halfcycle@0.4.15
Your coding agents are the engineers. Halfcycle is the rest of the team: it scopes, designs, plans and reviews production software, and runs the build inside your own Claude Code.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package exposes an explicit CLI and uses Halfcycle credentials with its configured service endpoints for project setup and guard evaluation. The routed credential and execution indicators are consistent with that purpose, and source excerpts are optional.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when explicitly invoked; guard evaluation runs through the configured Claude Code hook during use.
Impact
No unauthorized credential forwarding or unrelated account action was identified.
Mechanism
The guard sends evaluation requests with its Halfcycle engagement bearer token to the configured guard service. Code excerpts are optional.
AI rationale
The package exposes an explicit CLI and uses Halfcycle credentials with its configured service endpoints for project setup and guard evaluation. The routed credential and execution indicators are consistent with that purpose, and source excerpts are optional.
Network endpoints3
guard.halfcycle.aicontrol.halfcycle.aiapp.halfcycle.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/index.js for imports and dist/bin.js as the CLI; its listed npm scripts are build and development tasks, with no install hook.
- The install flow identifies the project action it will perform when using browser sign-in.
- The guard uses GUARD_SERVICE_URL, defaulting to guard.halfcycle.ai, and sends its bearer token to that service’s /evaluate endpoint for guard evaluation.
- Engagement requests send a bearer credential to the supplied service URL as part of the package’s account and project workflow.
- Source excerpts are optional and omitted from requests unless enabled.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flaggedbin/bin.bundle.mjsView file
19169// dist/git.js
L19170: import { spawnSync } from "node:child_process";
L19171: import { existsSync, readFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/bin.bundle.mjsView on unpkg · L1916914668var WRITE_CAPABLE_TOOLS = ["Edit", "MultiEdit", "NotebookEdit", "Write"];
L14669: var PRE_TOOL_USE_MATCHER = "^(Bash|Read|Grep|Write|Edit|MultiEdit|NotebookEdit|Agent|PowerShell)$";
L14670: function hookCommand(script, verb) {
High
8// dist/guard-origin.js
L9: var DEFAULT_GUARD_ORIGIN = "https://guard.halfcycle.ai";
L10: function resolveGuardOrigin(env) {
...
L26: ZodArray: () => ZodArray,
L27: ZodBase64: () => ZodBase64,
L28: ZodBase64URL: () => ZodBase64URL,
...
L1487: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())))
L1488: } : { success: true, data: result.value };
L1489: };
...
L14668: var WRITE_CAPABLE_TOOLS = ["Edit", "MultiEdit", "NotebookEdit", "Write"];
L14669: var PRE_TOOL_USE_MATCHER = "^(Bash|Read|Grep|Write|Edit|MultiEdit|NotebookEdit|Agent|PowerShell)$";
L14670: function hookCommand(script, verb) {
Low
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/bin.bundle.mjs
HighShellbin/bin.bundle.mjs
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/pre-tool-use-filter.sh
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to halfcycle@0.4.15.
See all versions of halfcycle for other recorded verdicts.
- Review the evidence and your use of halfcycle@0.4.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.