registry / @hmharness/cli / 0.23.46
@hmharness/cli@0.23.46
hmharness command line: one-shot tasks, an interactive REPL, a fullscreen TUI, the web frontend, and direct tool invocation.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package has no npm install hook, and the reviewed network and persistence behavior belongs to explicit board-install or extension commands. The inspected source does not show an unrelated or concealed attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The board installer must be run directly; the extension daemon and watchdog are started through extension commands.
Impact
These actions support the documented CLI, board deployment, and browser-extension functions; the inspected code does not show unrelated credential collection, exfiltration, or hidden startup behavior.
Mechanism
The board installer fetches first-party packages from the npm registry and writes launch and repair files. Extension commands can start a local bridge and, on Windows, register a recurring watchdog.
AI rationale
The package has no npm install hook, and the reviewed network and persistence behavior belongs to explicit board-install or extension commands. The inspected source does not show an unrelated or concealed attack.
Evidence
<BOARD_HOME>/.local/bin/hmh/usr/local/bin/hmh/system/bin/hmh<BOARD_HOME>/.config/apikeys.env<HMH_HOME>/heal-tree.cjs<HMH_HOME>/extension-watchdog-task.cjs
Network endpoints2
registry.npmjs.org127.0.0.1
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares only a build script and no npm install lifecycle hook.
- The board installer is documented as a command the user runs explicitly; its registry access fetches the package set for that installation.
- The installer adds its self-healing script and launcher hook only when that installer runs.
- The extension watchdog and scheduled task are started by explicit extension commands and can be removed with the stop command.
- Board defaults preserve an explicit web.tunnel setting.
Evidence against
- The board installer writes launchers and a startup repair hook outside the package directory.
- On Windows, explicitly starting or installing the browser extension can register a recurring scheduled watchdog.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
9 flaggedboard/install-kaihongos.cjsView file
38const https = require('https');
L39: const { spawnSync } = require('child_process');
L40: // board config defaults live in a shared module that ships in
High
Child Process
Package source references child process execution.
board/install-kaihongos.cjsView on unpkg · L38dist/web-daemon.jsView file
79try {
L80: const out = execSync(`powershell -NoProfile -Command "(Get-CimInstance Win32_Process -Filter 'ProcessId=${pid}').CommandLine"`, { encoding: 'utf8', timeout: 8000 });
L81: const cmd = out.trim();
High
board/board-defaults.cjsView file
Findings
7 High5 Medium4 Low
HighChild Processboard/install-kaihongos.cjs
HighShelldist/web-daemon.js
HighSame File Env Network Executionboard/heal-tree.cjs
HighCopied Package Dependency Bridgedist/main.js
HighTrigger Reachable Persistencedist/extension-daemon.js
HighSemantic Analysis Limiteddist/extension-daemon.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/extension-daemon.js
MediumDynamic Requireboard/board-defaults.cjs
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencedist/extension-daemon.js
MediumStructural Risk Force Deep Review
Low
Affected versions and remediation
This report applies to @hmharness/cli@0.23.46.
See all versions of @hmharness/cli for other recorded verdicts.
- Review the evidence and your use of @hmharness/cli@0.23.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.