registry / @eventmodelers/cli / 2.0.22
@eventmodelers/cli@2.0.22
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe flagged credential and agent-configuration behavior serves the CLI’s stated purpose and is user-directed: credentials are configured for the Eventmodelers service, while custom endpoints and prototype setup require explicit options. The package has no install hook; the observed startup network request is a cached npm version lookup.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs a CLI command; credential setup prompts when credentials are missing. Prototype configuration changes require init --prototype.
Impact
Expected platform requests and user-selected local agent configuration changes; no concealed credential redirection, unauthorized account action, or install-time behavior was found.
Mechanism
The CLI uses the configured base URL for Eventmodelers requests, defaults it to api.eventmodelers.ai, and permits a custom Mastra endpoint only with explicit options. The update check queries the npm registry.
AI rationale
The flagged credential and agent-configuration behavior serves the CLI’s stated purpose and is user-directed: credentials are configured for the Eventmodelers service, while custom endpoints and prototype setup require explicit options. The package has no install hook; the observed startup network request is a cached npm version lookup.
Evidence
~/.eventmodelers/boards/<board>.json~/.eventmodelers/config.json.claude/settings.local.jsonCLAUDE.md
Network endpoints3
api.eventmodelers.airegistry.npmjs.orgapi.franconia.ai (documented example for a user-supplied Mastra endpoint)
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes cli.js as the CLI and declares only a test script; it has no install lifecycle hook.
- Credential setup prompts the user to paste or enter Eventmodelers credentials, and the default API host is api.eventmodelers.ai.
- A custom Mastra endpoint is accepted only when the user selects the Mastra agent and supplies --endpoint.
- Prototype setup writes Claude configuration only through the explicit init --prototype command.
- The startup version check queries the npm registry and caches the result; it does not send package or machine data.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
12 flaggedstacks/supabase/templates/root/src/common/testHelpers.tsView file
1import {execSync} from 'child_process';
L2: import {readFileSync, writeFileSync, unlinkSync} from 'fs';
High
Child Process
Package source references child process execution.
stacks/supabase/templates/root/src/common/testHelpers.tsView on unpkg · L1shared/build-kit/ralph-exec.jsView file
119stdio: ['inherit', traced ? 'pipe' : 'inherit', 'inherit'],
L120: shell: true,
L121: env: { ...childEnv, RALPH_PROMPT_FILE: promptFile, ...extraEnv },
High
stacks/supabase/templates/root/server.tsView file
Findings
1 Critical8 High5 Medium5 Low
CriticalPrevious Version Dangerous Deltacli.js
HighChild Processstacks/supabase/templates/root/src/common/testHelpers.ts
HighShellshared/build-kit/ralph-exec.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighCredential Redirect Persistencecli.js
HighExternal Ai Agent Control Surface Mutationcli.js
HighTrigger Reachable External Ai Agent Control Surface Mutationextensions/prototype/index.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/supabase/templates/root/server.ts
Affected versions and remediation
This report applies to @eventmodelers/cli@2.0.22.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@2.0.22 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.