registry / @agentic-dev.ai/emo / 0.1.6
@agentic-dev.ai/emo@0.1.6
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged network and credential use matches the package’s hub authentication and user-configured connectors. Reports are explicitly submitted through the report flow, and the manifest has no install lifecycle scripts.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
EMO startup for hub renewal; explicit user report submission or connector tool use for other requests.
Impact
No evidence of unrelated credential collection or exfiltration, concealed execution, or unrequested account actions.
Mechanism
Uses the stored hub refresh token with Google/Firebase endpoints, submits reports to the configured hub, and sends SUMIT credentials to SUMIT’s API.
AI rationale
The flagged network and credential use matches the package’s hub authentication and user-configured connectors. Reports are explicitly submitted through the report flow, and the manifest has no install lifecycle scripts.
Evidence
state/license.jsonoutputs/דיווחים
Network endpoints4
www.googleapis.comsecuretoken.googleapis.comfirestore.googleapis.comapi.sumit.co.il
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install or lifecycle scripts; its scripts are for tests and building.
- Problem reports are saved locally and sent to the hub only when the report flow is invoked; the report code says it includes no conversation content.
- The report endpoint requires a POST with user-provided report text.
- SUMIT credentials are sent to SUMIT’s own API endpoint as part of connector requests.
Evidence against
- The first normal start enables sign-in autostart by default, with an `emo autostart off` option.
- The server periodically renews the user’s hub session and sends a last-seen timestamp and package version to the hub.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
15 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @agentic-dev.ai/emo@0.1.5
matchedIdentity = npm:QGFnZW50aWMtZGV2LmFpL2Vtbw:0.1.5
similarity = 0.913
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/emo.mjsView on unpkgFindings
4 Critical8 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
CriticalPrevious Version Dangerous Deltabin/emo.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellserver.mjs
HighSandbox Evasion Gated Capabilityserver.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighShips High Entropy Blobpublic/models/hey_jarvis_v0.1.onnx
HighSemantic Analysis Limitedmcp/gmail.mjs#virtual:normalized:round1
HighSecret Patternhub.json
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.6.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.