registry / @punks/cli / 5.2.2
@punks/cli@5.2.2
Harness Intelligence scaffolding CLI
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package deliberately creates AI-agent lifecycle-hook configuration in a target repository. Because it is user-invoked scaffolding and no install hook or concrete hostile behavior was found, this is a guarded extension-lifecycle risk rather than malware.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source
Trigger
A user runs hi scaffold for a repository.
Impact
The resulting project configuration can run package-generated hooks in the AI-agent workflow.
Mechanism
The scaffold output configures Claude PostToolUse hooks that execute project-local Node scripts.
AI rationale
The package deliberately creates AI-agent lifecycle-hook configuration in a target repository. Because it is user-invoked scaffolding and no install hook or concrete hostile behavior was found, this is a guarded extension-lifecycle risk rather than malware.
Evidence
dist/index.js.claude/settings.json.claude/hooks/format-edited-file.mjs
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes its executable through dist/index.js.
- The explicit hi scaffold command targets the current repository.
- Scaffolding configures Claude lifecycle hooks that run project-local commands after edit actions.
- The scaffold lifecycle writes its generated output into the selected repository.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The observed control-surface mutation is activated by the user-invoked scaffold command, not package installation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicenseWildcardDependency
Source & flagged code
20 flaggeddist/baseline/scaffold-baseline/skills/misc/timesheet/scripts/git-timesheet-evidence.mjsView file
1#!/usr/bin/env node
L2: import { execFileSync } from "node:child_process";
L3: import { existsSync, readdirSync, statSync } from "node:fs";
High
Child Process
Package source references child process execution.
dist/baseline/scaffold-baseline/skills/misc/timesheet/scripts/git-timesheet-evidence.mjsView on unpkg · L1dist/index.jsView file
1315`).some((line)=>{const command=line.trim();return command.length>0&&!command.startsWith("#")&&(/^(?:(?:command|exec)\s+)?lefthook\s+run\s+["']?pre-commit["']?(?:\s|$)/u.test(comman...
L1316: `,"utf-8");return verification};var commitGateVerifyCommandMetadata=declareCommandMetadata({examples:[{command:"hi commit-gate verify",summary:"Verify the installed Commit Gate."}]...
L1317:
High
Findings
1 Critical14 High8 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/baseline/scaffold-baseline/data/scripts/commit-gate-runner.mjs
HighChild Processdist/baseline/scaffold-baseline/skills/misc/timesheet/scripts/git-timesheet-evidence.mjs
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
HighShips High Entropy Blobdist/baseline/scaffold-baseline.tgz
HighKnown Malware Source Similaritydist/baseline/scaffold-baseline/skills/frameworks/expo/expo-skill-eval/scripts/snapshot-android.sh
Affected versions and remediation
This report applies to @punks/cli@5.2.2.
See all versions of @punks/cli for other recorded verdicts.
- Review the evidence and your use of @punks/cli@5.2.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.