registry / @agentic-dev.ai/emo / 0.1.20
@agentic-dev.ai/emo@0.1.20
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected credential flows use configured credentials with their corresponding services, and the flagged binary download is from Cloudflare’s official release path. No install hook or unrelated automatic credential collection was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI starts the app; connectors make requests when used, and reports are sent after an explicit report action.
Impact
No malicious behavior identified in the inspected source paths.
Mechanism
Configured service credentials go to their respective services. An optional Cloudflare tunnel downloads cloudflared from its official GitHub release path.
AI rationale
The inspected credential flows use configured credentials with their corresponding services, and the flagged binary download is from Cloudflare’s official release path. No install hook or unrelated automatic credential collection was identified.
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall hook; its scripts are test and build only.
- The SUMIT connector reads SUMIT credentials and sends them to its stated service, https://api.sumit.co.il.
- The OmniTask connector uses OMNITASK_URL or its service default, https://ws.shw.co.il:2356, for API requests with OMNITASK_API_KEY.
- The optional cloudflared binary is downloaded from Cloudflare’s official GitHub releases path.
- Support reports include logs and identifying details, but the source shows them sent through a report flow invoked by an explicit report action.
- The hub license client updates the user’s own record with last-seen time and package version.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
13 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
8import path from 'node:path';
L9: import { spawn, spawnSync } from 'node:child_process';
L10: import { fileURLToPath } from 'node:url';
High
139const [cmd = 'start', arg] = process.argv.slice(2);
L140: // Windows PowerShell 5.1 opens the console on an old code page and the Hebrew comes out garbled: switch it to UTF-8
L141: if (WIN && process.stdout.isTTY) { try { spawnSync('chcp', ['65001'], { shell: true, stdio: 'ignore' }); } catch {} }
Findings
3 Critical7 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellbin/emo.mjs
HighRemote System File Writelib/remote.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighSemantic Analysis Limitedmcp/sumit.mjs#virtual:normalized:round1
HighSecret Patternhub.json
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/emo.mjs
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.20.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.