registry / @eventmodelers/cli / 1.0.56
@eventmodelers/cli@1.0.56
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, Cratis, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 17d ago · by lpm-firewall-aiSource inspection found no lifecycle hooks or concrete attack behavior. The flagged execution and agent-configuration features are tied to user-invoked CLI workflows, so the scanner signals do not support a malicious verdict.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The relevant behaviors require invoking CLI setup or runtime commands, or running a configured bridge hook.
Impact
No unconsented install-time control-surface change or unrelated credential disclosure was established.
Mechanism
The CLI installs skills and agent-host stubs, runs configured tools, and connects its adapters to the described services.
AI rationale
Source inspection found no lifecycle hooks or concrete attack behavior. The flagged execution and agent-configuration features are tied to user-invoked CLI workflows, so the scanner signals do not support a malicious verdict.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI and dependencies, with no lifecycle hook configured.
- cli.js writes thin command stubs for other agent hosts; it exposes that behavior through the explicit init-agents command.
- The flagged Claude runner is invoked through the CLI’s run command and supplies a configured board token to Claude.
- The Supabase adapter subscribes to broadcast events and sets the supplied auth token on the Supabase client.
- The flagged bridge hook runs a configured command and passes it batch metadata; the spec-kitty adapter invokes the named CLI with an intake brief.
- The flagged code exporter starts an HTTP server on its configured local port; the TypeScript check runs the project’s compiler.
Evidence against
- The reviewed source shows no install-time or import-time mutation of agent settings, dependency script approvals, or credential transfer to an unrelated recipient.
- The agent-host configuration and external command behaviors are associated with explicit CLI setup or runtime actions.
Behavioral surface
ChildProcess
Source & flagged code
9 flaggedstacks/bridge/templates/bridge/ralph-claude.jsView file
8import { startRalph, loadLocalConfig } from './lib/ralph.js';
L9: import { spawn } from 'child_process';
L10: import { dirname, resolve } from 'path';
High
Child Process
Package source references child process execution.
stacks/bridge/templates/bridge/ralph-claude.jsView on unpkg · L8stacks/bridge/templates/bridge/ralph-hook.jsView file
68cwd: projectDir,
L69: shell: true,
L70: stdio: 'inherit',
High
Shell
Package source references shell execution.
stacks/bridge/templates/bridge/ralph-hook.jsView on unpkg · L68stacks/bridge/templates/bridge/ralph-static.jsView file
Findings
1 Critical6 High5 Medium3 Low
CriticalPrevious Version Dangerous Deltacli.js
HighChild Processstacks/bridge/templates/bridge/ralph-claude.js
HighShellstacks/bridge/templates/bridge/ralph-hook.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighExternal Ai Agent Control Surface Mutationcli.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/bridge/templates/bridge/ralph-static.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperstacks/axon/templates/root/mvnw.cmd
Affected versions and remediation
This report applies to @eventmodelers/cli@1.0.56.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@1.0.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.