registry / @agentic-dev.ai/emo / 0.1.7
@agentic-dev.ai/emo@0.1.7
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged network and credential flows serve the package's integrations and authenticated hub features. Support reports include user text and diagnostics, but the source routes them through an explicit report action; default autostart relaunches the app itself.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the `emo` CLI; reports are sent only when the user invokes the report action.
Impact
Expected app operation; a submitted report shares the user's report text and diagnostic details with the vendor.
Mechanism
Configured credentials are sent to their corresponding service APIs. A submitted support report is saved locally and sent to the hub using the user's session.
AI rationale
The flagged network and credential flows serve the package's integrations and authenticated hub features. Support reports include user text and diagnostics, but the source routes them through an explicit report action; default autostart relaunches the app itself.
Evidence
outputs/דיווחיםEMO_HOME/state/license.json
Network endpoints2
api.sumit.co.ilfirestore.googleapis.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- There are no preinstall, install, or postinstall scripts; the manifest exposes a user-run CLI.
- Problem reports are sent through an explicit report action and saved locally; the report includes the user's text and diagnostic data.
- The SUMIT connector sends its configured credentials to SUMIT's API for that connector's finance operations.
- The CLI enables autostart after a regular first start, to relaunch EMO itself.
Evidence against
- Submitting a problem report sends the user's text, platform details, recent errors, and supervisor log tail to the vendor hub.
- A regular first start creates login persistence by default, though the CLI documents an autostart-off command.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
14 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
8import path from 'node:path';
L9: import { spawn, spawnSync } from 'node:child_process';
L10: import { fileURLToPath } from 'node:url';
High
8
Findings
4 Critical7 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
CriticalPrevious Version Dangerous Deltaserver.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellserver.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighShips High Entropy Blobpublic/models/hey_jarvis_v0.1.onnx
HighSemantic Analysis Limitedmcp/gmail.mjs#virtual:normalized:round1
HighSecret Patternhub.json
MediumNetwork
Medium
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.7.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.7 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.