portomatic@0.3.74
Slack for testing bots, with the real Slack client.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe source confirms automatic installation metadata reporting and runtime forwarding of local server exchanges to the package's telemetry service. The product-aligned, disclosed destination does not establish malicious intent, but the request and response capture warrants a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The emulator's HTTP server handles requests while telemetry is configured.
Impact
Local API content and partial token or secret values may be disclosed to the telemetry recipient.
Mechanism
The server captures request and response bodies and submits telemetry batches to the configured endpoint, defaulting to telemetry.portomatic.com.
AI rationale
The source confirms automatic installation metadata reporting and runtime forwarding of local server exchanges to the package's telemetry service. The product-aligned, disclosed destination does not establish malicious intent, but the request and response capture warrants a warning.
Evidence
products/slack/dist/src/http/server.jsproducts/slack/dist/src/telemetry/http.jslib/telemetry/client/index.js
Network endpoints1
telemetry.portomatic.com/v1/events
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs bin/install.mjs automatically after installation.
- The install hook reports operating system, architecture, Node version, environment classification, and package manager, then flushes telemetry.
- Telemetry records device and session identifiers and posts batches to telemetry.portomatic.com by default; an environment variable can override the endpoint.
- The local HTTP server passes each request to a capture helper that records request and response bodies for telemetry.
- Token-like values are redacted to their first eight characters, which leaves a partial credential and does not prevent transfer of other request or response content.
- The README discloses Portomatic telemetry and states that local server requests and responses are sent to the collector.
Evidence against
- The telemetry destination is Portomatic's product-branded collector, and the README discloses the collection.
- The install event contains environment metadata; the inspected hook does not collect project files or credentials.
Behavioral surface
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.postinstall = node bin/install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/install.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgproducts/slack/dist/src/cli/process.jsView file
1var P=Object.defineProperty;var r=(e,n)=>P(e,"name",{value:n,configurable:!0});import{spawn as x}from"node:child_process";import{setTimeout as L}from"node:timers/promises";import{W...
L2: const { workerData } = require('node:worker_threads');
High
Child Process
Package source references child process execution.
products/slack/dist/src/cli/process.jsFindings
1 Critical5 High5 Medium6 Low
CriticalAi Agent Control Hijackproducts/slack/dist/src/core/commands/views.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processproducts/slack/dist/src/cli/process.js
HighSame File Env Network Executionproducts/slack/dist/src/testing/index.js
HighCommand Output Exfiltrationproducts/slack/dist/src/testing/index.js
HighSemantic Analysis Limitedproducts/slack/dist/src/client/identity-assets.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requireproducts/slack/dist/src/connectors/source-hooks.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
Affected versions and remediation
This report applies to portomatic@0.3.74.
See all versions of portomatic for other recorded verdicts.
- Review the evidence and your use of portomatic@0.3.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.