registry / @yoooclaw/phone-notifications / 1.13.4
@yoooclaw/phone-notifications@1.13.4
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential flow uses a configured JvsClaw link secret to obtain this plugin's API key from Yoooclaw's service, and later requests use that key for the plugin's service. The package has no install hook that runs on registry installation, and the reviewed CLI process call probes the local OpenClaw plugin list.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Plugin runtime startup may provision credentials when a JvsClaw link_secret is configured; CLI update checks run when the user invokes the update command.
Impact
No unauthorized credential transfer, unrelated account action, or harmful install-time behavior was found.
Mechanism
The configured link_secret is exchanged for an API key at the Yoooclaw service, and later service requests authenticate with that API key. The CLI's process execution includes a local OpenClaw plugin listing probe.
AI rationale
The flagged credential flow uses a configured JvsClaw link secret to obtain this plugin's API key from Yoooclaw's service, and later requests use that key for the plugin's service. The package has no install hook that runs on registry installation, and the reviewed CLI process call probes the local OpenClaw plugin list.
Network endpoints5
openclaw-service-dev.yoooclaw.comopenclaw-service-test.yoooclaw.comopenclaw-service.yoooclaw.comartifact.yoooclaw.comartifacts-test.yoooclaw.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies a phone notification sync plugin and exposes its plugin entry point and CLI; its lifecycle script is prepublishOnly, not an install hook.
- The JvsClaw credential exchange uses a configured link_secret and skips provisioning when an existing API key is unchanged or no link secret is present.
- The exchange sends that link_secret, plugin version, and hostname to the package's configured JvsClaw service endpoint; subsequent API requests use the package API key.
- The fixed update endpoints are Yoooclaw artifact hosts; no unrelated credential collection or command-output exfiltration was identified.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2190: }
L2191: function homeDir() {
L2192: return process.env.HOME || process.env.USERPROFILE || "/tmp";
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
2 Critical4 High4 Medium6 Low
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighChild Processdist/bin/ntf.cjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.13.4.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.13.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.