registry / @eventmodelers/cli / 1.0.95
@eventmodelers/cli@1.0.95
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 17d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the reviewed agent configuration writes are tied to an explicit CLI command. Other flagged execution and network behavior is connected to user-configured or package-aligned product functions, with no concrete attack behavior found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Agent-host setup requires the user to invoke init-agents; bridge hooks require a configured hook command.
Impact
No malicious effect was identified in these paths.
Mechanism
The inspected code writes skill files, starts a bundled agent or configured command, checks project types, and syncs board data into a Spec Kitty brief.
AI rationale
The package has no install lifecycle hook, and the reviewed agent configuration writes are tied to an explicit CLI command. Other flagged execution and network behavior is connected to user-configured or package-aligned product functions, with no concrete attack behavior found.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI entry point and test script, with no install lifecycle hook.
- Agent-host files are created by the explicit init-agents command from installed skills; the host mapping selects stub directories or the shared skills convention.
- The Supabase adapter sets the caller-provided token on its configured realtime client.
- The bridge runner starts its bundled local agent; the shell hook runs only when a hook command is configured.
- The code export service handles posted configuration data, while the type-check helper runs the project’s own TypeScript check.
- The Spec Kitty adapter fetches board data using configured credentials and passes a generated brief to spec-kitty intake.
Evidence against
- Static hints flag network, shell, subprocess, dynamic loading, and package-manager behavior, but inspected source ties these to CLI features and user-configured operations.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
9 flaggedstacks/bridge/templates/bridge/ralph-local-ai.jsView file
12import { startRalph } from './lib/ralph.js';
L13: import { spawn } from 'child_process';
L14: import { dirname, join, resolve } from 'path';
High
Child Process
Package source references child process execution.
stacks/bridge/templates/bridge/ralph-local-ai.jsView on unpkg · L12stacks/bridge/templates/bridge/ralph-hook.jsView file
68cwd: projectDir,
L69: shell: true,
L70: stdio: 'inherit',
High
Shell
Package source references shell execution.
stacks/bridge/templates/bridge/ralph-hook.jsView on unpkg · L68stacks/bridge/templates/bridge/ralph-static.jsView file
Findings
1 Critical6 High5 Medium4 Low
CriticalPrevious Version Dangerous Deltacli.js
HighChild Processstacks/bridge/templates/bridge/ralph-local-ai.js
HighShellstacks/bridge/templates/bridge/ralph-hook.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighExternal Ai Agent Control Surface Mutationcli.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/bridge/templates/bridge/ralph-static.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperstacks/axon/templates/root/mvnw.cmd
Affected versions and remediation
This report applies to @eventmodelers/cli@1.0.95.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@1.0.95 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.