registry / @hmharness/agent / 0.19.6

@hmharness/agent@0.19.6

⚠ Under review

hmharness agent execution layer: base tools, system prompt, sub-agent spawn, and the shared task runner that frontends (cli, web) drive.

Static Scan Results

scanned 10d ago · by rust-scanner

Static analysis completed at 97.0% confidence. No malicious behavior was detected; 10 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 16 file(s), 146 KB of source, external domains: 127.0.0.1, html.duckduckgo.com

Source & flagged code

3 flagged

dist/pipeline.jsView file

Lines 96-136javascript

96 const rec = {

97 stage,

98 attempt,

99 verdict: stage === 'judge' ? parseVerdict(r.text) : 'n/a',

100 text: r.text.slice(0, 4000),

101 turns: r.turns,

102 toolUses: r.toolUses,

103 reason: r.reason,

104 };

105 stages.push(rec);

106 try {

107 await writeFile(join(dir, `stage-${String(stages.length).padStart(2, '0')}-${stage}.json`), JSON.stringify(rec, null, 2) + '

108 }

109 catch { /* best-effort persistence */ }

110 return rec;

111 };

112 /** Device gate: run the four-step on-device pass, record it as a 'device'

113 * stage (no model turns spent), and mirror it into the repair context.

114 * Defined BEFORE the try block - the try body calls it (TDZ otherwise). */

115 const runDeviceGate = async () => {

116 const g = opts.deviceGate;

117 const runner = g.runDeviceTestImpl ?? (await import('@hmharness/domain-harmony')).runDeviceTest;

118 let steps;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/pipeline.jsView on unpkg · L116

119 try {

120 steps = await runner({ hdc: g.hdc, ...(g.target ? { target: g.target } : {}), hap: g.hap, bundle: g.bundle, ability: g.ability, expectLog: g.expectLog });

121 }

122 catch (err) {

123 steps = [{ step: 'device-gate', pass: false, detail: String(err).slice(0, 300) }];

124 }

125 const allPass = steps.every((s) => s.pass);

126 const rec = {

127 stage: 'device',

128 attempt: repairs + 1,

129 verdict: allPass ? 'PASS' : 'FAIL',

130 text: steps.map((s) => `${s.pass ? 'PASS' : 'FAIL'} ${s.step}: ${s.detail}`).join('\n').slice(

131 turns: 0,

132 toolUses: 0,

133 reason: 'final',

134 };

135 stages.push(rec);

136 try {

dist/tools.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 1

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/tools.js#virtual:normalized:round1View on unpkg

dist/project.jsView file

•matchType = normalized_sha256 matchedPackage = @hmharness/agent@0.12.1 matchedPath = dist/project.js matchedIdentity = npm:QGhtaGFybmVzcy9hZ2VudA:0.12.1 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

dist/project.jsView on unpkg

Source & flagged code

3 flagged · loading source

dist/pipeline.jsView file

@hmharness/agent@0.19.6

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code