registry / @uzysjung/agent-harness / 26.99.0

@uzysjung/agent-harness@26.99.0

Curate vetted AI-coding skills & plugins by your tech stack — install only what you need, across Claude Code, Codex, OpenCode & Antigravity

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 216 KB of source, external domains: github.com, supabase.com

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1474-1514javascript

1474 names = Object.keys(parsed.mcpServers ?? {}).sort();

1475 } catch {

1476 return null;

1477 }

1478 if (names.length === 0) {

1479 return [];

1480 }

1481 const body = [

1482 "# MCP Server Allowlist \u2014 auto-generated by agent-harness install",

1483 "# Referenced by mcp-pre-exec.sh hook. Remove or '#' comment any server you want to block.",

1484 "# Deleting this file disables the gate (allows all MCP calls).",

1485 "",

1486 ...names,

1487 ""

1488 ].join("\n");

1489 writeFileSync4(allowlistPath, body);

1490 return names;

1491}

1492

1493// src/external-installer.ts

1494init_esm_shims();

1495import { spawnSync } from "child_process";

1496import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1494

1497import { homedir as homedir2 } from "os";

1498import { join as join6 } from "path";

1499var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;

1500function runExternalInstall(ctx, deps = {}) {

1501 const log = deps.log ?? console.log;

1502 const warn = deps.warn ?? console.error;

1503 const spawn = deps.spawn ?? defaultSpawn;

1504 const assets = deps.assets ?? EXTERNAL_ASSETS;

1505 const harnessRoot = deps.harnessRoot ?? process.cwd();

1506 const projectDir = ctx.projectDir ?? process.cwd();

1507 const applicable = filterApplicableAssets(assets, ctx).filter(

1508 (a) => a.method.kind !== "internal"

1509 );

1510 const sorted = [...applicable].sort((a, b2) => {

1511 const ai = CATEGORIES.indexOf(a.category);

1512 const bi = CATEGORIES.indexOf(b2.category);

1513 return ai - bi;

1514 });

Lines 3437-3477javascript

3437}

3438function planReverse(log, spawn, _rm, _projectDir) {

3439 const reverseSteps = [];

3440 const globalAdvisories = [];

3441 for (const asset of log.assets) {

scripts/prune-ecc.shView file

•path = scripts/prune-ecc.sh kind = build_helper sizeBytes = 11869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/prune-ecc.shView on unpkg

Source & flagged code

3 flagged · loading source

dist/index.jsView file

1494init_esm_shims(); L1495: import { spawnSync } from "child_process"; L1496: import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1494

3457execute: () => { L3458: const r = spawn("claude", ["plugin", "uninstall", "--scope", "project", pluginId]); L3459: return r.status === 0 ? { ok: true } : { ok: false, message: (r.stderr || "").trim() }; ... L3465: return { L3466: label: `npx skills remove ${source}`, L3467: execute: () => {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L3457

scripts/prune-ecc.shView file

•path = scripts/prune-ecc.sh kind = build_helper sizeBytes = 11869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/prune-ecc.shView on unpkg

Findings

3 High3 Medium5 Low

HighChild Processdist/index.js

HighShell

HighRuntime Package Installdist/index.js

MediumEnvironment Vars

MediumShips Build Helperscripts/prune-ecc.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1474-1514javascript

1474 names = Object.keys(parsed.mcpServers ?? {}).sort();

1475 } catch {

1476 return null;

1477 }

1478 if (names.length === 0) {

1479 return [];

1480 }

1481 const body = [

1482 "# MCP Server Allowlist \u2014 auto-generated by agent-harness install",

1483 "# Referenced by mcp-pre-exec.sh hook. Remove or '#' comment any server you want to block.",

1484 "# Deleting this file disables the gate (allows all MCP calls).",

1485 "",

1486 ...names,

1487 ""

1488 ].join("\n");

1489 writeFileSync4(allowlistPath, body);

1490 return names;

1491}

1492

1493// src/external-installer.ts

1494init_esm_shims();

1495import { spawnSync } from "child_process";

1496import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1494

1497import { homedir as homedir2 } from "os";

1498import { join as join6 } from "path";

1499var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;

1500function runExternalInstall(ctx, deps = {}) {

1501 const log = deps.log ?? console.log;

1502 const warn = deps.warn ?? console.error;

1503 const spawn = deps.spawn ?? defaultSpawn;

1504 const assets = deps.assets ?? EXTERNAL_ASSETS;

1505 const harnessRoot = deps.harnessRoot ?? process.cwd();

1506 const projectDir = ctx.projectDir ?? process.cwd();

1507 const applicable = filterApplicableAssets(assets, ctx).filter(

1508 (a) => a.method.kind !== "internal"

1509 );

1510 const sorted = [...applicable].sort((a, b2) => {

1511 const ai = CATEGORIES.indexOf(a.category);

1512 const bi = CATEGORIES.indexOf(b2.category);

1513 return ai - bi;

1514 });

Lines 3437-3477javascript

3437}

3438function planReverse(log, spawn, _rm, _projectDir) {

3439 const reverseSteps = [];

3440 const globalAdvisories = [];

3441 for (const asset of log.assets) {

scripts/prune-ecc.shView file

•path = scripts/prune-ecc.sh kind = build_helper sizeBytes = 11869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/prune-ecc.shView on unpkg