ruvnet/ruflo · error

[SECURITY] Plugin loaded without sandboxing: ${packageName}.

Error message

[SECURITY] Plugin loaded without sandboxing: ${packageName}. Plugins run with full process access.

What it means

Security warning (HIGH-04) in enable: the plugin about to be enabled was loaded without sandboxing, meaning it will run with full process access; enabling still proceeds but the risk is surfaced to the operator.

Source

Thrown at v3/@claude-flow/cli/src/plugins/manager.ts:341

  // =========================================================================
  // Enable/Disable
  // =========================================================================

  /**
   * Enable a plugin
   */
  async enable(packageName: string): Promise<{ success: boolean; error?: string }> {
    if (!this.manifest) {
      await this.initialize();
    }

    const plugin = this.manifest!.plugins[packageName];
    if (!plugin) {
      return { success: false, error: `Plugin ${packageName} is not installed` };
    }

    // HIGH-04: Warn about unsandboxed plugin execution
    console.warn(`[SECURITY] Plugin loaded without sandboxing: ${packageName}. Plugins run with full process access.`);

    plugin.enabled = true;
    await this.saveManifest();

    return { success: true };
  }

  /**
   * Disable a plugin
   */
  async disable(packageName: string): Promise<{ success: boolean; error?: string }> {
    if (!this.manifest) {
      await this.initialize();
    }

    const plugin = this.manifest!.plugins[packageName];
    if (!plugin) {
      return { success: false, error: `Plugin ${packageName} is not installed` };

View on GitHub (pinned to fa13ee4ad6)

Solutions

1. Only load trusted plugins, or run the process in a sandboxed environment; unsandboxed plugins have full process access.

When it happens

Trigger: Thrown at v3/@claude-flow/cli/src/plugins/manager.ts:341 when the library encounters an invalid state.

Common situations: See trigger scenarios.

AI-assisted analysis of ruvnet/ruflo@fa13ee4ad6 (2026-08-18). Data as JSON: /api/errors/09bff3f725a7fb33. Report an issue: GitHub.