harbormaster

What was checked

Plain notes from the hygiene checks.

• Permissions

  Note

  requests shell access. The manifest names this permission.

  PERMISSION_SHELL_DECLARED

  build_tailwind_css.py, line 80

  subprocess.run(

  build_tailwind_css.py, line 112

  subprocess.run(

  src/harbormaster/projects.py, line 296

  out = subprocess.run(

  Show more

  src/harbormaster/ssh.py, line 80

  return subprocess.run(

  src/harbormaster/backends/claude.py, line 146

  proc = subprocess.run(

  src/harbormaster/backends/claude.py, line 266

  proc = subprocess.Popen(

  src/harbormaster/backends/claude.py, line 429

  proc = subprocess.Popen(

  src/harbormaster/backends/codex.py, line 205

  proc = subprocess.run(

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  claudedocs/spikes/durable_session_spike.py, line 186

  def fetch():

  src/harbormaster/dispatcher_cli.py, line 161

  with urllib.request.urlopen(endpoint, timeout=5) as resp: # noqa: S310

  src/harbormaster/fleetq/completions.py, line 102

  with urllib.request.urlopen(req, timeout=self._timeout) as resp:

  Show more

  src/harbormaster/ui/routes.py, line 167

  # plain fetch() works (loopback + no env token).

  src/harbormaster/ui/routes.py, line 580

  result dict so the dashboard can `await fetch().json()` and

  docs/qa-security-report-2026-05-11.md, line 70

  - **M4.** `urllib.request.urlopen(endpoint)` in `dispatcher_cli.py:160` follows redirects by default. `endpoint` is operator-supplied so SSRF risk is operator-level only, but pin a

  docs/sprint-retro-harbormaster-v2.1.0.md, line 103

  so the v2.1.0a4 ask form uses `fetch().body.getReader()` +

  docs/sprint-retro-harbormaster-v2.1.0a3.md, line 20

  the raw result dict so a `fetch().then(r => r.json())` consumer

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_CREDENTIAL SECRETS_PATH_DOTENV

  src/harbormaster/ssh.py, line 125

  """Parse ~/.ssh/config and return non-wildcard Host aliases.

  src/harbormaster/tools/hosts.py, line 1

  """list_hosts MCP tool - merge configured [hosts] with ~/.ssh/config aliases."""

  src/harbormaster/tools/hosts.py, line 13

  """List host aliases from harbormaster config and ~/.ssh/config.

  Show more

  README.md, line 136

  | `list_hosts()` | Configured `[hosts]` plus `~/.ssh/config` Host aliases. | ~5 ms |

  docs/agent-request-payload-spike.md, line 144

  - `.env` reveals: `REVERB_APP_KEY=qaeouhqrig8tfmrwazk1`, `REVERB_HOST=localhost`, `REVERB_PORT=8080`.

  docs/architecture-harbormaster.md, line 356

  - `-o ControlMaster=auto -o ControlPath=~/.ssh/cm-%h-%p-%r -o ControlPersist=60s` (connection reuse for fan-out)

  docs/design-harbormaster.md, line 48

  - **SSH multi-host hardening**: extend the in-progress `host` parameter (background agent ~80% done). Add `[hosts]` section in config. `list_hosts()` reads `~/.ssh/config` + config

  docs/operator-config-reference.md, line 121

  | `ssh_host` | `str` | required | Hostname or `~/.ssh/config` Host alias. |

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Note

  a file was over the read cap and was not fully read. the file cap was reached before every file was read.

  OBFUSCATION_FILE_OVER_READ_CAP OBFUSCATION_FILE_CAP_REACHED

  uv.lock, line 1

  version = 1

  tests/ui/test_caches_phase6.py, line 1

  """v11.0.0a6: caches consolidation.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 3c2e2e2d56b3. requests shell access. The manifest names this permission. can reach a host that is not written as a fixed address. reads a credential or environment file. a file was over the read cap and was not fully read. the file cap was reached before every file was read.

Date and source

Date checked: 25 Oct 2026

Read how this letter is chosen