registry / @hmharness/cli / 0.18.8
@hmharness/cli@0.18.8
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected network and update behavior is package-aligned: registry checks and optional automatic installation of this CLI's own release. The scanner's structural and wildcard-dependency signals do not establish a concrete attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Interactive REPL startup checks for updates; TUI startup can install a newer CLI release. Web daemon behavior activates when the user starts or uses the web interface.
Impact
The inspected behaviors check for or install this package's own update and manage its local web daemon; no concrete malicious effect was established.
Mechanism
The update checker reads the CLI version from the registry and the TUI can run npm install for @hmharness/cli. The daemon helper probes a local API and launches the CLI entrypoint.
AI rationale
The manifest has no install lifecycle hook, and the inspected network and update behavior is package-aligned: registry checks and optional automatic installation of this CLI's own release. The scanner's structural and wildcard-dependency signals do not establish a concrete attack.
Evidence
package.jsondist/main.jsdist/web-daemon.jsdist/tui.jsdist/update-check.js
Network endpoints3
registry.npmjs.org/-/package/@hmharness/cli/dist-tagsregistry.npmjs.org/127.0.0.1:<port>/api/state
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install lifecycle hook and depends on related @hmharness packages.
- The interactive REPL makes a registry version check and displays an update reminder.
- The web daemon probes only the local 127.0.0.1 endpoint and starts the CLI entrypoint as a child process.
- The TUI auto-update installs a newer release of this same CLI from the npm registry; setting tui.autoUpdate to false switches to a reminder.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
4 flaggeddist/main.jsView file
31package = @hmharness/cli; repositoryIdentity = hmharness; dependency = @hmharness/agent
L31: import { harmonyTools } from '@hmharness/domain-harmony';
L32: import { baseTools, buildRegistry, buildSystemPrompt, runAgentTask, strings } from '@hmharness/agent';
L33: const DIM = (s) => `\x1b[2m${s}\x1b[0m`;
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/main.jsView on unpkg · L31115// npm is pull-based; the update reminder is a cached (1/day) registry
// check printed when resolved - never blocks, never nags offline
const { notifyUpdate } = await
Low
Ai Review Evidence
The interactive REPL makes a registry version check and displays an update reminder.
dist/main.jsView on unpkg · L115dist/web-daemon.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @hmharness/cli@0.14.24
matchedIdentity = npm:QGhtaGFybmVzcy9jbGk:0.14.24
similarity = 0.556
summary = stored previous version shares package body but lacks this dangerous source file
Findings
2 High4 Medium6 Low
HighCopied Package Dependency Bridgedist/main.js
HighPrevious Version Dangerous Deltadist/web-daemon.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/main.js
Affected versions and remediation
This report applies to @hmharness/cli@0.18.8.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.18.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.