@remcp/runtime@0.2.163
First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe flagged dependency is declared and used for desktop portal functionality, while the screenshot tool is part of the local runtime. The inspected telemetry is limited to operational metrics and is sent through the paired MCP server; no concrete attack behavior was established.
Decision evidence
public snapshot- package.json has no install lifecycle hook and declares the D-Bus dependency used by the runtime.
- The screenshot portal loads the declared D-Bus dependency as part of its capture function.
- Screenshot capture is performed by the runtime tool and uses the desktop portal on Linux Wayland.
- Telemetry fields are limited to tool names, timings, outcomes, coarse error classes, and counts.
- Telemetry is sent through the running MCP server notification.
Source & flagged code
5 flaggedPackage metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/screenshot-portal.mjsView on unpkg · L249The screenshot portal loads the declared D-Bus dependency as part of its capture function.
src/screenshot-portal.mjsView on unpkg · L250Findings
Affected versions and remediation
This report applies to @remcp/runtime@0.2.163.
See all versions of @remcp/runtime for other recorded verdicts.
- Review the evidence and your use of @remcp/runtime@0.2.163 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.