registry / @yoooclaw/phone-notifications / 1.16.1
@yoooclaw/phone-notifications@1.16.1
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe runtime credential flow uses the package’s own API key with its YoooClaw service, and saving the key is an explicit CLI action. The flagged README token mention is CI documentation, while the declared prepublish hook builds the package and does not run as an install hook.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The host loads the plugin, or a user invokes an `ntf` command; saving an API key requires the explicit `ntf auth set-api-key` command.
Impact
No unintended credential collection, data exfiltration, persistence, or account action was identified.
Mechanism
The plugin reads its own API key and uses configured YoooClaw service URLs for its relay and notification operations. The artifact host is used for plugin updates.
AI rationale
The runtime credential flow uses the package’s own API key with its YoooClaw service, and saving the key is an explicit CLI action. The flagged README token mention is CI documentation, while the declared prepublish hook builds the package and does not run as an install hook.
Evidence
dist/index.cjsdist/bin/ntf.cjspackage.jsonREADME.md
Network endpoints5
openclaw-service.yoooclaw.comopenclaw-service-test.yoooclaw.comopenclaw-service-dev.yoooclaw.comartifact.yoooclaw.comartifacts-test.yoooclaw.com
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a plugin entry point and an `ntf` CLI for the phone notifications package.
- The plugin reads its own API key from `YOOOCLAW_API_KEY` or its local `credentials.json`; the CLI has an explicit command to save that key.
- The plugin’s service URLs are built from YoooClaw service hosts, and the key is used for the plugin’s relay credential.
Evidence against
- The manifest’s `prepublishOnly` script builds the package; it is not an install hook.
- The README’s `NPM_TOKEN` mention is in CI/CD secrets documentation, not runtime code.
- The reviewed command execution and network requests serve CLI and notification-service functions; no unrelated data transfer or account action was identified.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2396: "cli.opt.sender": "Filter by sender",
L2397: "cli.opt.conversation_type": "Filter by conversation type (group/private)",
L2398: "cli.opt.keyword": "Search keyword in title and body",
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltascripts/install-core.mjs
HighChild Processdist/bin/ntf.cjs
HighShellscripts/install-core.mjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.16.1.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.16.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.