registry / @eventmodelers/cli / 2.0.16
@eventmodelers/cli@2.0.16
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 12d ago · by lpm-firewall-aiSource inspection found no concrete attack behavior. Scanner signals correspond to ordinary platform requests, explicit skill setup, and project-scoped build or test operations.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Normal CLI use, including an explicit agent-host setup command or modeling run.
Impact
No confirmed credential theft, unconsented agent-control mutation, or unrelated account action was established.
Mechanism
The CLI saves credentials for the configured platform and uses its base URL for authenticated requests. Selected host skill files and build-kit learnings are written for their stated product functions.
AI rationale
Source inspection found no concrete attack behavior. Scanner signals correspond to ordinary platform requests, explicit skill setup, and project-scoped build or test operations.
Network endpoints1
api.eventmodelers.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a CLI entrypoint and a test script, with no install lifecycle hook.
- Platform credentials default to the package’s own service; authenticated requests use the configured platform URL. The separate Mastra endpoint and key are operator-configured.
- Agent-host skill files are written by an explicit CLI command for selected hosts; generated stubs point to the package’s canonical skills.
- The AGENTS.md write projects recorded learnings into the build kit and does not write while there are no learnings.
- Inspected realtime locations subscribe to platform events and start the requested modeling loop; they do not establish an unrelated automatic account action.
- The flagged template commands are scoped to the project’s typecheck and database migration tests.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
11 flaggedstacks/supabase/templates/root/src/common/testHelpers.tsView file
1import {execSync} from 'child_process';
L2: import {readFileSync, writeFileSync, unlinkSync} from 'fs';
High
Child Process
Package source references child process execution.
stacks/supabase/templates/root/src/common/testHelpers.tsView on unpkg · L1shared/build-kit/ralph-exec.jsView file
119stdio: ['inherit', traced ? 'pipe' : 'inherit', 'inherit'],
L120: shell: true,
L121: env: { ...childEnv, RALPH_PROMPT_FILE: promptFile, ...extraEnv },
High
stacks/supabase/templates/root/server.tsView file
Findings
1 Critical7 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltacli.js
HighChild Processstacks/supabase/templates/root/src/common/testHelpers.ts
HighShellshared/build-kit/ralph-exec.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighCredential Redirect Persistencecli.js
HighExternal Ai Agent Control Surface Mutationcli.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/supabase/templates/root/server.ts
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @eventmodelers/cli@2.0.16.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@2.0.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.