registry / portomatic / 0.3.68
portomatic@0.3.68
⚠ Under reviewSlack for testing bots, with the real Slack client.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe automatic install telemetry path is real, but the declared telemetry dependency's implementation is unavailable in the inspected snapshot. Its request destination and consent behavior therefore remain unresolved, so the source does not support either a clean finding or a confirmed attack.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing the package runs its postinstall hook.
Impact
The contents and recipient of any telemetry request cannot be verified from the available source.
Mechanism
The hook imports the telemetry dependency, emits an installation event with system and environment metadata, and flushes the client. The dependency implementation is unavailable in the inspected snapshot.
AI rationale
The automatic install telemetry path is real, but the declared telemetry dependency's implementation is unavailable in the inspected snapshot. Its request destination and consent behavior therefore remain unresolved, so the source does not support either a clean finding or a confirmed attack.
Evidence
package.jsonbin/install.mjsproducts/slack/dist/src/telemetry/index.js~/.portomatic/npm-version
Decision evidence
public snapshotAI called this Manual Review at 79.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest runs bin/install.mjs automatically after installation and declares @portomatic/telemetry as a bundled dependency.
- The install hook creates an installation telemetry client and submits operating system, architecture, Node version, environment-derived fields, and package manager data; it then flushes the client.
- The hook imports the telemetry implementation, but that dependency's implementation was unavailable in the inspected snapshot, so its destination, transmitted fields, and effective consent controls could not be verified.
Evidence against
- The inspected hook submits installation metadata rather than Slack account credentials, and it records a local package version file.
- The telemetry client is unavailable in this snapshot, leaving the actual request destination and consent behavior unresolved.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node bin/install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/install.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgproducts/slack/dist/src/cli/process.jsView file
1var S=Object.defineProperty;var r=(e,n)=>S(e,"name",{value:n,configurable:!0});import{spawn as G}from"node:child_process";import{setTimeout as L}from"node:timers/promises";import{o...
High
Child Process
Package source references child process execution.
products/slack/dist/src/cli/process.jsView on unpkg · L1Findings
1 Critical6 High5 Medium6 Low
CriticalAi Agent Control Hijackproducts/slack/dist/src/core/commands/views.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processproducts/slack/dist/src/cli/process.js
HighSame File Env Network Executionproducts/slack/dist/src/testing/index.js
HighCommand Output Exfiltrationproducts/slack/dist/src/testing/index.js
HighTrigger Reachable Command Output Exfiltrationproducts/slack/dist/src/testing/index.js
HighSemantic Analysis Limitedproducts/slack/dist/src/client/identity-assets.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requireproducts/slack/dist/src/connectors/source-hooks.js
MediumNetwork
Affected versions and remediation
This report applies to portomatic@0.3.68.
See all versions of portomatic for other recorded verdicts.
- Review the evidence and your use of portomatic@0.3.68 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.