w3bs.AccountStart building
PACKAGES / Hanzo AI

Hanzo

Hanzo AI's CLI: a coding agent and every Hanzo cloud product in one Rust binary. The installer also adds the Hanzo MCP server, Hanzo Dev, Hanzo Gen and ZT, each a checksummed native binary.

ThreatCrush · No malware found
INSTALLw3bs install hanzo.sh/hanzo

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install hanzo.sh/hanzoInstall Hanzo and track it for updates
  2. hanzo auth loginSign in to Hanzo (or bring an OpenAI or Anthropic account)
  3. hanzo "<task>"Hand a coding task to the agent in the current repo
  4. hanzo dev --claude "<task>"Run the task through Claude Code on your own Claude account
  5. hanzo usage summaryShow your Hanzo usage

Every option: hanzo --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in Hanzo 8.5.890. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-02 22:58 UTC · threatcrush 0.13.30
Files
102 (installer + github.com/hanzoai/cli@1902384e1f6c)
Findings
2 high · 6 low
8 other findings (not malware)
  • high
    Hardcoded Credentialinstaller/install.sh:207secret-generic-credential · CWE-798
  • high
    Hardcoded Credentialsource/install.sh:65secret-generic-credential · CWE-798
  • low
    AWS Access Keysource/src/commands/scan.rs:277secret-aws-access-key · CWE-798
  • low
    Google API Keysource/src/commands/scan.rs:278secret-google-api-key · CWE-798
  • low
    Private Keysource/src/commands/scan.rs:279secret-private-key · CWE-798
  • low
    OpenAI API Keysource/src/iam/provider.rs:158secret-openai-key · CWE-798
  • low
    OpenAI API Keysource/src/iam/provider.rs:159secret-openai-key · CWE-798
  • low
    Hardcoded Credentialsource/src/iam/token.rs:314secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/hanzo.sh/hanzo/badge.svg)](https://w3bs.org/packages/hanzo.sh/hanzo)