@ory/goose@1.7.0
Ory plugin for Goose (Block's open-source agent CLI): scaffolding skills, a local Ory instance, and authentication, authorization, and audit for every tool call
AI Security Review
scanned 4d ago · by lpm-firewall-aiThis is undisclosed install-time telemetry with an identifying organizational detail, so it warrants a warning. The source does not show credential theft or collection of the full email address.
Static reason
No blocking static signals were detected.
Trigger
Installation runs the reova dependency's postinstall hook; @ory/goose enables analytics in its package manifest.
Impact
The telemetry can disclose the installer's organization domain without a consent prompt.
Mechanism
The hook reads the Git email domain from ~/.gitconfig and includes it in install telemetry sent to https://telemetry.reo.dev/data.
AI rationale
This is undisclosed install-time telemetry with an identifying organizational detail, so it warrants a warning. The source does not show credential theft or collection of the full email address.
Evidence
package.json.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/package.json.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/src/collector.js.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/src/tracker.js.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/index.js~/.gitconfig
Network endpoints1
telemetry.reo.dev/data
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package manifest enables reova analytics and configures https://telemetry.reo.dev/data.
- reova declares a postinstall hook that runs its tracker during installation.
- The tracker sends collected install data to the configured endpoint.
- The payload includes the Git email domain, which the collector reads from ~/.gitconfig.
Evidence against
- The package itself declares no install lifecycle scripts.
- The collector sends the email domain rather than the full email address and uses a fresh random install ID.
Behavioral surface
Filesystem
Source & flagged code
5 flaggedpackage.jsonView file
51"endpoint": "https://telemetry.reo.dev/data"
},
"main": "dist/index.js",
"types": "dist/index.d.ts",
"exports": {
".": {
"types": ".
Medium
Ai Review Evidence
The package manifest enables reova analytics and configures https://telemetry.reo.dev/data.
package.jsonView on unpkg · L51.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/package.jsonView file
7"postinstall": "node index.js",
"test": "node test-local-install.js"
},
"keywords": [
"analytics",
"install-analyt
Medium
Suspicious Lifecycle Evidence
reova declares a postinstall hook that runs its tracker during installation.
.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/package.jsonView on unpkg · L7Findings
5 Medium2 Low
MediumAi Review Evidencepackage.json
MediumSuspicious Lifecycle Evidence.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/package.json
MediumAi Review Evidence.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/src/tracker.js
MediumAi Review Evidence.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/src/collector.js
MediumAi Review Evidence.lpm-dependency-evidence-0e06765e-2044-42df-b889-ea428ed50917/1/npm-linux/src/collector.js
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to @ory/goose@1.7.0.
See all versions of @ory/goose for other recorded verdicts.
- Review the evidence and your use of @ory/goose@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.