registry / @castlemilk/omega / 0.6.0

@castlemilk/omega@0.6.0

Omega Harness CLI - installable via npx

AI Security Review

scanned 3d ago · by lpm-firewall-ai

No confirmed malicious attack surface is established by the inspected package source. The package is a CLI/web harness that talks to local services and has explicit user-invoked agent/skill features.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs harness/omega-harness commands such as ui, task, agent, or skill generate.

Impact

No unconsented install-time/import-time execution or exfiltration identified.

Mechanism

local harness orchestration with optional user-invoked agent task creation

Rationale

Scanner hits map to package-aligned local server, CLI, and explicit agent/skill functionality rather than hidden install-time behavior or exfiltration. The agent capability is user-invoked and partly unresolved because @omega/agent source is not packaged, so it does not support a malicious block for this package source.

Evidence

package.jsondist/cli.jsdist/server/src/lib/run-task.tsdist/server/src/routes/tasks.tsdist/server/src/grpc.tsdist/server/dist/lib/run-task.jsdist/cli.js writes generated skill adapter files only when skill generate is invoked

Network endpoints3

localhost:4000localhost:500510.0.0.0:50051

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

dist/cli.js exposes user-invoked agent commands that create/run harness tasks tagged agent/self-improve.
dist/server/src/lib/run-task.ts delegates agent-tagged tasks to @omega/agent, but that package source is not included here.

Evidence against

package.json has only prepublishOnly; no install/postinstall/prepare runtime hook for consumers.
dist/cli.js network defaults are localhost HTTP/gRPC endpoints, with user-configurable HARNESS_API_URL/HARNESS_GRPC_TARGET.
dist/cli.js child_process spawn is in the ui command to start the bundled local server or dev server.
dist/cli.js file writes occur only in the explicit skill generate command to create adapter files.
No credential harvesting, home-directory scanning, persistence, destructive behavior, or external exfiltration endpoints found.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 38 file(s), 560 KB of source, external domains: reactjs.org, www.w3.org

Source & flagged code

4 flagged

dist/cli.jsView file

Lines 408-448javascript

408 title: opts.title,

409 description: opts.description,

410 complexity: opts.complexity,

411 tags: opts.tags ? opts.tags.split(",").map((t) => t.trim()) : []

412 })

413 });

414 console.log(JSON.stringify(task, null, 2));

415});

416taskCmd.command("list").description("List tasks").option("--project <id>", "filter by project id").action(async (opts) => {

417 const query = opts.project ? `?projectId=${opts.project}` : "";

418 const tasks = await apiFetch(`/tasks${query}`);

419 console.log(JSON.stringify(tasks, null, 2));

420});

421taskCmd.command("run").description("Run a task through the router").argument("<id>", "task id").action(async (id) => {

422 const result = await apiFetch(`/tasks/${id}/run`, { method: "POST" });

423 console.log(JSON.stringify(result, null, 2));

424});

425taskCmd.addCommand(taskFeedCmd);

426

427// ../../apps/cli/src/commands/ui.ts

428import { Command as Command4 } from "commander";

429import { spawn } from "child_process";

430import { existsSync as existsSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L428

431import net from "net";

432import path2 from "path";

433import { fileURLToPath as fileURLToPath2 } from "url";

434import open from "open";

435import { render } from "ink";

436import React2 from "react";

437var __filename2 = fileURLToPath2(import.meta.url);

438var __dirname2 = path2.dirname(__filename2);

439var DEFAULT_PORT = 4e3;

440var MAX_PORT = 4010;

441var DEFAULT_GRPC_PORT = 50051;

442var MAX_GRPC_PORT = 50061;

443function findAvailablePort(preferred = DEFAULT_PORT, max = MAX_PORT) {

444 return new Promise((resolve, reject) => {

445 if (preferred > max) {

446 reject(new Error(`No available ports between ${DEFAULT_PORT.toString()} and ${max.toString()}`));

447 return;

