registry / @hmharness/cli / 0.19.6
@hmharness/cli@0.19.6
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected entrypoints implement user-invoked CLI/TUI behavior. The local pairing request and explicit clipboard command do not establish a concrete attack surface.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user launches the CLI or TUI; the pairing request occurs when that TUI flow is used, and clipboard access requires the /copy command.
Impact
The inspected behavior does not establish remote data exfiltration or unconsented install-time activity.
Mechanism
The TUI contacts its local web daemon at 127.0.0.1 for pairing information and can send the last AI output to a clipboard utility after explicit user invocation.
AI rationale
The manifest has no install lifecycle hook, and the inspected entrypoints implement user-invoked CLI/TUI behavior. The local pairing request and explicit clipboard command do not establish a concrete attack surface.
Network endpoints1
127.0.0.1:${DEFAULT_WEB_PORT}/api/pair-info
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only a build script and lists same-version @hmharness packages as dependencies; no install lifecycle hook is present.
- dist/main.js is a CLI entrypoint for user-invoked commands and interactive use.
- dist/tui.js starts the local web daemon and requests pairing information from 127.0.0.1; its clipboard action is explicitly invoked with /copy.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/main.jsView file
33package = @hmharness/cli; repositoryIdentity = hmharness; dependency = @hmharness/agent
L33: import { harmonyTools } from '@hmharness/domain-harmony';
L34: import { baseTools, buildRegistry, buildSystemPrompt, runAgentTask, strings } from '@hmharness/agent';
L35: const DIM = (s) => `\x1b[2m${s}\x1b[0m`;
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/main.jsView on unpkg · L331#!/usr/bin/env node
/**
* @hmharness/cli - main (terminal frontend)
* Usage:
* hmh init create HMH_HOME skeleton + config
* hmh "do something" one-shot task (full agent loop, streaming)
* hmh interactive REPL (conversation memory kept)
* hmh resume [id-prefix|--last] continue a past session (bare: codex-style picker)
*
Low
Ai Review Evidence
dist/main.js is a CLI entrypoint for user-invoked commands and interactive use.
dist/main.jsView on unpkg · L1dist/tui.jsView file
Findings
2 High3 Medium7 Low
HighCopied Package Dependency Bridgedist/main.js
HighPrevious Version Dangerous Deltadist/tui.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/main.js
LowAi Review Evidencedist/tui.js
Affected versions and remediation
This report applies to @hmharness/cli@0.19.6.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.19.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.