emp-code@0.1.5
EMP CLI - coding agent with full-screen TUI (ink, clickable tool output, mouse, plan mode, markdown, vision) and 18 providers. Runs great on any light PC / weak CPU / old motherboard. Sessions, context, effort, web search, background tasks, revert.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package exposes a high-impact AI-agent command surface, so it warrants a warning. The inspected source does not establish malicious installation behavior or data theft.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user runs the emp command and the agent selects its command tools.
Impact
A malicious prompt or unsafe approval choice could cause project or system changes through the CLI.
Mechanism
AI-directed shell execution and detached process launch
AI rationale
The package exposes a high-impact AI-agent command surface, so it warrants a warning. The inspected source does not establish malicious installation behavior or data theft.
Evidence
bin/emp.jslib/tools.js
Decision evidence
public snapshotAI called this Suspicious at 81.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The user-invoked CLI starts an AI coding agent with shell and file-operation tools.
- The command runner passes supplied commands to a system shell.
- A detached-tool feature can keep a command running after the CLI session ends.
Evidence against
- package.json has no preinstall, install, or postinstall lifecycle hook.
- The inspected context module only estimates and compacts chat history.
- No source inspected shows credential harvesting, automatic exfiltration, or an install-time payload.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
9 flagged · loading sourcebin/emp.jsView file
1216try {
L1217: const { spawn } = require('child_process');
L1218: const ps = `
High
846if (!id) { console.log(' cancelled'); return defaultId; }
L847: const baseUrl = (await lifecycle.ask(' baseUrl (e.g. https://api.example.com): ')).trim();
L848: if (!/^https?:\/\//i.test(baseUrl)) { console.log(C.red + ' baseUrl must start with http(s)://' + C.r); return defaultId; }
...
L1216: try {
L1217: const { spawn } = require('child_process');
L1218: const ps = `
...
L1645: if (!fs.existsSync(abs)) { console.log(`File not found: ${abs}`); return; }
L1646: const data = fs.readFileSync(abs);
L1647: if (data.length > 8*1024*1024) { console.log(`Image too large ${(data.length/1024/1024).toFixed(1)}MB, max 8MB`); return; }
High
Remote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
bin/emp.jsView on unpkg · L8463L4: const readline = require('readline');
L5: const path = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/emp.jsView on unpkg · L3Findings
3 Critical4 High5 Medium5 Low
CriticalDownload Executelib/tools.js
CriticalTrigger Reachable Dangerous Capabilitylib/tools.js
CriticalPrevious Version Dangerous Deltalib/tools.js
HighChild Processbin/emp.js
HighShelllib/tools.js
HighRemote Agent Bridgebin/emp.js
HighSemantic Analysis Limitedlib/context.js#virtual:normalized:round1
MediumDynamic Requirebin/emp.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperinstall.sh
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
Affected versions and remediation
This report applies to emp-code@0.1.5.
See all versions of emp-code for other recorded verdicts.
- Review the evidence and your use of emp-code@0.1.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.