registry / @eventmodelers/cli / 2.0.29
@eventmodelers/cli@2.0.29
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe manifest has no install hook, and the flagged credential flow obtains a user-pasted Eventmodelers token and sends it to the configured service endpoint. Agent configuration changes are part of explicit prototype setup and are project-scoped.
Static reason
One or more suspicious static signals were detected.
Trigger
User-run CLI commands; prototype setup prompts before project edits when interactive.
Impact
Expected authenticated board operations and project setup; no unrelated credential forwarding or unsolicited account action was identified.
Mechanism
The CLI stores user-provided Eventmodelers credentials locally and uses them with the configured service base URL. Prototype setup writes project-local Claude skills and rules and denies board-write tools.
AI rationale
The manifest has no install hook, and the flagged credential flow obtains a user-pasted Eventmodelers token and sends it to the configured service endpoint. Agent configuration changes are part of explicit prototype setup and are project-scoped.
Evidence
~/.eventmodelers/boards/<board>.json.claude/settings.local.json.claude/skills/CLAUDE.md
Network endpoints2
api.eventmodelers.aiuser-configured base URL
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI binary and declares only a test script; it has no install lifecycle hook.
- The CLI directs users to obtain Eventmodelers credentials from its account page and paste them into the CLI.
- The CLI sends the token to the configured base URL, which defaults to api.eventmodelers.ai.
- Prototype setup writes project-local Claude configuration when the user invokes setup; it adds board-write tools to Claude's deny permissions.
Evidence against
- The package includes process execution in project test and build helpers, consistent with their stated roles.
- The scanner's credential and agent-configuration findings resolve to user-directed Eventmodelers CLI flows and project setup.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
11 flaggedstacks/supabase/templates/root/src/common/testHelpers.tsView file
1import {execSync} from 'child_process';
L2: import {readFileSync, writeFileSync, unlinkSync} from 'fs';
High
Child Process
Package source references child process execution.
stacks/supabase/templates/root/src/common/testHelpers.tsView on unpkg · L1shared/build-kit/ralph-exec.jsView file
121stdio: ['inherit', traced ? 'pipe' : 'inherit', 'inherit'],
L122: shell: true,
L123: env: { ...childEnv, RALPH_PROMPT_FILE: promptFile, ...extraEnv },
High
stacks/supabase/templates/root/server.tsView file
Findings
8 High5 Medium5 Low
HighChild Processstacks/supabase/templates/root/src/common/testHelpers.ts
HighShellshared/build-kit/ralph-exec.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighCredential Redirect Persistencecli.js
HighExternal Ai Agent Control Surface Mutationcli.js
HighTrigger Reachable External Ai Agent Control Surface Mutationextensions/prototype/index.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/supabase/templates/root/server.ts
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @eventmodelers/cli@2.0.29.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@2.0.29 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.