""},preferences... L6: `)};function Rn(){try{switch(process.platform){case"darwin":return ye("caffeinate",["-i","-w",String(process.pid)],{stdio:"ignore"});case"linux":return ye("systemd-inhibit",["--wha...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L2

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L2

dist/mcp-server.mjsView file

5|| (${i} === "string" && ${o} && ${o} == +${o} && !(${o} % 1))`).assign(a,(0,L._)`+${o}`);return;case"boolean":n.elseIf((0,L._)`${o} === "false" || ${o} === 0 || ${o} === null`).as... L6: || ${i} === "boolean" || ${o} === null`).assign(a,(0,L._)`[${o}]`)}}}function tw({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,L._)`${e} !== undefined`,()=>t.assign((0,L._)`... L7: missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcp-server.mjsView on unpkg · L5

Findings

1 Critical4 High3 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/index.js

HighChild Processdist/index.js

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/mcp-server.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

6 flagged

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

5`)}catch{}}function ze(e,t,n=!1){Fe(Xe(e))||Cn(e,{notifications:n?!1:En(),...t?{workspace:t}:{}})}function Qe(){Fe(ee)||G({credentials:{keyId:"",secret:"",workspace:""},preferences:{notifications:!1

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L2

7`)}async function Re(e,t,n){let r=Pn.createInterface({input:process.stdin,output:process.stderr});try{process.stderr.write(`

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L2

8${e} ${t} is outdated \u2014 ${n} is available.

10`);let s=rt("npm install -g superclawd@latest",{stdio:"inherit",shell:!0});if(s.status!==0)return process.stderr.write(`\u2717 Update failed (npm exited ${s.status??"?"}). Running ${e} for now.

11`),{};let i=rt("superclawd",t,{stdio:"inherit",env:{...process.env,SUPERCLAWD_UPDATED:"1"}});return i.error?(process.stderr.write(`\u2713 Updated to ${r}. Re-run your command.

131. Tests pass and cover new behavior.

142. No secrets or debug logging left in.

153. Public APIs documented.

164. Changelog updated.`}],ht=[{name:"error-codes",description:"Canonical list of this platform's error codes.",content:`E1001 invalid_input

17E1002 unauthorized

18E1003 rate_limited

201. Confirm CI is green on main.

212. Bump version + update changelog.

223. Tag the release.

Long lines were clipped for display.

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

dist/mcp-server.mjsView file

Lines 1-25javascript

1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);

2var ey=Object.create;var di=Object.defineProperty;var ty=Object.getOwnPropertyDescriptor;var ry=Object.getOwnPropertyNames;var ny=