registry / @agentic-dev.ai/emo / 0.1.24
@agentic-dev.ai/emo@0.1.24
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe flagged network and credential behavior aligns with EMO’s declared agent and connector features, while cloudflared downloads come from Cloudflare’s official release host. The CLI’s autostart behavior applies to EMO’s own server, and the reviewed report path runs on an explicit report request.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user runs the CLI or explicitly invokes a connector, remote-access setup, or diagnostic report.
Impact
The reviewed code supports the package’s stated functionality. Diagnostic reports can include recent logs when the user submits a report.
Mechanism
The CLI starts EMO and can enable its own autostart; connectors send configured credentials to their corresponding services, and remote access uses Cloudflare Tunnel.
AI rationale
The flagged network and credential behavior aligns with EMO’s declared agent and connector features, while cloudflared downloads come from Cloudflare’s official release host. The CLI’s autostart behavior applies to EMO’s own server, and the reviewed report path runs on an explicit report request.
Evidence
EMO_HOME/state/autostart.jsonEMO_HOME/state/remote.jsonEMO_HOME/state/cloudflared/EMO_HOME/outputs/דיווחים/
Network endpoints5
api.sumit.co.ilapi.openai.comgithub.com/cloudflare/cloudflared releasesemo-hub.web.appfirestore.googleapis.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes EMO as a local AI-agent team and declares no lifecycle scripts.
- The CLI’s first regular start enables autostart for EMO’s own server; the user can disable it with `emo autostart off`.
- Cloudflared is downloaded from its official GitHub release host when needed for the remote-tunnel feature.
- Remote tunnel setup requires a user account and an explicit remote address request.
- Diagnostic reports, which may include recent logs, are sent through a user-triggered report route.
- The SUMIT connector sends configured SUMIT credentials to `api.sumit.co.il` for its accounting features.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
NoLicense
Source & flagged code
13 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
8import path from 'node:path';
L9: import { spawn, spawnSync } from 'node:child_process';
L10: import { fileURLToPath } from 'node:url';
High
139const [cmd = 'start', arg] = process.argv.slice(2);
L140: // Windows PowerShell 5.1 opens the console on an old code page and the Hebrew comes out garbled: switch it to UTF-8
L141: if (WIN && process.stdout.isTTY) { try { spawnSync('chcp', ['65001'], { shell: true, stdio: 'ignore' }); } catch {} }
Findings
3 Critical7 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellbin/emo.mjs
HighRemote System File Writelib/remote.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighSemantic Analysis Limitedmcp/sumit.mjs#virtual:normalized:round1
HighSecret Patternhub.json
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/emo.mjs
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.24.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.24 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.