registry / @hmharness/cli / 0.23.3
@hmharness/cli@0.23.3
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 27d ago · by lpm-firewall-aiInspected the manifest, executable entrypoint, flagged TUI source, and referenced update helper. Their lifecycle, registry-check, and explicit pairing behaviors provide no concrete attack surface.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The version check runs in the interactive REPL; pairing runs when the user enters /remote, /remote lan, or /remote wan.
Impact
These behaviors support update notices and remote pairing; the inspected source does not establish malicious activity.
Mechanism
The updater requests package version metadata from registry.npmjs.org. The pairing flow contacts the local web daemon and displays a pairing QR code.
AI rationale
Inspected the manifest, executable entrypoint, flagged TUI source, and referenced update helper. Their lifecycle, registry-check, and explicit pairing behaviors provide no concrete attack surface.
Evidence
package.jsondist/main.jsdist/tui.jsdist/update-check.js
Network endpoints2
registry.npmjs.org/-/package/@hmharness/cli/dist-tags127.0.0.1:<DEFAULT_WEB_PORT>/api/pair-info
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines only a build script and lists matching @hmharness dependencies; it has no install lifecycle hook.
- dist/main.js runs an update reminder in the interactive REPL.
- dist/update-check.js fetches npm dist-tags from the package’s registry and caches the result under the user home directory.
- dist/tui.js performs the remote pairing flow only after the user enters a /remote command; it contacts the local web daemon.
Evidence against
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/main.jsView file
33package = @hmharness/cli; repositoryIdentity = hmharness; dependency = @hmharness/agent
L33: import { harmonyTools } from '@hmharness/domain-harmony';
L34: import { baseTools, buildRegistry, buildSystemPrompt, runAgentTask, strings } from '@hmharness/agent';
L35: const DIM = (s) => `\x1b[2m${s}\x1b[0m`;
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/main.jsView on unpkg · L33117// npm is pull-based; the update reminder is a cached (1/day) registry
// check printed when resolved - never blocks, never nags offline
const { notifyUpdate } = await import("./update-check.js");
const { createReq
Low
Ai Review Evidence
dist/main.js runs an update reminder in the interactive REPL.
dist/main.jsView on unpkg · L117dist/tui.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @hmharness/cli@0.15.0
matchedIdentity = npm:QGhtaGFybmVzcy9jbGk:0.15.0
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Findings
2 High3 Medium7 Low
HighCopied Package Dependency Bridgedist/main.js
HighPrevious Version Dangerous Deltadist/tui.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/main.js
LowAi Review Evidencedist/update-check.js
Affected versions and remediation
This report applies to @hmharness/cli@0.23.3.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.23.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.