registry / ravenry-app / 0.1.0
ravenry-app@0.1.0
A local board for following every Claude Code session on your Mac, answering agents from one page (cmux or iTerm2), and keeping project briefs.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package is a local Claude Code session dashboard, and the reviewed process execution, file access, and network calls support that purpose. The flagged alert traffic goes to user-configured services and only runs when alerts are enabled; no unrelated credential exfiltration or hidden install-time action was found.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
User starts the CLI or configures alerts in the board.
Impact
No malicious impact identified.
Mechanism
The launcher starts a local server; alerts use a configured channel only when enabled. No unrelated credential collection or outbound collector was found.
AI rationale
The package is a local Claude Code session dashboard, and the reviewed process execution, file access, and network calls support that purpose. The flagged alert traffic goes to user-configured services and only runs when alerts are enabled; no unrelated credential exfiltration or hidden install-time action was found.
Network endpoints5
api.telegram.orgdiscord.comdiscordapp.comhooks.slack.comntfy.sh
Decision evidence
public snapshotAI called this Clean at 96.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and ordinary npm scripts, with no install lifecycle hook.
- Setup asks before writing Ravenry’s Claude Code hooks.
- Alert credentials and destinations are supplied through explicit channel setup; webhooks are validated as Discord or Slack URLs.
- Runtime alerts send only when alerts are enabled and a channel is configured.
- The alert channel is described as carrying short alert details, not session text.
Evidence against
- The CLI and server use local file, process, and network capabilities to monitor Claude Code sessions and operate the board.
- Configured alerts send data to external services, as expected for the alert feature.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedtools/open-in-iterm.mjsView file
53import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
High
Child Process
Package source references child process execution.
tools/open-in-iterm.mjsView on unpkg · L5353import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
...
L59: const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
L60: const env = process.env;
L61: const OSASCRIPT = env.ITERM_OSASCRIPT_BIN || '/usr/bin/osascript';
...
L68: export const portOf = (e = env) => Number(e.PORT || 4600);
L69: export const boardUrl = (port) => `http://localhost:${port}/`;
L70: export const pageName = (port) => (port === 4600 ? 'Ravenry board' : `Ravenry board :${port}`);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
tools/open-in-iterm.mjsView on unpkg · L53server/handoff.mjsView file
Findings
1 Critical5 High4 Medium5 Low
CriticalCredential Exfiltrationpublic/app.js
HighChild Processtools/open-in-iterm.mjs
HighSame File Env Network Executiontools/open-in-iterm.mjs
HighFixed Authenticated Webhook Data Exfiltrationserver/channels.mjs
HighSandbox Evasion Gated Capabilitybin/ravenry.mjs
HighSemantic Analysis Limitedserver/pictures.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertools/iterm-board-split.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptoserver/handoff.mjs
LowFilesystem
Affected versions and remediation
This report applies to ravenry-app@0.1.0.
See all versions of ravenry-app for other recorded verdicts.
- Review the evidence and your use of ravenry-app@0.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.