registry / @uzysjung/agent-harness / 26.93.0

@uzysjung/agent-harness@26.93.0

Curate vetted AI-coding skills & plugins by your tech stack — install only what you need, across Claude Code, Codex, OpenCode & Antigravity

Static Scan Results

scanned 11d ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 210 KB of source, external domains: github.com, supabase.com

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1367-1407javascript

1367 names = Object.keys(parsed.mcpServers ?? {}).sort();

1368 } catch {

1369 return null;

1370 }

1371 if (names.length === 0) {

1372 return [];

1373 }

1374 const body = [

1375 "# MCP Server Allowlist \u2014 auto-generated by agent-harness install",

1376 "# Referenced by mcp-pre-exec.sh hook. Remove or '#' comment any server you want to block.",

1377 "# Deleting this file disables the gate (allows all MCP calls).",

1378 "",

1379 ...names,

1380 ""

1381 ].join("\n");

1382 writeFileSync4(allowlistPath, body);

1383 return names;

1384}

1385

1386// src/external-installer.ts

1387init_esm_shims();

1388import { spawnSync } from "child_process";

1389import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1387

1390import { homedir as homedir2 } from "os";

1391import { join as join6 } from "path";

1392var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;

1393function runExternalInstall(ctx, deps = {}) {

1394 const log = deps.log ?? console.log;

1395 const warn = deps.warn ?? console.error;

1396 const spawn = deps.spawn ?? defaultSpawn;

1397 const assets = deps.assets ?? EXTERNAL_ASSETS;

1398 const harnessRoot = deps.harnessRoot ?? process.cwd();

1399 const projectDir = ctx.projectDir ?? process.cwd();

1400 const applicable = filterApplicableAssets(assets, ctx).filter(

1401 (a) => a.method.kind !== "internal"

1402 );

1403 const sorted = [...applicable].sort((a, b2) => {

1404 const ai = CATEGORIES.indexOf(a.category);

1405 const bi = CATEGORIES.indexOf(b2.category);

1406 return ai - bi;

1407 });

Lines 3429-3469javascript

3429}

3430function planReverse(log, spawn, _rm, _projectDir) {

3431 const reverseSteps = [];

3432 const globalAdvisories = [];

3433 for (const asset of log.assets) {

scripts/prune-ecc.shView file

•path = scripts/prune-ecc.sh kind = build_helper sizeBytes = 11869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/prune-ecc.shView on unpkg

Source & flagged code

3 flagged · loading source

dist/index.jsView file

1387init_esm_shims(); L1388: import { spawnSync } from "child_process"; L1389: import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1387

3449execute: () => { L3450: const r = spawn("claude", ["plugin", "uninstall", "--scope", "project", pluginId]); L3451: return r.status === 0 ? { ok: true } : { ok: false, message: (r.stderr || "").trim() }; ... L3457: return { L3458: label: `npx skills remove ${source}`, L3459: execute: () => {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/index.jsView on unpkg · L3449

scripts/prune-ecc.shView file

•path = scripts/prune-ecc.sh kind = build_helper sizeBytes = 11869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/prune-ecc.shView on unpkg

Findings

3 High3 Medium5 Low

HighChild Processdist/index.js

HighShell

HighRuntime Package Installdist/index.js

MediumEnvironment Vars

MediumShips Build Helperscripts/prune-ecc.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

dist/index.jsView file

Lines 1367-1407javascript

1367 names = Object.keys(parsed.mcpServers ?? {}).sort();

1368 } catch {

1369 return null;

1370 }

1371 if (names.length === 0) {

1372 return [];

1373 }

1374 const body = [

1375 "# MCP Server Allowlist \u2014 auto-generated by agent-harness install",

1376 "# Referenced by mcp-pre-exec.sh hook. Remove or '#' comment any server you want to block.",

1377 "# Deleting this file disables the gate (allows all MCP calls).",

1378 "",

1379 ...names,

1380 ""

1381 ].join("\n");

1382 writeFileSync4(allowlistPath, body);

1383 return names;

1384}

1385

1386// src/external-installer.ts

1387init_esm_shims();

1388import { spawnSync } from "child_process";

1389import { existsSync as existsSync6, readdirSync, readFileSync as readFileSync6 } from "fs";

High

Child Process

Package source references child process execution.

dist/index.jsView on unpkg · L1387

1390import { homedir as homedir2 } from "os";

1391import { join as join6 } from "path";

1392var DEFAULT_SPAWN_TIMEOUT_MS = 12e4;

1393function runExternalInstall(ctx, deps = {}) {

1394 const log = deps.log ?? console.log;

1395 const warn = deps.warn ?? console.error;

1396 const spawn = deps.spawn ?? defaultSpawn;

1397 const assets = deps.assets ?? EXTERNAL_ASSETS;

1398 const harnessRoot = deps.harnessRoot ?? process.cwd();

1399 const projectDir = ctx.projectDir ?? process.cwd();

1400 const applicable = filterApplicableAssets(assets, ctx).filter(

1401 (a) => a.method.kind !== "internal"

1402 );

1403 const sorted = [...applicable].sort((a, b2) => {

1404 const ai = CATEGORIES.indexOf(a.category);

1405 const bi = CATEGORIES.indexOf(b2.category);

1406 return ai - bi;

1407 });

Lines 3429-3469javascript

3429}

3430function planReverse(log, spawn, _rm, _projectDir) {

3431 const reverseSteps = [];

3432 const globalAdvisories = [];

3433 for (const asset of log.assets) {

scripts/prune-ecc.shView file

•path = scripts/prune-ecc.sh kind = build_helper sizeBytes = 11869 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/prune-ecc.shView on unpkg