registry / @punks/cli / 6.7.0
@punks/cli@6.7.0
Harness Intelligence scaffolding CLI
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install hook, and the flagged subprocess functionality is part of CLI tool management. The reviewed source did not establish automatic credential exfiltration, concealed unrelated execution, or another concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when a user invokes hi or hint; report telemetry is tied to an explicit report submission.
Impact
No malicious impact was identified from the reviewed source.
Mechanism
The CLI can launch tools and contact its configured control plane or GitHub for package functions. No automatic credential forwarding or unrelated payload execution was established.
AI rationale
The manifest has no install hook, and the flagged subprocess functionality is part of CLI tool management. The reviewed source did not establish automatic credential exfiltration, concealed unrelated execution, or another concrete attack.
Evidence
.devpunks/settings.json.devpunks/installed.json.agents/subagents/manifest.mjs
Network endpoints2
api.harness-intelligence.devpunks.comgithub.com
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes hi and hint as CLI commands and declares no install lifecycle hook.
- The process helper uses spawnSync with an argument array, cwd, and a controlled environment.
- The configured registry and control-plane host is api.harness-intelligence.devpunks.com, matching the package publisher's service.
- Product telemetry is associated with a harness report submission, an explicit CLI operation.
Evidence against
- The CLI includes subprocess execution, environment access, and a VM context used while evaluating lint configuration.
- The package contacts its control-plane host and GitHub for registry and skills-related functions.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
9 flaggeddist/index.jsView file
155`)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
High
367`,()=>{resume(void_3)})})})));var makeCliPromptLayer=(promptEffect=PromptLive)=>effect(CliPrompt,gen2(function*makeLazyPrompt(){const scope3=yield*scope2;const cachedPrompt=yield*c...
L368: `);const preCommit=lines2.findIndex((line)=>line.trim()==="pre-commit:");if(preCommit===-1){return null}const preIndent=indent(lines2[preCommit]);const preCommitEnd=lines2.findInde...
L369:
High
151`)return yield*this.pushCount(1);else if(ch==="\r"&&this.charAt(1)===`
L152: `)return yield*this.pushCount(2);else return 0}*pushSpaces(allowTabs){let i=this.pos-1;let ch;do{ch=this.buffer[++i]}while(ch===" "||allowTabs&&ch==="\t");const n=i-this.pos;if(n>0...
L153: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
...
L155: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
Findings
7 High6 Medium6 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/index.js
MediumUnsafe Vm Contextdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
Affected versions and remediation
This report applies to @punks/cli@6.7.0.
See all versions of @punks/cli for other recorded verdicts.
- Review the evidence and your use of @punks/cli@6.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.