registry / @yoooclaw/phone-notifications / 1.13.5
@yoooclaw/phone-notifications@1.13.5
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest exposes a plugin and CLI without a registry install hook. The reviewed credential flow uses a key explicitly configured for this package and sends it to the package’s YoooClaw service for connection status; no unrelated credential exfiltration was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The plugin reports connection status when its gateway connects or disconnects; update checks run through the plugin’s update checker.
Impact
The reviewed flows support the package’s stated functionality; no unrelated credential collection or exfiltration was identified.
Mechanism
The configured YoooClaw API key accompanies connection status to the YoooClaw service. Update checks request version information from the package artifact host or npm registry.
AI rationale
The manifest exposes a plugin and CLI without a registry install hook. The reviewed credential flow uses a key explicitly configured for this package and sends it to the package’s YoooClaw service for connection status; no unrelated credential exfiltration was found.
Evidence
dist/index.cjspackage.json
Network endpoints4
openclaw-service.yoooclaw.comartifact.yoooclaw.comartifacts-test.yoooclaw.comregistry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest routes imports to dist/index.cjs and exposes dist/bin/ntf.cjs as the CLI.
- The only lifecycle hook shown is prepublishOnly, which runs the build.
- The CLI stores an API key entered through the explicit ntf auth set-api-key command.
- The configured key is sent with connection status to the package’s YoooClaw service endpoint.
Evidence against
- The plugin uses the configured key for its relay and connection-status functions, consistent with its phone-notification purpose.
- The update checker uses the package’s artifact host and npm’s registry for package-version information.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2190: }
L2191: function homeDir() {
L2192: return process.env.HOME || process.env.USERPROFILE || "/tmp";
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
2 Critical4 High4 Medium6 Low
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighChild Processdist/bin/ntf.cjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.13.5.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.13.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.