registry / @punks/cli / 5.1.1
@punks/cli@5.1.1
⚠ Under reviewHarness Intelligence scaffolding CLI
AI Security Review
scanned 1mo ago · by lpm-firewall-aiReadable package metadata and entry scripts show a user-invoked scaffolding CLI without install lifecycle hooks or a concrete exfiltration chain. The required baseline archive is binary and could not be cited, so the review cannot be finalized as clean.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
npm install does not execute a lifecycle hook; the CLI starts only when a user runs hi or hint.
Impact
Readable code does not show credential theft, remote payload execution, or unconsented install-time agent mutation; the unread archive blocks a final clean citation set.
Mechanism
Inspected scripts call git or a contract shell command only from explicit user invocations, and the archive yielded no text excerpt.
AI rationale
Readable package metadata and entry scripts show a user-invoked scaffolding CLI without install lifecycle hooks or a concrete exfiltration chain. The required baseline archive is binary and could not be cited, so the review cannot be finalized as clean.
Decision evidence
public snapshotAI called this Manual Review at 62.0% confidence as Unknown with medium false-positive risk.
AI review observations
- package.json names @punks/cli 5.1.1, points bins hi and hint at dist/index.js, and its scripts block has no preinstall, install, or postinstall hook.
- git-timesheet-evidence.mjs runs git fetch and git log only when the script is invoked with explicit arguments, and it prints results locally.
- dist/index.js is a shebang CLI whose main path runs after the user starts the binary, including optional self-update checks.
- commit-gate-runner.mjs runs shell commands from a caller-supplied --contracts file during an explicit commit-gate invocation.
Evidence against
- scaffold-baseline.tgz is binary and has no searchable printable text, so the required archive citation could not be issued.
- Readable scaffold code writes harness files such as CLAUDE.md only as part of user-run scaffold or update flows, not during npm install.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
12 flaggeddist/baseline/scaffold-baseline/skills/misc/timesheet/scripts/git-timesheet-evidence.mjsView file
1#!/usr/bin/env node
L2: import { execFileSync } from "node:child_process";
L3: import { existsSync, readdirSync, statSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/baseline/scaffold-baseline/skills/misc/timesheet/scripts/git-timesheet-evidence.mjsView on unpkg · L1dist/index.jsView file
151`)return yield*this.pushCount(1);else if(ch==="\r"&&this.charAt(1)===`
L152: `)return yield*this.pushCount(2);else return 0}*pushSpaces(allowTabs){let i=this.pos-1;let ch;do{ch=this.buffer[++i]}while(ch===" "||allowTabs&&ch==="\t");const n=i-this.pos;if(n>0...
L153: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
...
L155: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
High
Findings
1 Critical8 High7 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/baseline/scaffold-baseline/data/scripts/commit-gate-runner.mjs
HighChild Processdist/baseline/scaffold-baseline/skills/misc/timesheet/scripts/git-timesheet-evidence.mjs
HighShell
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighShips High Entropy Blobdist/baseline/scaffold-baseline.tgz
MediumUnsafe Vm Contextdist/index.js
MediumNetwork
Affected versions and remediation
This report applies to @punks/cli@5.1.1.
See all versions of @punks/cli for other recorded verdicts.
- Review the evidence and your use of @punks/cli@5.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.