registry / portomatic / 0.3.69
portomatic@0.3.69
Slack for testing bots, with the real Slack client.
AI Security Review
scanned 7d ago · by lpm-firewall-aiSource inspection found default package-aligned installation telemetry with bounded fields and opt-outs, plus normal caller-driven testing and signed runtime updates. The flagged command-output behavior is local test diagnostics, and the inspected views export does not establish agent-control mutation.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Installing the package with npm runs its postinstall hook.
Impact
The service receives installation metadata and a persistent device identifier; inspected sources show no message content, tokens, or payloads in this event.
Mechanism
The hook emits platform and usage metadata through the telemetry client, which posts batches to the package telemetry endpoint.
AI rationale
Source inspection found default package-aligned installation telemetry with bounded fields and opt-outs, plus normal caller-driven testing and signed runtime updates. The flagged command-output behavior is local test diagnostics, and the inspected views export does not establish agent-control mutation.
Evidence
bin/install.mjslib/telemetry/client/index.jslib/telemetry/client/identity.jslib/telemetry/schemas/common.json
Network endpoints1
telemetry.portomatic.com/v1/events
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json runs bin/install.mjs as a postinstall hook; that hook emits installation metadata through the package telemetry client.
- Telemetry is disabled when PORTOMATIC_TELEMETRY_DISABLED=1 or DO_NOT_TRACK=1 and posts to the package’s telemetry endpoint by default.
- The install event schema limits collected fields to platform, runtime, CI, launch method, and package manager metadata.
- The flagged testing helper runs a supplied command, captures its output for local test diagnostics, and sends control requests to its configured emulator URL.
- The flagged views module exports Slack view and interaction helpers; the inspected excerpt shows no agent configuration mutation.
- The runtime updater verifies the release signature and archive integrity before launching the downloaded runtime.
- The bundled dependency excerpt identifies CodeMirror as a JavaScript code editor distributed under an MIT license.
- The Slack helpers generate integration-bot IDs, look up agent sessions by key, and route streamed content through block and content normalizers.
Evidence against
Behavioral surface
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.postinstall = node bin/install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/install.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgproducts/slack/dist/src/cli/process.jsView file
1var S=Object.defineProperty;var r=(e,n)=>S(e,"name",{value:n,configurable:!0});import{spawn as G}from"node:child_process";import{setTimeout as L}from"node:timers/promises";import{o...
High
Child Process
Package source references child process execution.
products/slack/dist/src/cli/process.jsView on unpkg · L1Findings
2 Critical6 High5 Medium6 Low
CriticalAi Agent Control Hijackproducts/slack/dist/src/core/commands/views.js
CriticalPrevious Version Dangerous Deltaproducts/slack/dist/src/testing/index.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processproducts/slack/dist/src/cli/process.js
HighSame File Env Network Executionproducts/slack/dist/src/testing/index.js
HighCommand Output Exfiltrationproducts/slack/dist/src/testing/index.js
HighTrigger Reachable Command Output Exfiltrationproducts/slack/dist/src/testing/index.js
HighSemantic Analysis Limitedproducts/slack/dist/src/client/identity-assets.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Require
Affected versions and remediation
This report applies to portomatic@0.3.69.
See all versions of portomatic for other recorded verdicts.
- Review the evidence and your use of portomatic@0.3.69 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.