448 }

Lines 507-557javascript

507 headers: { "Content-Type": "application/json" },

508 body: JSON.stringify({ name, path: cwd })

509 });

510 if (createRes.ok) {

511 console.log(`Added project: ${name}`);

512 } else {

513 console.warn("Could not auto-add project:"

•matchType = previous_version_dangerous_delta matchedPackage = @castlemilk/omega@0.1.9 matchedIdentity = npm:QGNhc3RsZW1pbGsvb21lZ2E:0.1.9 similarity = 0.556 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/cli.jsView on unpkg

Source & flagged code

4 flagged · loading source

dist/cli.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/cli.jsView on unpkg

428import { Command as Command4 } from "commander"; L429: import { spawn } from "child_process"; L430: import { existsSync as existsSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L428

537stdio: "inherit", L538: shell: true, L539: env

High

Shell

Package source references shell execution.

dist/cli.jsView on unpkg · L537

527const grpcPort = await findAvailablePort(DEFAULT_GRPC_PORT, MAX_GRPC_PORT); L528: apiUrl = `http://localhost:${port.toString()}`; L529: process.env.HARNESS_API_URL = apiUrl; L530: const env = { ... L535: }; L536: server = startBundledServer(env) ?? spawn("pnpm", ["--filter", "@omega/server", "dev"], { L537: stdio: "inherit",

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/cli.jsView on unpkg · L527

Findings

1 Critical3 High3 Medium5 Low

CriticalPrevious Version Dangerous Deltadist/cli.js

HighChild Processdist/cli.js

HighShelldist/cli.js

HighSame File Env Network Executiondist/cli.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

4 flagged

dist/cli.jsView file

Lines 408-448javascript

408 title: opts.title,

409 description: opts.description,

410 complexity: opts.complexity,

411 tags: opts.tags ? opts.tags.split(",").map((t) => t.trim()) : []

412 })

413 });

414 console.log(JSON.stringify(task, null, 2));

415});

416taskCmd.command("list").description("List tasks").option("--project <id>", "filter by project id").action(async (opts) => {

417 const query = opts.project ? `?projectId=${opts.project}` : "";

418 const tasks = await apiFetch(`/tasks${query}`);

419 console.log(JSON.stringify(tasks, null, 2));

420});

421taskCmd.command("run").description("Run a task through the router").argument("<id>", "task id").action(async (id) => {

422 const result = await apiFetch(`/tasks/${id}/run`, { method: "POST" });

423 console.log(JSON.stringify(result, null, 2));

424});

425taskCmd.addCommand(taskFeedCmd);

426

427// ../../apps/cli/src/commands/ui.ts

428import { Command as Command4 } from "commander";

429import { spawn } from "child_process";

430import { existsSync as existsSync2 } from "fs";

High

Child Process

Package source references child process execution.

dist/cli.jsView on unpkg · L428

431import net from "net";

432import path2 from "path";

433import { fileURLToPath as fileURLToPath2 } from "url";

434import open from "open";

435import { render } from "ink";

436import React2 from "react";

437var __filename2 = fileURLToPath2(import.meta.url);

438var __dirname2 = path2.dirname(__filename2);

439var DEFAULT_PORT = 4e3;

440var MAX_PORT = 4010;

441var DEFAULT_GRPC_PORT = 50051;

442var MAX_GRPC_PORT = 50061;

443function findAvailablePort(preferred = DEFAULT_PORT, max = MAX_PORT) {

444 return new Promise((resolve, reject) => {

445 if (preferred > max) {

446 reject(new Error(`No available ports between ${DEFAULT_PORT.toString()} and ${max.toString()}`));

447 return;

448 }

Lines 507-557javascript

507 headers: { "Content-Type": "application/json" },

508 body: JSON.stringify({ name, path: cwd })

509 });

510 if (createRes.ok) {

511 console.log(`Added project: ${name}`);

512 } else {

513 console.warn("Could not auto-add project:"

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

dist/cli.jsView on unpkg