registry / superclawd / 0.1.89
superclawd@0.1.89
Claude Code, supercharged — your team's standards, every session. The superclawd CLI loads your workspace's skills, agents, commands, workflows, and live directives into Claude Code as a plugin.
AI Security Review
scanned 8d ago · by lpm-firewall-aiSource inspection found an explicit device-login flow to the package's own service and local credential storage. The manifest and inspected runtime files showed no concrete attack behavior; the scanner's credential and execution matches are consistent with the CLI's normal authentication and helper functionality.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the login command and approves the device authorization in a browser.
Impact
The inspected flow authorizes the user's CLI account with SuperClawd; no unrelated credential transfer or harmful side effect was found.
Mechanism
The CLI sends a machine identifier and hostname to the SuperClawd API, polls with a device code, and saves approved credentials to its local configuration.
AI rationale
Source inspection found an explicit device-login flow to the package's own service and local credential storage. The manifest and inspected runtime files showed no concrete attack behavior; the scanner's credential and execution matches are consistent with the CLI's normal authentication and helper functionality.
Evidence
package.jsondist/index.jsdist/mcp-server.mjsdist/hook-helper.mjs.lpm-dependency-evidence-711813e2-d2b8-477d-977b-4433b33962cf/0/npm-linux/package.json.lpm-dependency-evidence-711813e2-d2b8-477d-977b-4433b33962cf/1/npm-linux/package.json.lpm-dependency-evidence-711813e2-d2b8-477d-977b-4433b33962cf/1/npm-linux/index.js.lpm-dependency-evidence-711813e2-d2b8-477d-977b-4433b33962cf/1/npm-linux/index.cjs
Network endpoints2
api.superclawd.commcp-api.superclawd.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to the CLI entrypoint and shows no install-time lifecycle command in the reviewed scripts; its prepublish hook only runs the build.
- Login is an explicit CLI action: it starts a device authorization flow with SuperClawd, polls for approval, and stores the returned credentials in the local configuration.
- The API defaults point to SuperClawd, and the login flow sends only a machine ID and hostname before approval; no unrelated credential recipient was identified.
- The inspected MCP transport and helper code provide standard local protocol and hook operations; the dependency manifests and exports show SDK and schema-library code.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
9 flaggeddist/index.jsView file
2Source sends the broad process environment to a literal external destination.
L2: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Dn={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Tn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Gn(oe,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function Kn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
L5: `)}catch{}}function ct(e,t,n=!1){et(lt(e))||Bn(e,{notifications:n?!1:Kn(),...t?{workspace:t}:{}})}function ut(){et(oe)||G({credentials:{keyId:"",secret:"",workspace:""},preferences...
L6: `)};function Hn(){try{switch(process.platform){case"darwin":return
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L22import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Dn={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Tn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Gn(oe,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function Kn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
High
Findings
1 Critical7 High3 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/hook-helper.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to superclawd@0.1.89.
See all versions of superclawd for other recorded verdicts.
- Review the evidence and your use of superclawd@0.1.89 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.