registry / toga-ai / 1.0.294

toga-ai@1.0.294

⚠ Under review

TOGA Technology Team Claude Knowledge System — shared AI coding harness with skills, knowledge base CLI, and project installer for Claude Code.

Static Scan Results

scanned 7h ago · by rust-scanner

Static analysis flagged 12 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 16 file(s), 141 KB of source, external domains: api-writer.togahub.com, api.clickup.com, api.togaiq.com, github.com

Source & flagged code

4 flagged

package.jsonView file

Lines 9-49json

9 "knowledge-base",

10 "skills",

11 "toga-technology",

12 "php",

13 "developer-tools"

14 ],

15 "homepage": "https://togatech.com",

16 "repository": {

17 "type": "git",

18 "url": "https://github.com/agilantsolutions/claude"

19 },

20 "license": "UNLICENSED",

21 "private": false,

22 "engines": {

23 "node": ">=18"

24 },

25 "bin": {

26 "toga-ai": "scripts/install.js"

27 },

28 "scripts": {

29 "postinstall": "node scripts/install.js --post-install",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "validate": "node knowledge.js validate",

31 "index": "node knowledge.js index",

32 "sync": "node sync-skills.js"

33 },

34 "files": [

35 "agents/",

36 "rules/",

37 "skills/",

38 "contexts/",

39 "scripts/",

40 "mcp-configs/",

41 ".claude-plugin/",

42 ".claude/settings.json",

43 "knowledge/",

44 "knowledge.js",

45 "sync-skills.js",

46 "CLAUDE.md"

47 ],

48 "main": "knowledge.js",

49 "devDependencies": {}

scripts/install.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

3/**

4 * toga-ai — TOGA Technology Claude harness bootstrapper

5 *

6 * Design: the npm bundle is the PRIMARY source — it always works offline.

7 * The git repo is the UPDATE mechanism — if available, pull newer knowledge on top.

8 *

9 * 1. npm bundle (packageRoot) is always installed first — no git needed

10 * 2. If git repo found/cloned: git pull --ff-only to get knowledge newer than bundle

11 * 3. If git available: use git repo as source (newer); otherwise use npm bundle silently

rules/common/security.mdView file

Lines 42-82markdown

42JSON output is safe from XSS but must use `json_encode()` — never manually build JSON strings.

44JavaScript context requires additional escaping beyond `htmlspecialchars()`. Use `json_encode()` to pass server data to JS.

46## Password handling

48Never store passwords in plaintext.

50Never use MD5, SHA1, SHA256, or any fast hash for passwords. These are broken for password storage.

52Always use `password_hash($password, PASSWORD_BCRYPT)`

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js --post-install

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js --post-install

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

1Install-time AI-agent control hijack evidence: L11: * 3. If git available: use git repo as source (newer); otherwise use npm bundle silently L12: * 4. Install from chosen source into project .claude/ L13: * ... L111: try { L112: fs.writeFileSync(CACHE_FILE, repoDir + '\n'); L113: } catch (e) { /* non-fatal */ } ... L125: try { L126: fs.mkdirSync(defaultDir, { recursive: true }); L127: ... L167: try { L168: fs.mkdirSync(path.dirname(defaultDir), { recursive: true }); L169: const result = spawnSync('git', ['clone', REPO_URL, defaultDir], { Payload evidence from .claude/settings.json: L1: { L2: "hooks": {

Critical

Ai Agent Control Hijack

Install-time source drops package-supplied AI-agent/MCP control files or instructions.

scripts/install.jsView on unpkg · L1

rules/common/security.mdView file

62patternName = generic_password severity = medium line = 62 matchedText = error_lo...rd);

Medium

Secret Pattern

Hardcoded password in rules/common/security.md

rules/common/security.mdView on unpkg · L62

Findings

1 Critical1 High5 Medium5 Low

CriticalAi Agent Control Hijackscripts/install.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumSecret Patternrules/common/security.md

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

4 flagged

package.jsonView file

Lines 9-49json

9 "knowledge-base",

10 "skills",

11 "toga-technology",

12 "php",

13 "developer-tools"

14 ],

15 "homepage": "https://togatech.com",

16 "repository": {

17 "type": "git",

18 "url": "https://github.com/agilantsolutions/claude"

19 },

20 "license": "UNLICENSED",

21 "private": false,

22 "engines": {

23 "node": ">=18"

24 },

25 "bin": {

26 "toga-ai": "scripts/install.js"

27 },

28 "scripts": {

29 "postinstall": "node scripts/install.js --post-install",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 "validate": "node knowledge.js validate",

31 "index": "node knowledge.js index",

32 "sync": "node sync-skills.js"

33 },

34 "files": [

35 "agents/",

36 "rules/",

37 "skills/",

38 "contexts/",

39 "scripts/",

40 "mcp-configs/",

41 ".claude-plugin/",

42 ".claude/settings.json",

43 "knowledge/",

44 "knowledge.js",

45 "sync-skills.js",

46 "CLAUDE.md"

47 ],

48 "main": "knowledge.js",

49 "devDependencies": {}

scripts/install.jsView file

Lines 1-21javascript

1#!/usr/bin/env node

3/**

4 * toga-ai — TOGA Technology Claude harness bootstrapper

5 *

6 * Design: the npm bundle is the PRIMARY source — it always works offline.

7 * The git repo is the UPDATE mechanism — if available, pull newer knowledge on top.

8 *

9 * 1. npm bundle (packageRoot) is always installed first — no git needed

10 * 2. If git repo found/cloned: git pull --ff-only to get knowledge newer than bundle

11 * 3. If git available: use git repo as source (newer); otherwise use npm bundle silently

rules/common/security.mdView file

Lines 42-82markdown

42JSON output is safe from XSS but must use `json_encode()` — never manually build JSON strings.

44JavaScript context requires additional escaping beyond `htmlspecialchars()`. Use `json_encode()` to pass server data to JS.

46## Password handling

48Never store passwords in plaintext.

50Never use MD5, SHA1, SHA256, or any fast hash for passwords. These are broken for password storage.

52Always use `password_hash($password, PASSWORD_BCRYPT)`