registry / @hold-rein/cli / 0.0.8

@hold-rein/cli@0.0.8

Hold Rein 的命令行入口包，发布 `hold-rein` 和 `hr` 两个命令，用来启动本地服务以及管理插件包。

AI Security Review

scanned 11d ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a local AI/agent CLI with user-invoked service startup, plugin/skill management, and workspace shell capability aligned with its stated product behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs hold-rein/hr commands or interacts with the local API after starting the service.

Impact

Can write package-owned ~/.hold-rein state and run workspace shell commands through the agent workflow, but no install-time execution, stealth persistence, credential harvesting, or exfiltration was found.

Mechanism

Explicit local agent runtime and plugin/skill management

Rationale

Static inspection found powerful but package-aligned local agent, plugin, and skill features activated by explicit user commands/API use, with no npm lifecycle hook or unconsented foreign AI-agent control-surface mutation. Network and shell primitives are tied to user-selected plugin/skill installs or agent workflows rather than hidden exfiltration or remote payload execution.

Evidence

package.jsondist/cli.jsdist/index.jsdist/runtime/api/runtime.jsdist/runtime/api/config/env.jsdist/runtime/api/modules/agents/shell-exec-tool.jsdist/runtime/api/modules/agents/approval/tool-approval.jsdist/runtime/api/modules/skills/skills-service.jsdist/runtime/api/modules/plugins/plugins-service.js~/.hold-rein/.env

@hold-rein/cli@0.0.8

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code