claude-dbBLOCK

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

npm install -g claude-db
cd your-project
claude-db install --project

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: catchup
description: Answer "where did I stop?" for this project. Gives three short groups, done, open and next, taken from the last chat, the recorded to-dos, the last handoff note and git. Use when the user comes back to a project, starts a new chat, or asks where they left off. It writes nothing.
---

# Where did I stop?

Run this from the project root:

```bash
claude-db catchup
```

It prints what memory and git know about this project, in plain text. Some parts may be missing. A part
with nothing in it is left out.

- `Last handoff` is a note the user or a teammate saved on purpose. Trust it most, unless its heading says
  `older than the last chat`. Then the last chat is newer, and wins where they differ.
- `Not finished yet in another chat` is a request another chat is still working on, or that was stopped.
  Say so under **Open**.
- `Last chat` and `Chat before` are the other chats with the newest recorded requests, open or ended, newest
  first: the 5 newest requests in all.
- `Still to do` are to-dos found in earlier chats.
- `Not committed yet` is recorded work that no commit has covered.
- `Decisions and dead ends` are what was chosen or ruled out, with the reason.
- `Branch` says which branch you are on and how many files are uncommitted.
- `Git status` and `Recent commits` are the live state of the repository.

If the output is `Nothing recorded for this project yet.`, say exactly that and stop.

## Answer in three groups

Reply with these three groups and nothing else. Keep each to a few short lines in plain words.

**Done**: what is finished. Take it from the last chat, the recent commits and the handoff's `Done` line.

**Open**: what is started but not finished. Take it from `Not committed yet`, `Git status`, the to-dos and the
handoff's `Open` line.

**Next**: what to do first. Take it from the handoff's `Next` line, then from the to-dos.

## Rules

- Use only what the output shows. Do not read other files or search memory unless the user asks.
- Mark anything you are unsure of with `(guess)`. Never state a guess as a fact.
- If there is no clear next step, write `No clear next step found.` Do not invent one.
- Say how old the information is. Use the dates in the output, for example `Last chat (Oct 6)`.
- Do not save anything. Do not run any command that changes the repository.

_Shipped with claude-db. It is replaced when claude-db updates._

BLOCKgrade F · trust 55/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (6 observation(s))

Network

declared (6 observation(s))

Shell

declared (5 observation(s))

Dependencies

not all pinned

Secrets in source

found

Findings (25)

rules('key sk-ant-api03-abcdefghijklmnopqrstuvwx').length === 0,

prompt(secret, 'order feed drops after a minute, my key is sk-ant-api03-abcdefghijklmnopqrstuvwx');

'https://x-access-token:[email protected]/acme/shop.git';

'https://x-access-token:[email protected]/acme/shop.git',

origin: 'https://x-access-token:[email protected]/acme/shop.git',

'-----BEGIN RSA PRIVATE KEY-----\nMIIEowIBAAKCAQEA\n-----END RSA PRIVATE KEY-----',

rules('-----BEGIN PRIVATE KEY-----\nabc\n-----END PRIVATE KEY-----').length === 0,

check('slack tokens are redacted', !secrets[0].body.includes('xoxb-1234567890'));

payload.ts

text: 'The staging database is postgres://admin:[email protected]:5432/app',

prompt: 'cdb use "mongodb+srv://avnadmin:[email protected]/db"',

['mongodb+srv://u:[email protected]/recall', 'mongodb'],

['postgres://u:p@localhost:5432/recall', 'postgres'],

console.log(`(tokens approximated at ${CHARS_PER_TOKEN} chars/token)`);

console.log(`(tokens approximated at ${CHARS_PER_TOKEN} chars/token)\n`);

const url = `http://127.0.0.1:${port}`;

run: node scripts/smoke.mjs "postgres://postgres:postgres@localhost:5432/postgres"

';var apiKey = "sk-abcdefghijklmnopqrstuvwxyz012345";';

.c8rc.json

.prettierignore

.prettierrc.json

createHash('sha1')

import { silenceSqliteWarning } from '../../dist/util/warnings.js';

import { scanRepository } from '../../dist/graph/scan/index.js';

import { refreshGraph } from '../../dist/graph/query/refresh.js';

Gates applied: critical_finding, no_behavioural_pass.