registry / @hmharness/cli / 0.23.45
@hmharness/cli@0.23.45
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package has no npm install hooks, and the flagged network and persistence behaviors serve the documented board installer and browser-extension functions. The background bridge and watchdog are started by explicit extension commands and include a stop/removal path.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The board installer runs when explicitly invoked; the extension daemon and watchdog start from explicit extension install or start commands.
Impact
Expected package installation and browser-bridge availability; no unauthorized credential use, unrelated external contact, or harmful action was identified.
Mechanism
The board installer downloads first-party packages from registry.npmjs.org. Extension commands run a localhost bridge and can keep it alive with a removable watchdog.
AI rationale
The package has no npm install hooks, and the flagged network and persistence behaviors serve the documented board installer and browser-extension functions. The background bridge and watchdog are started by explicit extension commands and include a stop/removal path.
Evidence
BOARD_HOME/.config/apikeys.envHMH_HOME/heal-tree.cjsHMH_HOME/extension.pidHMH_HOME/extension.logHMH_HOME/extension.versionHMH_HOME/extension-watchdog.pidHMH_HOME/extension-watchdog.log<CLI directory>/extension-watchdog-task.cjs
Network endpoints2
registry.npmjs.org127.0.0.1
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares only a build script and no install lifecycle hooks.
- The extension daemon and browser setup are reached from the explicit `hmh extension install` command.
- The installer describes resolving and downloading first-party @hmharness packages from registry.npmjs.org.
- The Windows watchdog has an explicit removal path through the extension stop command.
Evidence against
- The extension install command adds a persistent browser extension and starts a background daemon.
- On Windows, the extension daemon can register a recurring scheduled watchdog task.
- The standalone board installer writes a self-heal hook into the board user's apikeys.env file.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedboard/install-kaihongos.cjsView file
35const https = require('https');
L36: const { spawnSync } = require('child_process');
L37:
High
Child Process
Package source references child process execution.
board/install-kaihongos.cjsView on unpkg · L35350log('first run: creating config skeleton at ' + HMH_HOME);
L351: const r = spawnSync(nodeBin, [path.join(NM, '@hmharness', 'cli', 'dist', 'main.js'), 'init'], {
L352: encoding: 'utf8', env: Object.assign({}, process.env, { HMH_HOME, HOME: BOARD_HOME }),
L353: });
...
L360: console.log(' 2. hmh check # verify toolchain');
L361: console.log(' 3. hmh tui # or: hmh web start → http://127.0.0.1:7788');
L362: console.log('pitfalls & details: docs/KAIHONGOS.md');
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
board/install-kaihongos.cjsView on unpkg · L350dist/web-daemon.jsView file
Findings
7 High4 Medium4 Low
HighChild Processboard/install-kaihongos.cjs
HighShelldist/web-daemon.js
HighSame File Env Network Executionboard/install-kaihongos.cjs
HighCopied Package Dependency Bridgedist/main.js
HighTrigger Reachable Persistencedist/extension-daemon.js
HighSemantic Analysis Limiteddist/extension-daemon.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/extension-daemon.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/extension-daemon.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @hmharness/cli@0.23.45.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.23.45 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.