A provider-agnostic scaffolding kit for running structured multi-agent workflows in your codebase.
Drift inferred · capture-to-capture
- HIGH code analysis flagged dynamic code execution in enmanuelmag/agent-harness-kit
transport stdio · http counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
No tools enumerated yet for this server.
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit d03a39c · analyzer v28 · 2h ago
skills & prompt files 6
- agent-rules enmanuelmag-agent-harness-kit-d03a39c/AGENTS.md
- agent-rules enmanuelmag-agent-harness-kit-d03a39c/CLAUDE.md
- skill enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/skills/ahk-ask/SKILL.md
- skill enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/skills/ahk-consultant/SKILL.md
- skill enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/skills/ahk-review/SKILL.md
- skill enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/skills/ahk-triage/SKILL.md
danger signals1
- dynamic code execution new Function() enmanuelmag-agent-harness-kit-d03a39c/src/tests/templates.test.ts :370
assert.doesNotThrow(() => new Function(stripTsSyntax(out)))
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 106
filesystem 27
- fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/build.ts :1
import { watch } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/export.ts :1
import { writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/health.ts :2
import { existsSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/init-helpers.ts :2
import { existsSync, readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/init.ts :1
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/migrate-storage.ts :1
import { copyFileSync, existsSync, mkdirSync, rmSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/reset.ts :1
import { existsSync, readdirSync, rmSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/sync.ts :1
import { existsSync, readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/commands/task/done.ts :2
import { existsSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/config.ts :2
import { existsSync, readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/dashboard-server.ts :1
import { watch } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/db.ts :2
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/doctor.ts :1
import { existsSync, readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/drivers/sqlite.ts :1
import { existsSync, mkdirSync, rmSync, statSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/local-install-guard.ts :1
import { existsSync, readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/claude-code.ts :1
import { existsSync } from 'fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/codex-cli.ts :1
import { existsSync, mkdirSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/detect-package-manager.ts :1
import { existsSync, readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/mcp-merge.ts :1
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/opencode.ts :1
import { existsSync, mkdirSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/scaffold-utils.ts :2
import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/materializer/templates.ts :1
import { readFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/mcp-server.ts :1
import { existsSync, mkdirSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/package-data.ts :1
import { existsSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/path-probe.ts :1
import { accessSync, constants, readdirSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/core/permissions-check.ts :1
import { existsSync } from 'node:fs' - fs enmanuelmag-agent-harness-kit-d03a39c/src/utils/file.ts :1
import { mkdirSync, writeFileSync } from 'fs'
shell / exec 7
- shell enmanuelmag-agent-harness-kit-d03a39c/src/commands/health.ts :1
import { spawnSync } from 'node:child_process' - shell enmanuelmag-agent-harness-kit-d03a39c/src/commands/task/done.ts :1
import { spawnSync } from 'node:child_process' - shell enmanuelmag-agent-harness-kit-d03a39c/src/core/drivers/mysql.ts :132
async exec(sql: string, params: unknown[] = []): Promise<number> { - shell enmanuelmag-agent-harness-kit-d03a39c/src/core/drivers/postgres.ts :121
async exec(sql: string, params: unknown[] = []): Promise<number> { - shell enmanuelmag-agent-harness-kit-d03a39c/src/core/drivers/sqlite.ts :129
async exec(sql: string, params: unknown[] = []): Promise<number> { - shell enmanuelmag-agent-harness-kit-d03a39c/src/core/drivers/types.ts :9
exec(sql: string, params?: unknown[]): Promise<number> - shell enmanuelmag-agent-harness-kit-d03a39c/src/core/sqlite-adapter.ts :18
exec(sql: string): void
network 5
- net enmanuelmag-agent-harness-kit-d03a39c/dashboard/src/lib/api.ts :13
const res = await fetch(url) - net enmanuelmag-agent-harness-kit-d03a39c/src/core/dashboard-server.ts :12
import type { IncomingMessage } from 'node:http' - net enmanuelmag-agent-harness-kit-d03a39c/src/core/doctor.ts :12
latest: string | null // null = couldn't fetch (offline) - net enmanuelmag-agent-harness-kit-d03a39c/src/core/port-utils.ts :1
import { createServer } from 'node:net' - net enmanuelmag-agent-harness-kit-d03a39c/src/core/update-check.ts :20
fetch(REGISTRY_URL)
install hooks 2
- prepublishOnly enmanuelmag-agent-harness-kit-d03a39c/package.json :34
pnpm run build && npm test - prepare enmanuelmag-agent-harness-kit-d03a39c/package.json :35
husky
declared dependencies 32
- @modelcontextprotocol/sdk@^1.10.2
- @clack/prompts@^0.9.0
- @hono/node-server@^1.13.0
- better-sqlite3@^12.11.1
- cli-table3@^0.6.5
- commander@^12.1.0
- drizzle-orm@^0.45.2
- hono@^4.6.0
- jiti@^2.4.2
- mysql2@^3.22.3
- open@^10.1.0
- picocolors@^1.1.1
- postgres@^3.4.9
- valibot@^1.4.0
- ws@^8.18.0
- @cardor/agent-harness-kit@^1.8.1
- @commitlint/cli@^20.5.3
- @commitlint/config-conventional@^20.5.3
- @eslint-react/eslint-plugin@^5.7.1
- @types/node@^22.19.17
- @types/ws@^8.5.0
- eslint@^9.39.4
- eslint-config-prettier@^10.1.8
- eslint-plugin-prettier@^5.5.5
- eslint-plugin-react-hooks@^7.1.1
- eslint-plugin-simple-import-sort@^13.0.0
- husky@^9.1.7
- prettier@^3.8.3
- tsup@^8.5.1
- tsx@^4.21.0
- typescript@^5.5.0
- typescript-eslint@^8.59.1