registry / @eventmodelers/cli / 2.0.38
@eventmodelers/cli@2.0.38
Eventmodelers CLI — real-time Claude agent + skills for Claude Code, for any stack (Node, Supabase, Axon, OpenCQRS, UmaDB, Kurrent, or modeling-only)
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install hook, and the reviewed credential, agent-configuration, and shell behaviors are tied to explicit CLI use or user configuration. The scanner leads are consistent with the package’s CLI and build-kit purpose.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runs when invoked; prototype setup and agent runs require user commands or configuration.
Impact
No automatic credential exfiltration, unrelated account action, or install-time agent configuration change was identified.
Mechanism
The reviewed flows use the Eventmodelers API by default, prompt for credentials during setup, and write project-local agent settings for the requested prototype feature.
AI rationale
The manifest has no install hook, and the reviewed credential, agent-configuration, and shell behaviors are tied to explicit CLI use or user configuration. The scanner leads are consistent with the package’s CLI and build-kit purpose.
Evidence
.claude/settings.local.jsonCLAUDE.md~/.eventmodelers/boards/<board>.json
Network endpoints2
api.eventmodelers.aiapi.franconia.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no install lifecycle scripts; the `eventmodelers` executable points to `cli.js`.
- The default API host is `https://api.eventmodelers.ai`.
- Prototype setup is an explicit `init --prototype` option that asks for board credentials.
- Prototype setup writes project skills and denies board write tools in the project’s Claude settings.
- The flagged TypeScript check runs the project’s own `npx tsc --noEmit` command.
- The external agent command is used only when configured through `RALPH_EXEC_CMD` or `localAi.exec`.
Evidence against
- The CLI can prompt for credentials and save them for later use.
- Prototype setup writes to `.claude/settings.local.json` and `CLAUDE.md` within the project.
- The CLI supports a user-selected Mastra endpoint; Franconia appears as an endpoint example.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
Source & flagged code
11 flaggedstacks/supabase/templates/root/src/common/testHelpers.tsView file
1import {execSync} from 'child_process';
L2: import {readFileSync, writeFileSync, unlinkSync} from 'fs';
High
Child Process
Package source references child process execution.
stacks/supabase/templates/root/src/common/testHelpers.tsView on unpkg · L1shared/build-kit/ralph-exec.jsView file
121stdio: ['inherit', traced ? 'pipe' : 'inherit', 'inherit'],
L122: shell: true,
L123: env: { ...childEnv, RALPH_PROMPT_FILE: promptFile, ...extraEnv },
High
stacks/supabase/templates/root/server.tsView file
Findings
8 High5 Medium5 Low
HighChild Processstacks/supabase/templates/root/src/common/testHelpers.ts
HighShellshared/build-kit/ralph-exec.js
HighSame File Env Network Executionshared/build-kit/code-export.mjs
HighCredential Redirect Persistencecli.js
HighExternal Ai Agent Control Surface Mutationcli.js
HighTrigger Reachable External Ai Agent Control Surface Mutationextensions/prototype/index.js
HighRuntime Package Installstacks/supabase/templates/build-kit/lib/checks/90-tsc-build.cjs
HighSemantic Analysis Limitedlib/adapters/spec-kitty-adapter.js#virtual:normalized:round1
MediumDynamic Requirestacks/supabase/templates/root/server.ts
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to @eventmodelers/cli@2.0.38.
See all versions of @eventmodelers/cli for other recorded verdicts.
- Review the evidence and your use of @eventmodelers/cli@2.0.38 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.