registry / @punks/cli / 6.9.0
@punks/cli@6.9.0
Harness Intelligence scaffolding CLI
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe manifest presents a Harness Intelligence scaffolding CLI with no install lifecycle hook. The flagged process execution, control-plane URL, and bounded VM evaluation appear in CLI tooling paths, with no confirmed malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when a user invokes `hi` or `hint`; no install hook is declared.
Impact
No source evidence inspected showed credential theft, unrelated data collection, or concealed code execution.
Mechanism
The bundle includes command execution and Harness Intelligence control-plane support. The inspected VM use is part of lint asset parsing and has a timeout.
AI rationale
The manifest presents a Harness Intelligence scaffolding CLI with no install lifecycle hook. The flagged process execution, control-plane URL, and bounded VM evaluation appear in CLI tooling paths, with no confirmed malicious behavior.
Evidence
.devpunks/settings.json.devpunks/installed.json.agents/subagents/manifest.mjs
Network endpoints1
api.harness-intelligence.devpunks.com/r
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the `hi` and `hint` CLI through `dist/index.js` and declares no install lifecycle hooks.
- The flagged network host is the Harness Intelligence control-plane URL, consistent with the package’s scaffolding CLI purpose.
- The VM use appears in lint asset parsing and evaluates a transformed script with a one-second timeout.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicenseWildcardDependency
Source & flagged code
9 flaggeddist/index.jsView file
155`)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
High
367`,()=>{resume(void_3)})})})));var makeCliPromptLayer=(promptEffect=PromptLive)=>effect(CliPrompt,gen2(function*makeLazyPrompt(){const scope3=yield*scope2;const cachedPrompt=yield*c...
L368: `);const preCommit=lines2.findIndex((line)=>line.trim()==="pre-commit:");if(preCommit===-1){return null}const preIndent=indent(lines2[preCommit]);const preCommitEnd=lines2.findInde...
L369:
High
151`)return yield*this.pushCount(1);else if(ch==="\r"&&this.charAt(1)===`
L152: `)return yield*this.pushCount(2);else return 0}*pushSpaces(allowTabs){let i=this.pos-1;let ch;do{ch=this.buffer[++i]}while(ch===" "||allowTabs&&ch==="\t");const n=i-this.pos;if(n>0...
L153: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
...
L155: `)+1;while(nl!==0){this.onNewLine(this.offset+nl);nl=this.source.indexOf(`
L156: `,nl)+1}}return{type,offset:this.offset,indent:this.indent,source:this.source}}startBlockValue(parent){switch(this.type){case"alias":case"scalar":case"single-quoted-scalar":case"do...
L157: `+ind(d+1));return`[
Findings
7 High6 Medium6 Low
HighChild Processdist/index.js
HighShelldist/index.js
HighSame File Env Network Executiondist/index.js
HighCredential Redirect Persistencedist/index.js
HighCommand Output Exfiltrationdist/index.js
HighObfuscated Payload Loaderdist/index.js
HighTrigger Reachable Command Output Exfiltrationdist/index.js
MediumDynamic Requiredist/index.js
MediumUnsafe Vm Contextdist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
Affected versions and remediation
This report applies to @punks/cli@6.9.0.
See all versions of @punks/cli for other recorded verdicts.
- Review the evidence and your use of @punks/cli@6.9.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.