registry / atlas-project-harness / 0.2.0-beta.1
atlas-project-harness@0.2.0-beta.1
践行 Project Harness 的全流程 AI 编程工作流治理引擎
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the inspected CLI, extension, installer, and test behavior is user-invoked or test-scoped. The scanner's similarity and payload hints did not establish malicious behavior in the inspected source.
Static reason
No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user invokes an Atlas command, or the package's test suite loads local modules.
Impact
No confirmed unauthorized data transfer, persistence, destructive action, or unconsented install-time mutation was established.
Mechanism
The CLI runs the requested installer or utility, while the flagged test helper imports package-local files for testing.
AI rationale
The manifest has no install lifecycle hook, and the inspected CLI, extension, installer, and test behavior is user-invoked or test-scoped. The scanner's similarity and payload hints did not establish malicious behavior in the inspected source.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest defines no install lifecycle hook; its scripts are test and documentation commands.
- The Pi extension registers Atlas as a user command; checks and setup run through explicit commands or agent events.
- The CLI routes init to the package installer, which checks project state before updating.
- The flagged test helper dynamically loads local package modules for parser tests.
Evidence against
- The package includes a network-backed reporting command, but it is reached through the explicit report command.
- The installer writes Atlas project assets when explicitly run; no automatic install trigger is declared.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flagged · loading sourcebin/atlas.jsView file
•matchType = normalized_sha256
matchedPackage = atlas-project-harness@0.1.0-beta.24
matchedPath = bin/atlas.js
matchedIdentity = npm:YXRsYXMtcHJvamVjdC1oYXJuZXNz:0.1.0-beta.24
similarity = 1.000
summary = normalized source hash matched finalized malicious source
High
Known Malware Source Similarity
Source file is highly similar to a previously finalized malicious package; route for source-aware review.
bin/atlas.jsView on unpkg•matchType = malicious_source_fingerprint_signature
signature = f0d06108f821c11e
signatureType = suspicious_hashes
sourceLabel = final_verdict:malicious
matchedPackage = atlas-project-harness@0.1.0-beta.24
matchedPath = bin/atlas.js
matchedIdentity = npm:YXRsYXMtcHJvamVjdC1oYXJuZXNz:0.1.0-beta.24
similarity = 1.000
shingleOverlap = 4
summary = package final verdict is malicious
High
Known Malware Source Fingerprint Signature
Source fingerprint signature matches a known malicious package signature; route for source-aware review.
bin/atlas.jsView on unpkg1#!/usr/bin/env node
L2: const { spawnSync } = require('child_process');
L3: const path = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
Findings
4 High5 Medium4 Low
HighPayload In Excluded Dirtests/test_shared_kernel.py
HighSemantic Analysis Limitedextensions/pi.ts#virtual:normalized:round1
HighKnown Malware Source Similaritybin/atlas.js
HighKnown Malware Source Fingerprint Signaturebin/atlas.js
MediumDynamic Requirebin/atlas.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperpatches/workflow-skill-routing/apply-patches.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to atlas-project-harness@0.2.0-beta.1.
See all versions of atlas-project-harness for other recorded verdicts.
- Review the evidence and your use of atlas-project-harness@0.2.0-beta.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.