halfcycle@0.4.18
Your coding agents are the engineers. Halfcycle is the rest of the team: it scopes, designs, plans and reviews production software, and runs the build inside your own Claude Code.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install hook, and its CLI and agent runner use Halfcycle service endpoints for the package’s stated review and guard functions. The runner can submit bounded source excerpts by default, with an environment setting to disable them; this is a relevant privacy consideration, but no unrelated credential redirection or malicious behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the CLI or configures the agent integration that evaluates project changes.
Impact
No malicious impact identified; review requests may disclose relevant project code to the configured Halfcycle service.
Mechanism
The CLI uses Halfcycle credentials with the configured control or guard service; the guard runner submits derived change metadata and may include bounded, screened excerpts from changed code.
AI rationale
The manifest has no install hook, and its CLI and agent runner use Halfcycle service endpoints for the package’s stated review and guard functions. The runner can submit bounded source excerpts by default, with an environment setting to disable them; this is a relevant privacy consideration, but no unrelated credential redirection or malicious behavior was found.
Evidence
package.jsondist/bin.jsdist/cli.jsbin/bin.bundle.mjs
Network endpoints2
control.halfcycle.aiguard.halfcycle.ai
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package has no install lifecycle scripts; its CLI is exposed through dist/bin.js.
- The CLI entry is loaded when a user runs the halfcycle command.
- The CLI defaults to control.halfcycle.ai and accepts a service URL override through HALFCYCLE_SERVICE_URL.
- The agent runner sends a guard evaluation request to its configured service using the configured bearer token.
- For code evaluation, the runner can send bounded, screened source excerpts; this behavior can be disabled with HALFCYCLE_SOURCE_EXCERPTS=false.
Evidence against
- Agent hooks can evaluate project changes and transmit relevant code excerpts to the configured Halfcycle guard service by default; this is a privacy consideration consistent with the package’s code-review purpose.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
10 flaggedbin/bin.bundle.mjsView file
19195// dist/git.js
L19196: import { spawnSync } from "node:child_process";
L19197: import { existsSync, readFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/bin.bundle.mjsView on unpkg · L1919514668var WRITE_CAPABLE_TOOLS = ["Edit", "MultiEdit", "NotebookEdit", "Write"];
L14669: var PRE_TOOL_USE_MATCHER = "^(Bash|Read|Grep|Write|Edit|MultiEdit|NotebookEdit|Agent|PowerShell)$";
L14670: function hookCommand(script, verb) {
High
8// dist/guard-origin.js
L9: var DEFAULT_GUARD_ORIGIN = "https://guard.halfcycle.ai";
L10: function resolveGuardOrigin(env) {
...
L26: ZodArray: () => ZodArray,
L27: ZodBase64: () => ZodBase64,
L28: ZodBase64URL: () => ZodBase64URL,
...
L1487: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())))
L1488: } : { success: true, data: result.value };
L1489: };
...
L14668: var WRITE_CAPABLE_TOOLS = ["Edit", "MultiEdit", "NotebookEdit", "Write"];
L14669: var PRE_TOOL_USE_MATCHER = "^(Bash|Read|Grep|Write|Edit|MultiEdit|NotebookEdit|Agent|PowerShell)$";
L14670: function hookCommand(script, verb) {
Low
Findings
1 Critical7 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/bin.bundle.mjs
HighShellbin/bin.bundle.mjs
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/pre-tool-use-filter.sh
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to halfcycle@0.4.18.
See all versions of halfcycle for other recorded verdicts.
- Review the evidence and your use of halfcycle@0.4.18 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.