registry / @remcp/runtime / 0.2.154
@remcp/runtime@0.2.154
First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest contains no install hooks, and the reviewed desktop-control and telemetry paths match the package’s local runtime functionality. Scanner signals did not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI starts the runtime; desktop actions occur when requested through its runtime API.
Impact
No confirmed attack surface was established in the inspected paths.
Mechanism
Desktop control uses local helpers or a Wayland portal session. Telemetry whitelists usage fields and forwards them as runtime notifications to the paired agent.
AI rationale
The manifest contains no install hooks, and the reviewed desktop-control and telemetry paths match the package’s local runtime functionality. Scanner signals did not establish malicious behavior.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI entry point and no install lifecycle hooks.
- Linux window control is exposed through an explicit action API.
- Wayland remote-desktop access uses the system portal session flow.
- Telemetry fields are limited to usage metrics and are forwarded through the paired runtime agent.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedsrc/extended/desktop-linux.mjsView file
1378package = @remcp/runtime; repositoryIdentity = remcp; dependency = @jellybrick/dbus-next
L1378: let dbus;
L1379: try { dbus = await import('@jellybrick/dbus-next'); } catch { return null; }
L1380: const bus = dbus.sessionBus();
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/extended/desktop-linux.mjsView on unpkg · L1378530export async function windowAction(args) {
const action = requireEnum(args.action, 'action', ['focus','minimize','maximize','restore','move','resize','move_resize','close']);
const row = await windowMatch(args);
co
Low
Ai Review Evidence
Linux window control is exposed through an explicit action API.
src/extended/desktop-linux.mjsView on unpkg · L530src/helpers/wayland_eis_sender.pyView file
Findings
2 High4 Medium6 Low
HighCopied Package Dependency Bridgesrc/extended/desktop-linux.mjs
HighPrevious Version Dangerous Deltasrc/wayland-remote-desktop.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersrc/helpers/wayland_eis_sender.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencesrc/extended/desktop-linux.mjs
Affected versions and remediation
This report applies to @remcp/runtime@0.2.154.
See all versions of @remcp/runtime for other recorded verdicts.
- Review the evidence and your use of @remcp/runtime@0.2.154 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.