registry / @emgeebee/phone_cli / 3.18.6
@emgeebee/phone_cli@3.18.6
mats useful cli scripts
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic inspection found suspicious primitives, but they are package-aligned CLI behavior: allowlisted local subcommand spawning, API clients, and user config/cache handling. There is no install-time execution or concrete evidence of unconsented credential/file exfiltration, arbitrary code execution, persistence, destructive action, or AI-agent control mutation.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs a CLI command such as phone-cli fuel, octo, ball, w, cmd, or status.
Impact
Expected command output and local cache/config updates; no confirmed unconsented exfiltration or execution.
Mechanism
User-invoked CLI API requests and local config/cache handling
AI rationale
Static inspection found suspicious primitives, but they are package-aligned CLI behavior: allowlisted local subcommand spawning, API clients, and user config/cache handling. There is no install-time execution or concrete evidence of unconsented credential/file exfiltration, arbitrary code execution, persistence, destructive action, or AI-agent control mutation.
Evidence
package.jsondist/phone_cli.jsdist/fuel.jsdist/octo.jsdist/cmd.jsdist/ball.jsdist/w.jsdist/r.jsdist/status.js~/.phone_cli.jsonfuel-cli cache files under platform cache directory.env read by dotenv in fuel/r commands
Network endpoints12
api.octopus.energy/v1www.fuel-finder.service.gov.ukapi.postcodes.iowww.bbc.co.ukweather-broker-cdn.api.bbci.co.ukweb-cdn.api.bbci.co.uk
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has no install/preinstall/postinstall lifecycle hooks; bin entries point to dist CLI files.
- dist/phone_cli.js only dispatches an allowlisted subcommand by spawning bundled local scripts with node.
- dist/fuel.js uses env/config credentials for Fuel Finder and caches API data; child_process hits are bundled commander code.
- dist/octo.js reads ~/.phone_cli.json Octopus credentials and sends Basic auth only to https://api.octopus.energy/v1.
- Network calls are aligned with CLI features: weather, sports, rail, fuel, Octopus, home automation endpoints.
- No evidence of credential harvesting, arbitrary shell execution, persistence, destructive behavior, or AI-agent control writes.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsObfuscatedUrlStrings
Source & flagged code
5 flaggeddist/fuel.jsView file
1194var EventEmitter = require("node:events").EventEmitter;
L1195: var childProcess = require("node:child_process");
L1196: var path = require("node:path");
High
38* Constructs the CommanderError class
L39: * @param {number} exitCode suggested exit code which could be used with process.exit
L40: * @param {string} code an id string representing the error
...
L1194: var EventEmitter = require("node:events").EventEmitter;
L1195: var childProcess = require("node:child_process");
L1196: var path = require("node:path");
...
L1244: this._outputConfiguration = {
L1245: writeOut: (str) => process3.stdout.write(str),
L1246: writeErr: (str) => process3.stderr.write(str),
...
L1286: * @returns {Command[]}
L1287: * @private
L1288: */
High
Sandbox Evasion Gated Capability
Source gates dangerous network, credential, or execution behavior behind CI, host, platform, time, or geo fingerprint checks.
dist/fuel.jsView on unpkg · L3838Cross-file remote execution chain: dist/fuel.js spawns dist/r.js; helper contains network access plus dynamic code execution.
L38: * Constructs the CommanderError class
L39: * @param {number} exitCode suggested exit code which could be used with process.exit
L40: * @param {string} code an id string representing the error
...
L1194: var EventEmitter = require("node:events").EventEmitter;
L1195: var childProcess = require("node:child_process");
L1196: var path = require("node:path");
...
L1244: this._outputConfiguration = {
L1245: writeOut: (str) => process3.stdout.write(str),
L1246: writeErr: (str) => process3.stderr.write(str),
...
L1286: * @returns {Command[]}
L1287: * @private
L1288: */
Findings
1 Critical4 High3 Medium5 Low
CriticalPrevious Version Dangerous Deltadist/octo.js
HighChild Processdist/fuel.js
HighSandbox Evasion Gated Capabilitydist/fuel.js
HighCross File Remote Execution Contextdist/fuel.js
HighRuntime Package Installdist/phone_cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @emgeebee/phone_cli@3.18.6.
See all versions of @emgeebee/phone_cli for other recorded verdicts.
- Review the evidence and your use of @emgeebee/phone_cli@3.18.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.