portomatic@0.3.75
Slack for testing bots, with the real Slack client.
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package automatically sends device-linked install metadata and captured local HTTP exchange content to its product telemetry service, creating a concrete data exposure risk. The collector is package-aligned and the runtime discloses the collection, so the evidence supports a warning rather than a malware block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Package installation runs the postinstall hook; starting the emulator activates HTTP exchange capture.
Impact
The service receives device-linked installation metadata and potentially sensitive local request and response content; secret-like values are shortened to eight characters.
Mechanism
The installer emits environment metadata, while the local HTTP server records request and response details for telemetry batches sent to the default service endpoint.
AI rationale
The package automatically sends device-linked install metadata and captured local HTTP exchange content to its product telemetry service, creating a concrete data exposure risk. The collector is package-aligned and the runtime discloses the collection, so the evidence supports a warning rather than a malware block.
Evidence
package.jsonbin/install.mjslib/telemetry/client/index.jslib/telemetry/client/identity.jsproducts/slack/dist/src/http/server.jsproducts/slack/dist/src/telemetry/http.jsproducts/slack/dist/src/emulator.js.portomatic/device_id.portomatic/npm-version
Network endpoints1
telemetry.portomatic.com/v1/events
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest runs bin/install.mjs during postinstall, where the package emits install metadata and flushes telemetry.
- Install telemetry includes operating system, architecture, Node version, CI status, and package manager. The client links events to a persistent device identifier.
- The local HTTP server captures requests and responses, including URLs, headers, and bodies, and emits them as telemetry events.
- The client posts telemetry batches to https://telemetry.portomatic.com/v1/events by default.
- The client prints a first-run notice describing device-linked telemetry and request/response collection; its redaction keeps the first eight characters of sensitive values. The flagged suggested-prompts method is gated on an app manifest feature and an explicit API operation.
Evidence against
- The recipient is Portomatic's product telemetry service, and the runtime prints a disclosure. The source truncates sensitive values instead of sending them intact; these facts reduce the concern but do not prevent request and response content from being collected.
Behavioral surface
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.postinstall = node bin/install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/install.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgproducts/slack/dist/src/cli/process.jsView file
1var P=Object.defineProperty;var r=(e,n)=>P(e,"name",{value:n,configurable:!0});import{spawn as x}from"node:child_process";import{setTimeout as L}from"node:timers/promises";import{W...
L2: const { workerData } = require('node:worker_threads');
High
Child Process
Package source references child process execution.
products/slack/dist/src/cli/process.jsFindings
2 Critical5 High5 Medium6 Low
CriticalAi Agent Control Hijackproducts/slack/dist/src/core/commands/views.js
CriticalPrevious Version Dangerous Deltaproducts/slack/dist/src/http/auth.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processproducts/slack/dist/src/cli/process.js
HighSame File Env Network Executionproducts/slack/dist/src/testing/index.js
HighCommand Output Exfiltrationproducts/slack/dist/src/testing/index.js
HighSemantic Analysis Limitedproducts/slack/dist/src/client/identity-assets.js#virtual:normalized:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requireproducts/slack/dist/src/connectors/source-hooks.js
MediumNetwork
Affected versions and remediation
This report applies to portomatic@0.3.75.
See all versions of portomatic for other recorded verdicts.
- Review the evidence and your use of portomatic@0.3.75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.