registry / @punks/cli / 6.3.0
@punks/cli@6.3.0
Harness Intelligence scaffolding CLI
AI Security Review
scanned 13d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or concrete attack behavior. The scanner’s execution and network indicators are consistent with the CLI’s report, configuration, and tooling features.
Static reason
One or more suspicious static signals were detected.
Trigger
Direct invocation of `hi` or `hint` starts the CLI.
Impact
No confirmed attack impact.
Mechanism
The CLI includes report submission to its default Harness control plane and local lint configuration evaluation; no harmful credential transfer or payload execution was established.
AI rationale
Source inspection found no install lifecycle hook or concrete attack behavior. The scanner’s execution and network indicators are consistent with the CLI’s report, configuration, and tooling features.
Network endpoints1
api.harness-intelligence.devpunks.com
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- `package.json` exposes `hi` and `hint` through `dist/index.js`; its scripts do not define install lifecycle hooks.
- The bundle runs its CLI main only when invoked directly. Its report helper submits the supplied report to the package’s default Harness control plane.
- The bundle’s VM call evaluates transformed local lint configuration with a one second limit; the inspected code does not establish a hidden payload loader.
- The declared dependency is `react-devtools-core`; its manifest has no install scripts, its backend opens a WebSocket, and its standalone bundle contains React DevTools code.
Evidence against
- The bundle contains process, network, file, and VM APIs, but inspected uses are tied to CLI operations, report submission, and local lint configuration evaluation.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
9 flaggeddist/index.jsView file
155`)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
High
349`,()=>{resume(void_3)})})})));var makeCliPromptLayer=(promptEffect=PromptLive)=>effect(CliPrompt,gen2(function*makeLazyPrompt(){const scope3=yield*scope2;const cachedPrompt=yield*c...
L350: `);const preCommit=lines2.findIndex((line)=>line.trim()==="pre-commit:");if(preCommit===-1){return null}const preIndent=indent(lines2[preCommit]);const preCommitEnd=lines2.findInde...
L351:
High
151`)return yield*this.pushCount(1);else if(ch==="\r"&&this.charAt(1)===`
L152: `)return yield*this.pushCount(2);else return 0}*pushSpaces(allowTabs){let i=this.pos-1;let ch;do{ch=this.buffer[++i]}while(ch===" "||allowTabs&&ch==="\t");const n=i-this.pos;if(n>0...
L153: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
...
L155: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
Findings
7 High6 Medium6 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/index.js
MediumUnsafe Vm Contextdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
Affected versions and remediation
This report applies to @punks/cli@6.3.0.
See all versions of @punks/cli for other recorded verdicts.
- Review the evidence and your use of @punks/cli@6.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.