halfcycle@0.4.3
Your coding agents are the engineers. Halfcycle is the rest of the team: product owner, architect, planner and independent reviewer for Claude Code.
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe manifest has no install hook, and the credential-bearing requests are tied to CLI service operations. The service origin defaults to Halfcycle; an alternate origin requires operator configuration, so the source does not establish an unrelated publisher-selected recipient or concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command that creates or joins an engagement, or opens or closes a phase.
Impact
The inspected requests support the package’s service operations; no unrelated recipient or automatic install-time transfer was identified.
Mechanism
The request uses a bearer credential and the service URL, which defaults to Halfcycle and can be explicitly configured through HALFCYCLE_SERVICE_URL.
AI rationale
The manifest has no install hook, and the credential-bearing requests are tied to CLI service operations. The service origin defaults to Halfcycle; an alternate origin requires operator configuration, so the source does not establish an unrelated publisher-selected recipient or concrete attack behavior.
Network endpoints1
control.halfcycle.ai
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the CLI and runtime entrypoints; its listed scripts are build and test tasks, with no install lifecycle hook shown.
- The CLI defaults the service origin to Halfcycle and uses HALFCYCLE_SERVICE_URL only when the operator configures it.
- Credentials come from HALFCYCLE_TOKEN, a stored credential for the service URL, or sign-in to that service.
- Bearer credentials are sent in requests to the configured service URL for Halfcycle engagement and phase operations.
- The CLI callers invoke create, join, build-record, open-phase, and close-phase operations as command actions.
- The bundled artifacts identify project Claude settings and guard-runner paths; the credential type documentation describes passing runner variables through the environment.
Evidence against
- An operator-configured service URL can receive a bearer credential, so the endpoint must be configured for the intended service.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEval
Source & flagged code
8 flaggedbin/bin.bundle.mjsView file
15715// dist/git.js
L15716: import { spawnSync } from "node:child_process";
L15717: import { existsSync, readFileSync } from "node:fs";
High
Child Process
Package source references child process execution.
bin/bin.bundle.mjsView on unpkg · L15715dist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = halfcycle@0.4.2
matchedIdentity = npm:aGFsZmN5Y2xl:0.4.2
similarity = 0.400
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg3205// dist/control-origin.js
L3206: var DEFAULT_CONTROL_ORIGIN = "https://control.halfcycle.ai";
L3207: function resolveControlOrigin(env = process.env) {
L3208: const configured = env["HALFCYCLE_SERVICE_URL"]?.trim();
...
L3217: // dist/device-signin.js
L3218: import { spawn } from "node:child_process";
L3219: import { platform as platform3 } from "node:os";
Findings
1 Critical7 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processbin/bin.bundle.mjs
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighCross File Remote Execution Contextdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighRuntime Package Installdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
Affected versions and remediation
This report applies to halfcycle@0.4.3.
See all versions of halfcycle for other recorded verdicts.
- Review the evidence and your use of halfcycle@0.4.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.