registry / @yoooclaw/phone-notifications / 1.16.0
@yoooclaw/phone-notifications@1.16.0
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install hook, and the flagged shell pipeline is displayed as installer usage text. The reviewed API key flows target the package's own service hosts for its stated plugin features.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Plugin startup for relay registration; user-invoked plugin or CLI features for other API requests.
Impact
No malicious impact identified in the reviewed source.
Mechanism
The plugin reads its own API key and uses it to authenticate to configured yoooclaw.com service endpoints.
AI rationale
The manifest has no install hook, and the flagged shell pipeline is displayed as installer usage text. The reviewed API key flows target the package's own service hosts for its stated plugin features.
Network endpoints5
openclaw-service-dev.yoooclaw.comopenclaw-service-test.yoooclaw.comopenclaw-service.yoooclaw.comartifact.yoooclaw.comartifacts-test.yoooclaw.com
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest points to a plugin entry point and CLI; its prepublishOnly script runs a build, with no install lifecycle hook shown.
- The configured development, test, and production service hosts are under yoooclaw.com.
- The API key is loaded from YOOOCLAW_API_KEY or the plugin's credentials.json.
- The relay uses that key as connection authentication, and the gateway status report sends it to the environment-specific product API.
Evidence against
- The installer shell-pipeline commands appear in printUsage output; the inspected excerpt shows them as displayed instructions.
- The reviewed credential flows target the package's own service hosts.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2396: "cli.opt.sender": "Filter by sender",
L2397: "cli.opt.conversation_type": "Filter by conversation type (group/private)",
L2398: "cli.opt.keyword": "Search keyword in title and body",
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltascripts/install-core.mjs
HighChild Processdist/bin/ntf.cjs
HighShellscripts/install-core.mjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.16.0.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.16.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.