registry / @remcp/runtime / 0.2.151
@remcp/runtime@0.2.151
First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe inspected source supports the package’s stated local MCP runtime purpose and shows no malicious behavior. Its opt-out telemetry includes host-derived runtime metadata, a transparency concern that does not establish an attack.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI runtime starts when invoked; the manifest defines no install lifecycle hook.
Impact
No malicious effect was identified. Telemetry includes host-derived runtime naming and platform metadata, but the source shows an opt-out setting and paired-agent routing.
Mechanism
Document tools operate on caller-supplied paths with safe-path handling. The optional DBus display inventory runs only in a Wayland session; telemetry is forwarded through the paired agent and can be disabled.
AI rationale
The inspected source supports the package’s stated local MCP runtime purpose and shows no malicious behavior. Its opt-out telemetry includes host-derived runtime metadata, a transparency concern that does not establish an attack.
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to a local runtime CLI and defines no preinstall, install, or postinstall hook.
- Document reading resolves the caller-supplied path through safe-path handling and supports specific document formats.
- Document processing applies entry and byte limits and uses no-follow read flags.
- The Linux display helper imports the declared DBus dependency only during Wayland sessions and returns if the optional import fails.
- Telemetry events whitelist fields, can be disabled, and are forwarded through the paired-agent notification.
- Telemetry also includes runtime and platform metadata and a runtime name that defaults to the machine hostname.
Evidence against
- The telemetry payload includes a host-derived name and platform details, beyond the tool-event fields described in the CLI help.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
Source & flagged code
5 flaggedsrc/extended/desktop-linux.mjsView file
1378package = @remcp/runtime; repositoryIdentity = remcp; dependency = @jellybrick/dbus-next
L1378: let dbus;
L1379: try { dbus = await import('@jellybrick/dbus-next'); } catch { return null; }
L1380: const bus = dbus.sessionBus();
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/extended/desktop-linux.mjsView on unpkg · L1378src/helpers/wayland-eis-helper.pyView file
•path = src/helpers/wayland-eis-helper.py
kind = build_helper
sizeBytes = 23624
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/helpers/wayland-eis-helper.pyView on unpkgsrc/extended/documents.mjs#virtual:normalized:round1
Findings
2 High4 Medium6 Low
HighCopied Package Dependency Bridgesrc/extended/desktop-linux.mjs
HighSemantic Analysis Limitedsrc/extended/documents.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersrc/helpers/wayland-eis-helper.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @remcp/runtime@0.2.151.
See all versions of @remcp/runtime for other recorded verdicts.
- Review the evidence and your use of @remcp/runtime@0.2.151 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.