@yoooclaw/phone-notifications@1.17.0
后台同步手机通知数据到本地存储，供 Agent 查询消费
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe source shows runtime update-report telemetry that can include error messages and log tails, alongside the package’s API key. The key goes to the package’s own service, so this does not establish credential theft, but the undisclosed collection of potentially identifying log data warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A report context is created when an API key is present; startup records a heartbeat and flushes pending reports.
Impact
Logs or error details may contain identifying information such as local paths, making this undisclosed runtime telemetry a privacy risk.
Mechanism
The reporter queues update events, including optional error messages and up to 40 log lines, then POSTs them with the package API key.
AI rationale
The source shows runtime update-report telemetry that can include error messages and log tails, alongside the package’s API key. The key goes to the package’s own service, so this does not establish credential theft, but the undisclosed collection of potentially identifying log data warrants a warning.
Evidence
dist/index.cjs
Network endpoints2
Environment-specific Yoooclaw plugin update-report endpoint at /api/message/messageBridge/plugin/update-reportartifact.yoooclaw.com/plugin (update base URL)
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Runtime update reports include update stage, result, versions, environment, and optional error messages or log tails.
- The report sender includes the package API key in the POST body.
- Report context targets the environment-specific plugin update-report endpoint and uses a device identity.
- A startup heartbeat records and flushes reports when a report context exists.
Evidence against
- The manifest has no install, preinstall, or postinstall hook; prepublishOnly only builds the package.
- The API key is the package’s own service credential and is sent to its configured plugin report endpoint.
- The manifest describes a phone-notification plugin and exposes its CLI as the package entry points.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggeddist/bin/ntf.cjsView file
785var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
High
67class CommanderError extends Error {
L68: constructor(exitCode, code, message) {
L69: super(message);
...
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
L787: var path = require("node:path");
...
L831: this._outputConfiguration = {
L832: writeOut: (str) => process2.stdout.write(str),
L833: writeErr: (str) => process2.stderr.write(str),
...
L2398: "cli.opt.sender": "Filter by sender",
L2399: "cli.opt.conversation_type": "Filter by conversation type (group/private)",
L2400: "cli.opt.keyword": "Search keyword in title and body",
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/bin/ntf.cjsView on unpkg · L67784var require_command = __commonJS((exports2) => {
L785: var EventEmitter = require("node:events").EventEmitter;
L786: var childProcess = require("node:child_process");
Findings
1 Critical3 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltascripts/install-core.mjs
HighChild Processdist/bin/ntf.cjs
HighCredential Redirect Persistencedist/index.cjs
HighCommand Output Exfiltrationdist/bin/ntf.cjs
MediumDynamic Requiredist/bin/ntf.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/index.cjs
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @yoooclaw/phone-notifications@1.17.0.
See all versions of @yoooclaw/phone-notifications for other recorded verdicts.
- Review the evidence and your use of @yoooclaw/phone-notifications@1.17.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.