portomatic@0.3.79
Local third-party app sandboxes for agents.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package enables installation telemetry by default, which warrants a warning under the review rules. The inspected install flow reports package and runtime metadata, and I found no evidence that it collects credentials or unrelated file contents.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Automatically on package installation through postinstall.
Impact
The collector receives package installation metadata and the connection's source IP address. No credential or unrelated file exfiltration was identified in the inspected path.
Mechanism
bin/install.mjs emits an install event and flushes it to the Portomatic telemetry endpoint. The reported fields include platform, architecture, runtime version, CI and launch metadata, and package-manager name.
AI rationale
The package enables installation telemetry by default, which warrants a warning under the review rules. The inspected install flow reports package and runtime metadata, and I found no evidence that it collects credentials or unrelated file contents.
Evidence
package.jsonbin/install.mjslib/telemetry/client/index.js~/.portomatic/npm-version~/.portomatic device identity and telemetry state
Network endpoints1
telemetry.portomatic.com/v1/events
Decision evidence
public snapshotAI called this Suspicious at 95.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- The package runs bin/install.mjs automatically through its postinstall lifecycle script.
- The install hook emits install metadata including platform, architecture, Node version, CI status, launch type, and package-manager name.
- Telemetry is posted by default to https://telemetry.portomatic.com/v1/events, with PORTOMATIC_TELEMETRY_URL available to override the destination.
Evidence against
- The telemetry client discloses collection on first runtime use and describes random device IDs, the source IP address, and its filtering of telemetry fields.
- The install hook sends package and runtime metadata; the inspected source does not show it sending credential values or file contents.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkWebSocket
HighEntropyStringsMinified
Source & flagged code
11 flaggedpackage.jsonView file
•scripts.postinstall = node bin/install.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node bin/install.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgproducts/linear/dist/src/_bundle/entry-0.jsView file
5${files.map(({name})=>join(directory,name)).join(`
L6: `)}`}async function connectorExample(name,out){return writeFiles(await connectorExampleFiles(name),out)}async function connectorExampleFiles(name){if(!connectorExamples.includes(na...
L7: `)+`
High
Child Process
Package source references child process execution.
Findings
1 Critical7 High5 Medium7 Low
CriticalAi Agent Control Hijacklib/telemetry/schemas/shape.json
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processproducts/linear/dist/src/_bundle/entry-0.js
HighSame File Env Network Executionproducts/linear/dist/src/_bundle/chunk-Z3R4Q76T.js
HighCommand Output Exfiltrationproducts/linear/dist/src/_bundle/chunk-Z3R4Q76T.js
HighEmbedded Payload Drop Executionproducts/slack/dist/src/_bundle/chunk-O5OR5FEA.js
HighCross File Remote Execution Contextproducts/linear/dist/src/_bundle/entry-0.js
HighSemantic Analysis Limitedproducts/linear/dist/src/_bundle/chunk-6IAOXHLT.js#virtual:string-array:round1
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to portomatic@0.3.79.
See all versions of portomatic for other recorded verdicts.
- Review the evidence and your use of portomatic@0.3.79 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.