registry / @yoooclaw/phone-notifications / 1.16.2
@yoooclaw/phone-notifications@1.16.2
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe API key is used with the package’s own Yoooclaw service, and the connection-status report contains the key and connection state. The install script finding is a usage example, while the manifest has no install hook; inspected subprocess output is used for local plugin detection.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Plugin startup establishes the relay; gateway connection changes trigger status reports. CLI commands run when explicitly invoked.
Impact
Normal plugin service communication and local plugin detection; no unrelated credential collection or command-output exfiltration was identified.
Mechanism
The plugin sends its API key to Yoooclaw service endpoints for relay authentication and connection-status reporting. The CLI’s inspected subprocess reads local plugin-list output.
AI rationale
The API key is used with the package’s own Yoooclaw service, and the connection-status report contains the key and connection state. The install script finding is a usage example, while the manifest has no install hook; inspected subprocess output is used for local plugin detection.
Evidence
credentials.json.envplugins/phone-notifications/tunnel-status.jsonplugins/phone-notifications/relay-tunnel.lock
Network endpoints5
openclaw-service.yoooclaw.comopenclaw-service-dev.yoooclaw.comopenclaw-service-test.yoooclaw.comartifact.yoooclaw.comartifacts-test.yoooclaw.com
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a plugin entry point and CLI; its prepublishOnly script builds the package, and it declares no install hook.
- The plugin’s default service URLs use Yoooclaw’s own openclaw-service.yoooclaw.com host.
- On gateway connection changes, the plugin reports its API key with connection status to that service’s gateway-connect-status endpoint.
- The CLI runs openclaw plugins list locally and filters its output to detect a memory plugin.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
7 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2398: "cli.opt.sender": "Filter by sender",
L2399: "cli.opt.conversation_type": "Filter by conversation type (group/private)",
L2400: "cli.opt.keyword": "Search keyword in title and body",
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
1 Critical4 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltascripts/install-core.mjs
HighChild Processdist/bin/ntf.cjs
HighShellscripts/install-core.mjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
Low
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.16.2.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.16.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.