registry / @hmharness/cli / 0.22.0
@hmharness/cli@0.22.0
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe reviewed execution and network behavior is tied to CLI functionality and the package’s own update mechanism, with no install hook or concrete attack behavior established. The scanner’s high-risk signals do not, by themselves, show malicious conduct.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The update path runs when a user starts the TUI; the task runner is invoked through the ablation functionality.
Impact
A newer CLI release may replace the global installation after the user starts the TUI; the inspected code does not establish unrelated code execution or data exposure.
Mechanism
The TUI checks the npm registry and can launch npm to install a newer global release of this CLI. The ablation helper launches fixed tasks through npx.
AI rationale
The reviewed execution and network behavior is tied to CLI functionality and the package’s own update mechanism, with no install hook or concrete attack behavior established. The scanner’s high-risk signals do not, by themselves, show malicious conduct.
Evidence
package.jsondist/ablate-task.jsdist/main.jsdist/tui.jsdist/update-check.js
Network endpoints1
registry.npmjs.org/-/package/@hmharness/cli/dist-tags
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook; its only script is a build command, and its dependencies are first-party @hmharness packages.
- The ablation helper launches a fixed task through npx from a hard-coded project directory; this is command execution tied to that helper’s task runs.
- The REPL checks for updates when invoked, and the TUI can start a detached global install of a newer @hmharness/cli version by default; the user can disable this in configuration.
- The update check fetches the latest dist-tag from the npm registry, and the installer targets @hmharness/cli from that registry.
Evidence against
- The package exposes a CLI and has no install-time lifecycle script that runs on consumer installation.
- The update endpoint and install target are the package’s own npm registry package; no unrelated recipient or payload endpoint was identified.
- No credential collection, exfiltration, destructive action, or foreign agent-control-surface mutation was identified in the inspected paths.
Behavioral surface
ChildProcess
Source & flagged code
5 flaggeddist/ablate-task.jsView file
14*/
L15: import { spawn } from 'node:child_process';
L16: import { appendFile, mkdir } from 'node:fs/promises';
High
Child Process
Package source references child process execution.
dist/ablate-task.jsView on unpkg · L1450cwd: 'G:/hmharness',
L51: shell: true,
L52: env: { ...process.env, ...(bare ? { HMH_NO_COGNITIVE: '1' } : {}) },
High
48return new Promise((resolve) => {
L49: const child = spawn('npx', ['tsx', 'packages/cli/src/main.ts', '--yes', task], {
L50: cwd: 'G:/hmharness',
High
Runtime Package Install
Package source invokes a package manager install command at runtime.
dist/ablate-task.jsView on unpkg · L48dist/main.jsView file
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/tui.js
HighChild Processdist/ablate-task.js
HighShelldist/ablate-task.js
HighCopied Package Dependency Bridgedist/main.js
HighRuntime Package Installdist/ablate-task.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @hmharness/cli@0.22.0.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.22.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.