registry / @agentic-dev.ai/emo / 0.1.17
@agentic-dev.ai/emo@0.1.17
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe flagged credential and network flows use corresponding service endpoints, while hub reporting is limited to operational metadata after sign-in. There is no install hook, and the default autostart behavior is tied to the user running the product’s CLI.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The CLI starts the local EMO service when the user runs it; integrations act when configured or used.
Impact
The inspected behavior supports the package’s stated AI-agent command-center purpose; no unrelated collection or unauthorized account action was identified.
Mechanism
Credentials are sent to their corresponding services. Hub reporting is gated on sign-in and sends operational metadata; the CLI’s optional persistence starts EMO itself.
AI rationale
The flagged credential and network flows use corresponding service endpoints, while hub reporting is limited to operational metadata after sign-in. There is no install hook, and the default autostart behavior is tied to the user running the product’s CLI.
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle hook; its scripts are limited to test and build.
- Hub activity is documented as whitelisted operational metadata, excluding prompts, messages, results, file names, and other content.
- The SUMIT connector sends its configured account credentials to SUMIT’s own API host, api.sumit.co.il.
- Hub activity reporting runs only for a signed-in, licensed install with an email address.
- The CLI’s autostart configures this product to start at login after the user runs its start command.
Evidence against
- A regular installed CLI enables autostart on first start unless disabled; this persists the product’s own server, and can be turned off with its autostart command.
- The package includes credential-bearing integrations and remote access features; the inspected flows send credentials to their configured or corresponding services.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
Source & flagged code
15 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
8import path from 'node:path';
L9: import { spawn, spawnSync } from 'node:child_process';
L10: import { fileURLToPath } from 'node:url';
High
139const [cmd = 'start', arg] = process.argv.slice(2);
L140: // Windows PowerShell 5.1 opens the console on an old code page and the Hebrew comes out garbled: switch it to UTF-8
L141: if (WIN && process.stdout.isTTY) { try { spawnSync('chcp', ['65001'], { shell: true, stdio: 'ignore' }); } catch {} }
Findings
4 Critical8 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
CriticalPrevious Version Dangerous Deltaserver.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellbin/emo.mjs
HighRemote System File Writelib/remote.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighShips High Entropy Blobpublic/models/hey_jarvis_v0.1.onnx
HighSemantic Analysis Limitedmcp/sumit.mjs#virtual:normalized:round1
HighSecret Patternhub.json
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.17.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.17 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.