registry / @yoooclaw/phone-notifications / 1.14.2
@yoooclaw/phone-notifications@1.14.2
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install-time hook, and the credential exchange uses the plugin’s configured link secret with its own YoooClaw service to obtain and save the plugin API key. The installer’s shell commands are documented for explicit user execution.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Plugin startup can provision credentials when a link_secret is configured and no matching API key is already saved.
Impact
No unrelated credential collection, exfiltration, or install-time execution was identified.
Mechanism
It sends that secret and plugin metadata to the YoooClaw instance-ready endpoint and stores the returned API key. Installer shell commands appear as user-run instructions.
AI rationale
The manifest has no install-time hook, and the credential exchange uses the plugin’s configured link secret with its own YoooClaw service to obtain and save the plugin API key. The installer’s shell commands are documented for explicit user execution.
Network endpoints2
openclaw-service.yoooclaw.com/claw-manager/internal/claw-manager/instance/readyartifact.yoooclaw.com/plugin
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest’s only lifecycle script is prepublishOnly, which runs the build; it declares no install, preinstall, or postinstall hook.
- Provisioning skips the exchange when an API key already exists and no link secret is configured, or when the saved link-secret hash is unchanged.
- When provisioning runs, it posts the configured link secret and plugin metadata to the service’s instance-ready endpoint, then saves the returned API key locally.
- The production service host is openclaw-service.yoooclaw.com, matching the package’s YoooClaw service purpose.
Evidence against
- The plugin can perform the credential exchange automatically during startup when configured with a link secret.
- The request also includes the machine hostname.
- The shipped installer documents commands that pipe scripts from artifact.yoooclaw.com to a shell; these are user-run instructions, not lifecycle behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
7 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2190: }
L2191: function homeDir() {
L2192: return process.env.HOME || process.env.USERPROFILE || "/tmp";
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltascripts/install-core.mjs
HighChild Processdist/bin/ntf.cjs
HighShellscripts/install-core.mjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.14.2.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.14.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.