registry / @punks/cli / 6.5.0
@punks/cli@6.5.0
Harness Intelligence scaffolding CLI
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package exposes a CLI without install lifecycle hooks, and the high-severity scanner signals were not confirmed by source inspection. The inspected report and React DevTools code fit the package's CLI and dependency behavior; no concrete attack chain was established.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the hi or hint CLI; report submission is an explicit CLI operation.
Impact
No confirmed attack impact or attack surface was established.
Mechanism
The inspected sources do not establish covert credential forwarding, hidden payload execution, or unconsented installation-time mutation.
AI rationale
The package exposes a CLI without install lifecycle hooks, and the high-severity scanner signals were not confirmed by source inspection. The inspected report and React DevTools code fit the package's CLI and dependency behavior; no concrete attack chain was established.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the hi and hint commands through dist/index.js.
- The inspected dist/index.js report code builds a user-supplied Harness report; no credential transfer was established.
- The bundled dependency manifest identifies react-devtools-core 6.1.5, and its backend and standalone bundles contain React DevTools parsing features.
- The dependency parser fetches source files by URL; the inspected code does not establish credential collection or an unrelated recipient.
- The worker bundle contains code-frame utilities, consistent with the inspected source-processing functionality.
Evidence against
- The package manifest has no install lifecycle hook; its executable entrypoints are normal CLI commands.
- Searches of dist/index.js found no provider API-key names, gateway references, or concealed eval-based payload loader; the process and network matches occur in CLI functionality and bundled tooling.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
9 flaggeddist/index.jsView file
155`)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
High
351`,()=>{resume(void_3)})})})));var makeCliPromptLayer=(promptEffect=PromptLive)=>effect(CliPrompt,gen2(function*makeLazyPrompt(){const scope3=yield*scope2;const cachedPrompt=yield*c...
L352: `);const preCommit=lines2.findIndex((line)=>line.trim()==="pre-commit:");if(preCommit===-1){return null}const preIndent=indent(lines2[preCommit]);const preCommitEnd=lines2.findInde...
L353:
High
151`)return yield*this.pushCount(1);else if(ch==="\r"&&this.charAt(1)===`
L152: `)return yield*this.pushCount(2);else return 0}*pushSpaces(allowTabs){let i=this.pos-1;let ch;do{ch=this.buffer[++i]}while(ch===" "||allowTabs&&ch==="\t");const n=i-this.pos;if(n>0...
L153: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
...
L155: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
Findings
7 High6 Medium6 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/index.js
MediumUnsafe Vm Contextdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
Affected versions and remediation
This report applies to @punks/cli@6.5.0.
See all versions of @punks/cli for other recorded verdicts.
- Review the evidence and your use of @punks/cli@6.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.