registry / @remcp/runtime / 0.2.225
@remcp/runtime@0.2.225
First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe flagged dependency bridge serves the screenshot portal, and the package's runtime telemetry is disclosed, opt-out, and routed through the user's authenticated ReMCP account. No install-time contact or malicious data collection was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
Runtime startup enables telemetry by default; events are buffered and flushed during runtime operation.
Impact
No collection of credentials, files, commands, or tool output was identified; the telemetry includes the configured runtime name, which defaults to the hostname.
Mechanism
Whitelisted usage events travel as an MCP notification through the already-authenticated paired agent to the user's ReMCP account. The runtime provides opt-out controls.
AI rationale
The flagged dependency bridge serves the screenshot portal, and the package's runtime telemetry is disclosed, opt-out, and routed through the user's authenticated ReMCP account. No install-time contact or malicious data collection was identified.
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a first-party ReMCP local device runtime; its scripts are ordinary start, check, and test commands, with no install hook.
- The runtime discloses usage metrics, offers opt-out controls, and says metrics go to the user's own ReMCP account through its already-authenticated paired agent, with no third party or install ping.
- Telemetry events are limited to usage fields and exclude file paths, commands, arguments, and tool output; the payload includes runtime name, which defaults to the machine hostname.
- The screenshot portal loads the D-Bus dependency only when its screenshot capture function is called.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedsrc/screenshot-portal.mjsView file
259package = @remcp/runtime; repositoryIdentity = remcp; dependency = @jellybrick/dbus-next
L259: timeoutMs = DEFAULT_TIMEOUT_MS,
L260: loadDbus = () => import('@jellybrick/dbus-next'),
L261: } = {}) {
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
src/screenshot-portal.mjsView on unpkg · L259src/helpers/wayland_eis_sender.pyView file
•path = src/helpers/wayland_eis_sender.py
kind = build_helper
sizeBytes = 15744
magicHex = [redacted]
Medium
Ships Build Helper
Package ships non-JavaScript build or shell helper files.
src/helpers/wayland_eis_sender.pyView on unpkgsrc/tools/files-screenshots.mjs#virtual:normalized:round1View file
Findings
2 High4 Medium6 Low
HighCopied Package Dependency Bridgesrc/screenshot-portal.mjs
HighSemantic Analysis Limitedsrc/tools/files-screenshots.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpersrc/helpers/wayland_eis_sender.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @remcp/runtime@0.2.225.
See all versions of @remcp/runtime for other recorded verdicts.
- Review the evidence and your use of @remcp/runtime@0.2.225 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.