@recallai/desktop-sdk@2.0.43
Recall Desktop SDK
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe install hook fetches SDK assets from the package’s own release host, and no import-time attack was identified. I classify the default full logging as suspicious because it captures serialized command payloads and the inspected package documentation does not describe this behavior or its remote handling.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
An application calls init() without selecting a different telemetry mode.
Impact
Command parameters may be included in diagnostic logs; the scope and remote handling of those logs are not established by the inspected JavaScript.
Mechanism
The SDK defaults to full logging, serializes command payloads into log messages, and sends log messages to its native process. The inspected JavaScript does not establish which log contents the native process sends over the network.
AI rationale
The install hook fetches SDK assets from the package’s own release host, and no import-time attack was identified. I classify the default full logging as suspicious because it captures serialized command payloads and the inspected package documentation does not describe this behavior or its remote handling.
Evidence
index.jsdesktop_sdk_macos.tardesktop_sdk_win32.tarFrameworksgstreamer-1.0
Network endpoints2
api.recall.airecallai-desktop-sdk-releases.s3.us-east-1.amazonaws.com
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The install hook downloads platform SDK archives from the package’s Recall release bucket and extracts them into package directories.
- Importing index.js does not start the native process; the documented init() call starts it.
- init() defaults telemetryMode to full, and command logging serializes command payloads into log messages passed to the native SDK process.
Evidence against
- The install-time download is from the package’s own release host and is limited to platform SDK assets.
- The full logging behavior can be disabled with telemetryMode: off or anonymizeLogging: true.
- No unrelated collector or credential theft was identified in the inspected JavaScript.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.install = node ./setup.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgindex.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @recallai/desktop-sdk@2.0.41
matchedIdentity = npm:QHJlY2FsbGFpL2Rlc2t0b3Atc2Rr:2.0.41
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
High
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
index.jsView on unpkgsetup.jsView file
8const nativeUrlBase = "https://recallai-desktop-sdk-releases.s3.us-east-1.amazonaws.com";
async function downloadFile(url, path) {
const stream = fs.createWriteStream(path);
co
Findings
2 High5 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltaindex.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencesetup.js
MediumSuspicious Lifecycle Evidencesetup.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @recallai/desktop-sdk@2.0.43.
See all versions of @recallai/desktop-sdk for other recorded verdicts.
- Review the evidence and your use of @recallai/desktop-sdk@2.0.43 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.