registry / ravenry-app / 0.1.1
ravenry-app@0.1.1
A local board for following every Claude Code session on your Mac, answering agents from one page (cmux or iTerm2), and keeping project briefs.
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe reported external requests belong to configurable alert channels with constrained destinations and brief alert payloads. No automatic collection of unrelated credentials or data was identified.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user configures and enables an alert channel, or sends a test; runtime alerts follow project state transitions.
Impact
Configured alert content is delivered to the user's selected channel; no unrelated credential collection or exfiltration was identified.
Mechanism
The server sends brief alert payloads to the configured Telegram, Slack, Discord, or ntfy service. Webhook destinations are validated.
AI rationale
The reported external requests belong to configurable alert channels with constrained destinations and brief alert payloads. No automatic collection of unrelated credentials or data was identified.
Evidence
bin/ravenry.mjspublic/app.jsserver/alerts.mjsserver/channels.mjstools/open-in-iterm.mjs
Network endpoints9
api.telegram.orgdiscord.comptb.discord.comcanary.discord.comdiscordapp.comptb.discordapp.comcanary.discordapp.comhooks.slack.comntfy.sh
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI entry point and declares no install lifecycle scripts.
- Phone alerts are disabled by default and use configured alert channels.
- Webhook URLs are restricted to HTTPS and recognized Slack or Discord webhook hosts and paths.
- Webhook messages contain the alert title, body, and optional board link; the alert logic says it does not include session text.
- Alert credentials are stored in the Ravenry data folder, and the UI submits them through explicit save actions.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedtools/open-in-iterm.mjsView file
53import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
High
Child Process
Package source references child process execution.
tools/open-in-iterm.mjsView on unpkg · L5353import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
...
L59: const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
L60: const env = process.env;
L61: const OSASCRIPT = env.ITERM_OSASCRIPT_BIN || '/usr/bin/osascript';
...
L68: export const portOf = (e = env) => Number(e.PORT || 4600);
L69: export const boardUrl = (port) => `http://localhost:${port}/`;
L70: export const pageName = (port) => (port === 4600 ? 'Ravenry board' : `Ravenry board :${port}`);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
tools/open-in-iterm.mjsView on unpkg · L53server/handoff.mjsView file
Findings
1 Critical5 High4 Medium5 Low
CriticalCredential Exfiltrationpublic/app.js
HighChild Processtools/open-in-iterm.mjs
HighSame File Env Network Executiontools/open-in-iterm.mjs
HighFixed Authenticated Webhook Data Exfiltrationserver/channels.mjs
HighSandbox Evasion Gated Capabilitybin/ravenry.mjs
HighSemantic Analysis Limitedserver/pictures.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertools/iterm-board-split.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptoserver/handoff.mjs
LowFilesystem
Affected versions and remediation
This report applies to ravenry-app@0.1.1.
See all versions of ravenry-app for other recorded verdicts.
- Review the evidence and your use of ravenry-app@0.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.