registry / superclawd / 0.1.6

superclawd@0.1.6

⚠ Under review

Claude Code, supercharged — your team's standards, every session. The superclawd CLI loads your workspace's skills, agents, commands, workflows, and live directives into Claude Code as a plugin.

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalFilesystemNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

Manifest

NoLicense

scanned 3 file(s), 465 KB of source, external domains: api.superclawd.com, claude.com, github.com, json-schema.org, mcp-api.superclawd.com, raw.githubusercontent.com, registry.npmjs.org, superclawd.com

Source & flagged code

6 flagged

dist/index.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

2import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);

3import{spawn as fn,spawnSync as zr,execSync as Qr}from"node:child_process"

Source & flagged code

6 flagged · loading source

dist/index.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = superclawd@0.1.2 matchedIdentity = npm:c3VwZXJjbGF3ZA:0.1.2 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/index.jsView on unpkg

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L2

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/index.jsView on unpkg · L2

2import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url); L3: import{spawn as fn,spawnSync as zr,execSync as Qr}from"node:child_process";import{fileURLToPath as dn}from"node:url";import{existsSync as mn}from"node:fs";import{resolve as Zr,dirn... L4: `,{mode:384});try{kn(ee,384)}catch{}}function Ye(){return b()?.preferences?.sk[redacted]===!0}function En(){return b()?.preferences?.notifications===!0}function Be(){return b()?... L5: `)}catch{}}function ze(e,t,n=!1){Fe(Xe(e))||Cn(e,{notifications:n?!1:En(),...t?{workspace:t}:{}})}function Qe(){Fe(ee)||G({credentials:{keyId:"",secret:"",workspace:""},preferences... L6: `)};function Rn(){try{switch(process.platform){case"darwin":return ye("caffeinate",["-i","-w",String(process.pid)],{stdio:"ignore"});case"linux":return ye("systemd-inhibit",["--wha...

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/index.jsView on unpkg · L2

High

Sandbox Evasion Gated Capability

Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.

dist/index.jsView on unpkg · L2

dist/mcp-server.mjsView file

5|| (${i} === "string" && ${o} && ${o} == +${o} && !(${o} % 1))`).assign(a,(0,L._)`+${o}`);return;case"boolean":n.elseIf((0,L._)`${o} === "false" || ${o} === 0 || ${o} === null`).as... L6: || ${i} === "boolean" || ${o} === null`).assign(a,(0,L._)`[${o}]`)}}}function tw({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,L._)`${e} !== undefined`,()=>t.assign((0,L._)`... L7: missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcp-server.mjsView on unpkg · L5

Findings

1 Critical4 High3 Medium7 Low

CriticalPrevious Version Dangerous Deltadist/index.js

HighChild Processdist/index.js

HighSame File Env Network Executiondist/index.js

HighCommand Output Exfiltrationdist/index.js

HighSandbox Evasion Gated Capabilitydist/index.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/mcp-server.mjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

dist/mcp-server.mjsView file

Lines 1-25javascript

1import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);

2var ey=Object.create;var di=Object.defineProperty;var ty=Object.getOwnPropertyDescriptor;var ry=Object.getOwnPropertyNames;var ny=Object.getPrototypeOf,oy=Object.prototype.hasOwnProperty;var _o=(t,e)=>()=>(t&&(e=t(t=0)),e);var S=(t,e)=>()=>(e||t((e={exports:{}}).exports,e),e.exports),vo=(t,e)=>{for(var r in e)di(t,r,{get:e[r],enumerable:!0})},sy=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of ry(e))!oy.call(t,o)&&o!==r&&di(t,o,{get:()=>e[o],enumerable:!(n=ty(e,o))||n.enumerable});return t};var Il=(t,e,r)=>(r=t!=null?ey(ny(t)):{},sy(e||!t||!t.__esModule?di(r,"default",{v ...

3`:""},this._extScope=e,this._scope=new ut.Scope({parent:e}),this._nodes=[new Vc]}toString(){return this._root.render(this.opts)}name(e){return this._scope.name(e)}scopeName(e){return this._extScope.name(e)}scopeValue(e,r){let n=this._extScope.value(e,r);return(this._values[n.prefix]||(this._values[n.prefix]=new Set)).add(n),n}getScopeValue(e,r){return this._extScope.getValue(e,r)}scopeRefs(e){return this._extScope.scopeRefs(e,this._values)}scopeCode(){return this._extScope.scopeCode(this._values)}_def(e,r,n,o){let s=this._scope.toName(r);return n!==void 0&&o&&(this._constants[s.str]=n),this._l ...

4 || (${i} == "string" && ${o} && ${o} == +${o})`).assign(a,(0,L._)`+${o}`);return;case"integer":n.elseIf((0,L._)`${i} === "boolean" || ${o} === null

6 || ${i} === "boolean" || ${o} === null`).assign(a,(0,L._)`[${o}]`)}}}function tw({gen:t,parentData:e,parentDataProperty:r},n){t.if((0,L._)`${e} !== undefined`,()=>t.assign((0,L

7 missingProperty: ${n},

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/mcp-server.mjsView on unpkg · L5

8 depsCount: ${e},

9 deps: ${r}}`};var xS={keyword:"dependencies",type:"object",schemaType:"object",error:$t.error,code(t){let[e,r]=wS(t);zh(t,e),Eh(t,r)}};function wS({schema:t}){let e={},r={};for(let n in

101. Tests pass and cover new behavior.

112. No secrets or debug logging left in.

123. Public APIs documented.

134. Changelog updated.`}],nE=[{name:"error-codes",description:"Canonical list of this platform's error codes.",content:`E1001 invalid_input

14E1002 unauthorized

15E1003 rate_limited

16E2001 upstream_unavailable`}];oE=[{id:"workflow-deploy-001",name:"production-deploy",description:"deploying to production, cutting a release, or shipping to prod",itemCount:6,content:`Production deploy workflow:

171. Confirm CI is green on main.

182. Bump version + update changelog.

193. Tag the release.

204. Run db migrations.

215. Deploy and watch error rate for 10m.

226. Announce in #releases.`}]});import{appendFileSync as sE,mkdirSync as iE}from"node:fs";import{dirname as aE}from"node:path";function Z(t){let e=JSON.stringify({seq:uE++,...t});if(zl)try{iE(aE(zl),{recursive:!0}),sE(zl,e+`

23`)}catch{}cE&&process.stderr.write("[superclawd-mcp] "+e+`

24`)}var zl,cE,uE,ni=_o(()=>{"use strict";zl=process.env.SUPERCLAWD_LOG_FILE,cE=process.env.SUPERCLAWD_DEBUG==="1",uE=0});var Ng={};vo(Ng,{mockBackend:()=>hE});import{randomUUID as lE}from"node:crypto";function fE(t){return t.categories.reduce((e,r)=>e+r.instructions.length,0)}function mE(t){let e=t.categories.map(r=>` <category name="${r.name}">

25`+r.instructions.map((n,o)=>` ${o+1}. ${n}`).join(`

Long lines were clipped for display.