{"id":"openhands.dev/openhands-cli","name":"OpenHands CLI","commands":["openhands"],"examples":[{"run":"openhands","does":"Start the TUI; the first run walks you through LLM settings"},{"run":"openhands --headless -t \"<task>\"","does":"Run one task without the UI, for CI and scripts"},{"run":"openhands --resume --last","does":"Resume your most recent conversation"},{"run":"openhands web","does":"Open the same TUI in a browser"}],"description":"Terminal client for the OpenHands AI software development agent.","homepage":"https://docs.openhands.dev","repository":"https://github.com/OpenHands/OpenHands-CLI","license":"MIT","agentic":true,"latest_version":"1.16.0","vendor":"OpenHands (All Hands AI)","install":"curl -fsSL https://install.openhands.dev/install.sh | sh","publisher":"third-party","w3bs":"w3bs install openhands.dev/openhands-cli","scan":{"status":"passed","scanner":"threatcrush 0.13.30","filesScanned":344,"summary":{"critical":0,"high":2,"medium":1,"low":3,"info":0},"malware":0,"truncated":false,"version":"1.16.0","sources":{"installer":"https://install.openhands.dev/install.sh","installerSha256":"78b498d34900c0c3b30654568b3c00e57ec7728fb6af7c27494b2305dbeea240","repository":"github.com/OpenHands/OpenHands-CLI","commit":"283c6ac3610f4299f405f7389f65766dcb83e12a"},"notes":[],"scannedAt":"2026-11-02T23:00:37.941Z","findings":[{"ruleId":"secret-generic-api-key","title":"Generic API Key","severity":"high","category":"secret","cwe":"CWE-798","file":"source/openhands_cli/tui/utils/critic/feedback.py","line":29,"malware":false},{"ruleId":"py-ssrf-outbound-request","title":"outbound request to a non-constant URL","severity":"high","category":"code","cwe":"CWE-918","file":"source/openhands_cli/version_check.py","line":57,"malware":false},{"ruleId":"py-stack-trace-returned","title":"stack trace returned to the caller","severity":"medium","category":"code","cwe":"CWE-209","file":"source/openhands_cli/tui/modals/settings/utils.py","line":265,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth/test_login_command.py","line":138,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth/test_login_command.py","line":204,"malware":false},{"ruleId":"secret-generic-credential","title":"Hardcoded Credential","severity":"low","category":"secret","cwe":"CWE-798","file":"source/tests/auth/test_login_command.py","line":291,"malware":false}]}}