registry / @remcp/runtime / 0.2.196
@remcp/runtime@0.2.196
First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe new macOS file adds read-only local memory-pressure diagnostics, and the screenshot portal dependency is loaded only for screenshot capture. The default telemetry is disclosed, opt-out, and limited to usage fields sent through the paired agent.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
System metrics are gathered when the corresponding tool is called; D-Bus is loaded when screenshot capture is requested.
Impact
No source evidence of credential collection, unrelated data transfer, or unauthorized account or filesystem actions.
Mechanism
Reads local operating-system metrics and uses the desktop screenshot portal. Disclosed usage metrics are sent through the paired agent with a limited field whitelist.
AI rationale
The new macOS file adds read-only local memory-pressure diagnostics, and the screenshot portal dependency is loaded only for screenshot capture. The default telemetry is disclosed, opt-out, and limited to usage fields sent through the paired agent.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no install lifecycle hooks; its scripts are for start, check and test.
- Telemetry is disclosed, can be disabled, and is sent through the authenticated paired ReMCP agent; its fields are limited to tool names, timings, outcomes and coarse error classes.
- The added macOS memory-pressure code reads local system metrics as part of the get-system-info operation.
- The D-Bus dependency is dynamically loaded by the screenshot capture function, which performs a local desktop portal screenshot request.
Evidence against
- Usage telemetry is enabled by default, though the package discloses it and provides ways to disable it.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedsrc/screenshot-portal.mjsView file
249package = @remcp/runtime; repositoryIdentity = remcp; dependency = @jellybrick/dbus-next
L249: timeoutMs = DEFAULT_TIMEOUT_MS,
L250: loadDbus = () => import('@jellybrick/dbus-next'),
L251: } = {}) {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/screenshot-portal.mjsView on unpkg · L249src/helpers/wayland_eis_sender.pyView file
•path = src/helpers/wayland_eis_sender.py
kind = build_helper
sizeBytes = 15744
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/helpers/wayland_eis_sender.pyView on unpkgsrc/tools/files-screenshots.mjs#virtual:normalized:round1View file
Findings
3 High4 Medium5 Low
HighCopied Package Dependency Bridgesrc/screenshot-portal.mjs
HighSemantic Analysis Limitedsrc/tools/files-screenshots.mjs#virtual:normalized:round1
HighPrevious Version Dangerous Deltasrc/tools/system.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersrc/helpers/wayland_eis_sender.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @remcp/runtime@0.2.196.
See all versions of @remcp/runtime for other recorded verdicts.
- Review the evidence and your use of @remcp/runtime@0.2.196 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.