registry / @hmharness/cli / 0.21.3
@hmharness/cli@0.21.3
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the flagged subprocess behavior is associated with user-invoked CLI features. The inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the ablation command or TUI diff action.
Impact
These operations can execute a benchmark task or display local Git information; no concrete malicious effect was established.
Mechanism
The ablation command starts npx with a fixed task and project path; the TUI runs Git queries against the current worktree.
AI rationale
The package has no install lifecycle hook, and the flagged subprocess behavior is associated with user-invoked CLI features. The inspected source does not establish malicious behavior.
Evidence
cognitive/ablation.jsonl
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only a build script and no install lifecycle hook.
- The ablation helper launches a fixed npx/tsx task in a hard-coded project directory when invoked by the CLI; this is a user-triggered benchmarking feature.
- The TUI’s process execution reads Git status and diffs from the current worktree.
Evidence against
- No automatic install-time execution is declared in package.json.
- The inspected subprocess behavior is tied to explicit CLI functionality; no credential harvesting, exfiltration, or unrelated persistence was identified.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/ablate-task.jsView file
14*/
L15: import { spawn } from 'node:child_process';
L16: import { appendFile, mkdir } from 'node:fs/promises';
High
Child Process
Package source references child process execution.
dist/ablate-task.jsView on unpkg · L1442cwd: 'G:/hmharness',
L43: shell: true,
L44: env: { ...process.env, ...(bare ? { HMH_NO_COGNITIVE: '1' } : {}) },
High
40return new Promise((resolve) => {
L41: const child = spawn('npx', ['tsx', 'packages/cli/src/main.ts', '--yes', task], {
L42: cwd: 'G:/hmharness',
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/ablate-task.jsView on unpkg · L40dist/main.jsView file
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/tui.js
HighChild Processdist/ablate-task.js
HighShelldist/ablate-task.js
HighCopied Package Dependency Bridgedist/main.js
HighRuntime Package Installdist/ablate-task.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hmharness/cli@0.21.3.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.21.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.