halfcycle@0.4.12
Your coding agents are the engineers. Halfcycle is the rest of the team: product owner, architect, planner and independent reviewer for Claude Code.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe runner automatically sends engagement-linked evaluation metadata to a configured Halfcycle telemetry endpoint after guard-hook evaluations. The package does not show a clear disclosure or opt-out, so this is suspicious runtime telemetry; no unrelated credential theft or install-time activity was identified.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A guard hook completes an evaluation while a telemetry URL and guard token are configured.
Impact
Halfcycle receives engagement-linked evaluation activity and change-scope metadata. The package source does not show a clear user-facing disclosure or telemetry opt-out.
Mechanism
The runner records evaluation metadata locally and POSTs it as JSON with a bearer token to the configured telemetry endpoint.
AI rationale
The runner automatically sends engagement-linked evaluation metadata to a configured Halfcycle telemetry endpoint after guard-hook evaluations. The package does not show a clear disclosure or opt-out, so this is suspicious runtime telemetry; no unrelated credential theft or install-time activity was identified.
Evidence
bin/bin.bundle.mjs~/.halfcycle/guard-eval-log/<phase>.jsonl
Network endpoints1
${CONTROL_TELEMETRY_URL}/telemetry (service-provided host)
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- After a guard-hook evaluation, the runner emits a telemetry record when a telemetry URL and token are configured.
- The record contains engagement and run identifiers, timing, outcome, phase, and change-scope counts or diff-base metadata.
- The runner POSTs the record as JSON to the configured telemetry URL's /telemetry endpoint with a bearer token.
- The package manifest declares build and test scripts but no install lifecycle hooks.
Evidence against
- The reported telemetry is tied to Halfcycle guard evaluations and uses a service-provided telemetry URL with the per-engagement guard token.
- The telemetry record fields inspected are usage and evaluation metadata; the separate code-review evaluation is part of the package's stated purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedbin/bin.bundle.mjsView file
17608// dist/git.js
L17609: import { spawnSync } from "node:child_process";
L17610: import { existsSync, readFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/bin.bundle.mjsView on unpkg · L17608dist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = halfcycle@0.4.8
matchedIdentity = npm:aGFsZmN5Y2xl:0.4.8
similarity = 0.600
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg5334// dist/control-origin.js
L5335: var DEFAULT_CONTROL_ORIGIN = "https://control.halfcycle.ai";
L5336: function resolveControlOrigin(env = process.env) {
L5337: const configured = env["HALFCYCLE_SERVICE_URL"]?.trim();
...
L5346: // dist/device-signin.js
L5347: import { spawn } from "node:child_process";
L5348: import { platform as platform3 } from "node:os";
Findings
1 Critical5 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/bin.bundle.mjs
HighSame File Env Network Executiondist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to halfcycle@0.4.12.
See all versions of halfcycle for other recorded verdicts.
- Review the evidence and your use of halfcycle@0.4.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.