registry / @agentic-dev.ai/emo / 0.1.8
@agentic-dev.ai/emo@0.1.8
EMO by Agentic-dev: your own team of AI agents, on your computer, on your Claude subscription.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the reviewed credentials are routed to their intended services. Support uploads require a user report action, while default startup persistence runs the package's own server and fits its purpose.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User starts EMO, signs in, invokes a connector, or submits a support report; the regular installation also enables its own login startup after first start.
Impact
Expected product operations; the report contains identity and diagnostic logs, and startup persistence is enabled by default for the app itself.
Mechanism
Connector credentials go to their corresponding service, while reports go to the product hub after a user submits them. The launcher configures the EMO server to run at login.
AI rationale
The package has no install lifecycle hook, and the reviewed credentials are routed to their intended services. Support uploads require a user report action, while default startup persistence runs the package's own server and fits its purpose.
Evidence
EMO_HOME/state/license.jsonEMO_HOME/state/autostart.jsonEMO_HOME/outputs/דיווחים/*.txt~/Library/LaunchAgents/ai.agentic-dev.emo.plist
Network endpoints6
api.sumit.co.ilwww.googleapis.comsecuretoken.googleapis.comfirestore.googleapis.comapi.openai.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no install, preinstall, or postinstall hook; its scripts are limited to test and build.
- The SUMIT connector documents read-only behavior by default and separates document issuing into a write mode requiring approval.
- SUMIT credentials are sent in requests to the connector's hard-coded SUMIT API host, api.sumit.co.il.
- Hub authentication uses Google and Firebase endpoints for token renewal and account data; the support report flow is user-triggered and stores a local copy before sending.
- After a user starts the regular installation, the launcher can configure login startup for its own EMO server.
Evidence against
- The first regular start enables the app's own startup persistence by default; users can turn it off.
- A user-submitted support report includes account identity and recent errors and log lines, so the report contains diagnostic data beyond the user's written description.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
14 flaggedhub.jsonView file
4patternName = google_api_key
severity = high
line = 4
High
4patternName = google_api_key
severity = high
line = 4
High
bin/emo.mjsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @agentic-dev.ai/emo@0.1.7
matchedIdentity = npm:QGFnZW50aWMtZGV2LmFpL2Vtbw:0.1.7
similarity = 0.943
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/emo.mjsView on unpkgFindings
4 Critical7 High5 Medium6 Low
CriticalSame File Env Network Executionserver.mjs
CriticalHardcoded Runtime Data Exfiltrationmcp/sumit.mjs
CriticalCredential Exfiltrationserver.mjs
CriticalPrevious Version Dangerous Deltabin/emo.mjs
HighHigh Secrethub.json
HighChild Processbin/emo.mjs
HighShellbin/emo.mjs
HighTrigger Reachable Persistencebin/emo.mjs
HighShips High Entropy Blobpublic/models/hey_jarvis_v0.1.onnx
HighSemantic Analysis Limitedmcp/gmail.mjs#virtual:normalized:round1
HighSecret Patternhub.json
MediumNetwork
Medium
Affected versions and remediation
This report applies to @agentic-dev.ai/emo@0.1.8.
See all versions of @agentic-dev.ai/emo for other recorded verdicts.
- Review the evidence and your use of @agentic-dev.ai/emo@0.1.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.