registry / superclawd / 0.1.90
superclawd@0.1.90
Claude Code, supercharged — your team's standards, every session. The superclawd CLI loads your workspace's skills, agents, commands, workflows, and live directives into Claude Code as a plugin.
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe apparent credential and session-data transfers resolve to the package's authenticated SuperClawd login and memory features. The manifest has no install-time hook, and inspection did not establish unrelated collection, code execution, or a concrete attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user invokes the CLI or uses its Claude Code integration; device authorization requires selecting the login command.
Impact
No unrelated recipient or malicious impact was established; the observed transfers implement the package's service features.
Mechanism
The package sends authenticated requests to SuperClawd service endpoints. Its session integration can submit condensed session content as memory entries when its configured account and repository conditions are met.
AI rationale
The apparent credential and session-data transfers resolve to the package's authenticated SuperClawd login and memory features. The manifest has no install-time hook, and inspection did not establish unrelated collection, code execution, or a concrete attack.
Network endpoints2
api.superclawd.commcp-api.superclawd.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI entry point; its only publish lifecycle hook runs a build.
- The login command starts a device authorization flow at the SuperClawd API and polls that flow for approval.
- The CLI uses SuperClawd service endpoints and sends its configured workspace credentials to those endpoints.
- Session hooks support the package's memory feature: capture requires configured credentials, a workspace, and a repository fingerprint, then submits memory entries to the SuperClawd API.
- The declared SDK and validation dependencies have no install scripts in the inspected manifests; the inspected Zod entry points are ordinary module exports.
Evidence against
- The session integration can process condensed transcript content and submit resulting memories to the service during normal use.
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggeddist/index.jsView file
2Source sends the broad process environment to a literal external destination.
L2: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Dn={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Tn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Gn(oe,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function Kn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
L5: `)}catch{}}function ct(e,t,n=!1){et(lt(e))||Bn(e,{notifications:n?!1:Kn(),...t?{workspace:t}:{}})}function ut(){et(oe)||G({credentials:{keyId:"",secret:"",workspace:""},preferences...
L6: `)};function Hn(){try{switch(process.platform){case"darwin":return
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L22import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Dn={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Tn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Gn(oe,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function Kn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
High
Findings
1 Critical7 High3 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/hook-helper.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to superclawd@0.1.90.
See all versions of superclawd for other recorded verdicts.
- Review the evidence and your use of superclawd@0.1.90 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.