registry / @eventmodelers/cli / 2.0.28
@eventmodelers/cli@2.0.28
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential flow is for the Eventmodelers platform: the API defaults to its own host, and users are prompted to paste credentials obtained from the account page. The agent configuration write is setup behavior that denies board write tools, and the manifest declares no install lifecycle hook.
Static reason
One or more suspicious static signals were detected.
Trigger
Credential handling occurs when a user runs setup or modeling commands; prototype configuration changes occur during prototype setup.
Impact
No unrelated credential disclosure or harmful automatic action was identified.
Mechanism
The CLI sends its token to the configured Eventmodelers API base URL. Prototype setup writes a Claude permissions deny list for board write tools.
AI rationale
The flagged credential flow is for the Eventmodelers platform: the API defaults to its own host, and users are prompted to paste credentials obtained from the account page. The agent configuration write is setup behavior that denies board write tools, and the manifest declares no install lifecycle hook.
Evidence
.claude/settings.local.jsonCLAUDE.md.claude/skills/
Network endpoints2
api.eventmodelers.aiapp.eventmodelers.ai
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes cli.js as its command entry and declares no install lifecycle hook.
- The platform API defaults to https://api.eventmodelers.ai, and the CLI sends its token to the configured base URL for the platform config request.
- The CLI tells users to obtain credentials from the Eventmodelers account page and paste them when choosing board credentials.
- The prototype extension writes Claude permissions that deny board write tools during its setup.
Evidence against
- No source evidence shows credentials automatically sent to an unrelated fixed host.
- The credential prompt and board selection are part of explicit CLI use.
- The flagged agent configuration write denies board write capabilities rather than granting them.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
11 flaggedstacks/supabase/templates/root/src/common/testHelpers.tsView file
1import {execSync} from 'child_process';
L2: import {readFileSync, writeFileSync, unlinkSync} from 'fs';
High
Child Process
Package source references child process execution.
stacks/supabase/templates/root/src/common/testHelpers.tsView on unpkg · L1shared/build-kit/ralph-exec.jsView file
121stdio: ['inherit', traced ? 'pipe' : 'inherit', 'inherit'],
L122: shell: true,
L123: env: { ...childEnv, RALPH_PROMPT_FILE: promptFile, ...extraEnv },
High
stacks/supabase/templates/root/server.tsView file
Findings
8 High5 Medium5 Low
HighChild Processstacks/supabase/templates/root/src/common/testHelpers.ts
HighShellshared/build-kit/ralph-exec.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighCredential Redirect Persistencecli.js
HighExternal Ai Agent Control Surface Mutationcli.js
HighTrigger Reachable External Ai Agent Control Surface Mutationextensions/prototype/index.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/supabase/templates/root/server.ts
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @eventmodelers/cli@2.0.28.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@2.0.28 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.