registry / superclawd / 0.1.96
superclawd@0.1.96
Claude Code, supercharged — your team's standards, every session. The superclawd CLI loads your workspace's skills, agents, commands, workflows, and live directives into Claude Code as a plugin.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged credential transport is used for authenticated requests to SuperClawd’s own service, and login is an explicit documented command. The repository identifier is used with the workspace catalog request, consistent with the package’s advertised workspace features.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs `superclawd login` to authenticate or launches `superclawd` to load a workspace.
Impact
The inspected flows are consistent with the package’s stated purpose; no unrelated credential collection or external collector was identified.
Mechanism
The CLI sends login details to SuperClawd’s API and uses its own service credentials for workspace requests. It submits a repository fingerprint with the catalog request.
AI rationale
The flagged credential transport is used for authenticated requests to SuperClawd’s own service, and login is an explicit documented command. The repository identifier is used with the workspace catalog request, consistent with the package’s advertised workspace features.
Evidence
dist/index.jspackage.jsonREADME.md
Network endpoints3
api.superclawd.commcp-api.superclawd.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points both the CLI and main entry to dist/index.js; its prepublishOnly script only builds the package.
- The README documents an explicit browser login followed by launching Claude Code to load workspace skills, agents and workflows.
- The runtime defaults to SuperClawd’s own API hosts, and the CLI uses its MCP credentials for authenticated requests.
- On launch, the CLI derives a repository fingerprint from the Git origin or current directory and includes it in the workspace catalog request.
- The login flow sends a machine ID and hostname to SuperClawd’s API when the user runs the documented login command.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
9 flaggeddist/index.jsView file
2Source sends the broad process environment to a literal external destination.
L2: import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Dn={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Tn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Yn(oe,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function Bn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
L5: `)}catch{}}function ct(e,t,n=!1){et(lt(e))||Hn(e,{notifications:n?!1:Bn(),...t?{workspace:t}:{}})}function ut(){et(oe)||G({credentials:{keyId:"",secret:"",workspace:""},preferences...
L6: `)};function qn(){try{switch(process.platform){case"darwin":return
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/index.jsView on unpkg · L22import { createRequire as __cr } from 'module'; const require = __cr(import.meta.url);
L3: var Xe=["opus","fable","sonnet","haiku"],Dn={opus:"claude-opus-5-5",fable:"claude-fable-5-1",sonnet:"claude-sonnet-5-5",haiku:"claude-haiku-5-5"},Tn=/^claude-(opus|fable|sonnet|hai...
L4: `,{mode:384});try{Yn(oe,384)}catch{}}function nt(){return L()?.preferences?.sk[redacted]===!0}function Bn(){return L()?.preferences?.notifications===!0}function rt(){return L()?...
High
Findings
1 Critical7 High3 Medium7 Low
CriticalHardcoded Runtime Data Exfiltrationdist/index.js
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCommand Output Exfiltrationdist/index.js
HighSandbox Evasion Gated Capabilitydist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighSemantic Analysis Limiteddist/hook-helper.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to superclawd@0.1.96.
See all versions of superclawd for other recorded verdicts.
- Review the evidence and your use of superclawd@0.1.96 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.