registry / @yoooclaw/phone-notifications / 1.14.0
@yoooclaw/phone-notifications@1.14.0
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged credential flow sends this plugin’s provisioning token and status to Yoooclaw service endpoints, while the CLI command output is inspected locally. The manifest’s `prepublishOnly` hook builds the package and does not run as an install hook.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Plugin authentication/status activity during runtime and CLI commands when invoked.
Impact
No malicious impact found in the inspected paths.
Mechanism
Posts plugin credentials and status to configured Yoooclaw service routes; local CLI inspection parses command output without sending it elsewhere.
AI rationale
The flagged credential flow sends this plugin’s provisioning token and status to Yoooclaw service endpoints, while the CLI command output is inspected locally. The manifest’s `prepublishOnly` hook builds the package and does not run as an install hook.
Evidence
dist/index.cjsdist/bin/ntf.cjscredentials.json
Network endpoints6
openclaw-service-dev.yoooclaw.com/claw-manager/internal/claw-manager/instance/readyopenclaw-service-test.yoooclaw.com/claw-manager/internal/claw-manager/instance/readyopenclaw-service.yoooclaw.com/claw-manager/internal/claw-manager/instance/readyopenclaw-service.yoooclaw.com/api/message/messageBridge/plugin/gateway-connect-statusartifact.yoooclaw.com/pluginartifacts-test.yoooclaw.com/plugin
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the plugin entry and `ntf` CLI; its only lifecycle hook is `prepublishOnly`, which runs build steps rather than install-time code.
- The API host defaults to Yoooclaw development, test, or production services, and the plugin’s auth and status routes are under those services.
- The authentication exchange posts the plugin’s provisioning token, plugin code, version, and hostname to the configured instance-ready endpoint.
- The CLI runs `openclaw plugins list` and filters its output locally to detect a memory backend.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2190: }
L2191: function homeDir() {
L2192: return process.env.HOME || process.env.USERPROFILE || "/tmp";
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
2 Critical4 High4 Medium6 Low
CriticalCredential Exfiltrationdist/index.cjs
CriticalTrigger Reachable Dangerous Capabilitydist/index.cjs
HighChild Processdist/bin/ntf.cjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
HighTrigger Reachable Credential Exfiltrationdist/index.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.14.0.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.