@agentic-dev.ai/emo@0.1.14
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package automatically reports identifying account and usage metadata to its own service during runtime, with no opt-out apparent in the reporter setup. The source limits the payload to activity metadata, so this supports a telemetry warning rather than a malicious verdict.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The server starts with an eligible hub account signed in; reporting then runs periodically.
Impact
The hub can associate usage patterns and named agents with the user's account, though the reported fields exclude message content and tool arguments.
Mechanism
A timer posts the user's email-keyed heartbeat and activity summaries to the hub's Firestore service using the user's Firebase ID token.
AI rationale
The package automatically reports identifying account and usage metadata to its own service during runtime, with no opt-out apparent in the reporter setup. The source limits the payload to activity metadata, so this supports a telemetry warning rather than a malicious verdict.
Evidence
server.mjslib/hub-activity.mjslib/license.mjsEMO_HOME/state/hub-activity.json
Network endpoints1
firestore.googleapis.com/v1/projects/${PID()}/databases/(default)/documents
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- A background reporter starts when the app has an active hub sign-in and sends heartbeats and new activity on a two-minute timer.
- The reporter uses the signed-in user's email in Firestore document paths and authenticates requests with that user's Firebase ID token.
- Reported activity includes timestamps, agent IDs and display names, action types, durations, token counts, and tool categories.
Evidence against
- The source describes the hub reporting as account activity monitoring and says message text, prompts, results, tool arguments, filenames, and client details are excluded.
- The reported activity goes to the product's Firebase Firestore service, not an unrelated collector.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
15 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
8import path from 'node:path';
L9: import { spawn, spawnSync } from 'node:child_process';
L10: import { fileURLToPath } from 'node:url';
High
139const [cmd = 'start', arg] = process.argv.slice(2);
L140: // Windows PowerShell 5.1 opens the console on an old code page and the Hebrew comes out garbled: switch it to UTF-8
L141: if (WIN && process.stdout.isTTY) { try { spawnSync('chcp', ['65001'], { shell: true, stdio: 'ignore' }); } catch {} }
Findings
4 Critical8 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
CriticalPrevious Version Dangerous Deltaserver.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellbin/emo.mjs
HighRemote System File Writelib/remote.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighShips High Entropy Blobpublic/models/hey_jarvis_v0.1.onnx
HighSemantic Analysis Limitedmcp/gmail.mjs#virtual:normalized:round1
HighSecret Patternhub.json
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.14.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.14 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.