registry / @agentic-dev.ai/emo / 0.1.3
@agentic-dev.ai/emo@0.1.3
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the flagged network and execution behavior is tied to EMO features and configured services. Financial writes require approval, while report submission is explicitly requested.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Normal application use; some integrations require their API key, and financial writes require an approval token.
Impact
No malicious or unauthorized impact identified in the inspected source.
Mechanism
The package sends requests to named services for their respective integrations. Reports are submitted through an explicit report request.
AI rationale
The manifest has no install lifecycle hook, and the flagged network and execution behavior is tied to EMO features and configured services. Financial writes require approval, while report submission is explicitly requested.
Network endpoints5
api.typesafe.aiapi.sumit.co.ilapi.openai.comfirestore.googleapis.comsecuretoken.googleapis.com
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install, preinstall, or postinstall script.
- Jev is described as an optional TypeSafe service for quick decisions and automatic model selection; its server call requires a configured API key and can be disabled.
- SUMIT starts in read-only mode; issuing a document requires a signed approval token for its draft.
- Problem reports are sent only through an explicit report request.
Evidence against
- When Jev is configured, it sends task text to api.typesafe.ai for classification and model selection.
- With OmniTask configured, the server periodically syncs selected project updates to the configured OmniTask service.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
14 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
8import path from 'node:path';
L9: import { spawn, spawnSync } from 'node:child_process';
L10: import { fileURLToPath } from 'node:url';
High
8
Findings
3 Critical8 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellserver.mjs
HighSandbox Evasion Gated Capabilityserver.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighShips High Entropy Blobpublic/models/hey_jarvis_v0.1.onnx
HighSemantic Analysis Limitedmcp/gmail.mjs#virtual:normalized:round1
HighSecret Patternhub.json
MediumNetwork
Medium
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.3.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.