{"id":"hanzo.sh/hanzo","name":"Hanzo","commands":["hanzo","hanzo-mcp","dev","gen","zt"],"examples":[{"run":"hanzo auth login","does":"Sign in to Hanzo (or bring an OpenAI or Anthropic account)"},{"run":"hanzo \"<task>\"","does":"Hand a coding task to the agent in the current repo"},{"run":"hanzo dev --claude \"<task>\"","does":"Run the task through Claude Code on your own Claude account"},{"run":"hanzo usage summary","does":"Show your Hanzo usage"}],"description":"Hanzo AI's CLI: a coding agent and every Hanzo cloud product in one Rust binary. The installer also adds the Hanzo MCP server, Hanzo Dev, Hanzo Gen and ZT, each a checksummed native binary.","homepage":"https://hanzo.ai","repository":"https://github.com/hanzoai/cli","license":"Apache-2.0","agentic":true,"latest_version":"8.5.890","vendor":"Hanzo AI","install":"curl -fsSL https://hanzo.sh | sh","publisher":"third-party","w3bs":"w3bs install hanzo.sh/hanzo","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":102,"summary":{"critical":0,"high":2,"medium":0,"low":6,"info":0},"malware":0,"truncated":false,"version":"8.5.890","sources":{"installer":"https://hanzo.sh","installerSha256":"072c52455b7252599f7bc50cb240ebc6aaff780bbbe4f599098038095ff148e1","repository":"github.com/hanzoai/cli","commit":"1902384e1f6c1b0563e9fd1747efca6aab87edf1"},"notes":[],"scannedAt":"2026-11-02T22:58:46.435Z","findings":[{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"high","category":"secret","cwe":"CWE-798","file":"installer/install.sh","line":207,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"high","category":"secret","cwe":"CWE-798","file":"source/install.sh","line":65,"malware":false},{"ruleId":"secret-aws-access-key","title":"AWS Access Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/commands/scan.rs","line":277,"malware":false},{"ruleId":"secret-google-api-key","title":"Google API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/commands/scan.rs","line":278,"malware":false},{"ruleId":"secret-private-key","title":"Private Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/commands/scan.rs","line":279,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/iam/provider.rs","line":158,"malware":false},{"ruleId":"secret-openai-key","title":"OpenAI API Key","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/iam/provider.rs","line":159,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/src/iam/token.rs","line":314,"malware":false}]}}