registry / @eventmodelers/cli / 1.0.87
@eventmodelers/cli@1.0.87
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe manifest has no lifecycle hook, and the agent-host configuration path is an explicit CLI command that writes skill references. Reviewed process execution and network activity are tied to configured project/runtime operations; the inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes the CLI command or starts a packaged runtime.
Impact
No unconsented credential disclosure, install-time mutation, or other concrete attack effect was established.
Mechanism
The reviewed code writes agent-host skill references through init-agents, subscribes to the configured Supabase realtime service, or runs local project commands.
AI rationale
The manifest has no lifecycle hook, and the agent-host configuration path is an explicit CLI command that writes skill references. Reviewed process execution and network activity are tied to configured project/runtime operations; the inspected source does not establish malicious behavior.
Evidence
package.jsoncli.jsshared/build-kit/lib/adapters/supabase-realtime-adapter.jsstacks/bridge/templates/bridge/ralph-local-ai.jsstacks/bridge/templates/bridge/ralph-hook.jsshared/build-kit/code-export.mjsstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjslib/adapters/spec-kitty-adapter.js
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI entry point and declares no lifecycle script.
- Agent-host files are written by the explicit init-agents command, which exposes installed skills through thin stubs or copied skill files.
- The Supabase adapter authenticates with the supplied token and subscribes to a private broadcast channel.
- The bridge local-AI runner starts a local Node process; the bridge hook runs a configured command in the project directory.
- The reviewed build check invokes the project TypeScript compiler, while the Spec Kitty adapter fetches board data using configured credentials.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedstacks/bridge/templates/bridge/ralph-local-ai.jsView file
12import { startRalph } from './lib/ralph.js';
L13: import { spawn } from 'child_process';
L14: import { dirname, join, resolve } from 'path';
High
Child Process
Package source references child process execution.
stacks/bridge/templates/bridge/ralph-local-ai.jsView on unpkg · L12stacks/bridge/templates/bridge/ralph-hook.jsView file
68cwd: projectDir,
L69: shell: true,
L70: stdio: 'inherit',
High
Shell
Package source references shell execution.
stacks/bridge/templates/bridge/ralph-hook.jsView on unpkg · L68stacks/bridge/templates/bridge/ralph-static.jsView file
Findings
1 Critical6 High5 Medium3 Low
CriticalPrevious Version Dangerous Deltacli.js
HighChild Processstacks/bridge/templates/bridge/ralph-local-ai.js
HighShellstacks/bridge/templates/bridge/ralph-hook.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighExternal Ai Agent Control Surface Mutationcli.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/bridge/templates/bridge/ralph-static.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperstacks/axon/templates/root/mvnw.cmd
Affected versions and remediation
This report applies to @eventmodelers/cli@1.0.87.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@1.0.87 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.