registry / ravenry-app / 0.1.2
ravenry-app@0.1.2
A local board for following every Claude Code session on your Mac, answering agents from one page (cmux or iTerm2), and keeping project briefs.
AI Security Review
scanned 16h ago · by lpm-firewall-aiThe manifest has no install hooks, and the CLI prompts before installing Claude Code hooks or enabling rule suggestions. The flagged network and process behavior supports the dashboard and user-configured terminal and alert integrations; no unrelated credential exfiltration or attacker-chosen account action was found.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user runs the ravenry CLI, starts the board, or configures an alert channel.
Impact
Expected dashboard and alert behavior; reviewed source does not show automatic credential collection or transmission to an unrelated host.
Mechanism
The CLI can install Claude Code hooks after confirmation; alert code sends alert content to the configured Telegram, Discord, Slack, or ntfy service.
AI rationale
The manifest has no install hooks, and the CLI prompts before installing Claude Code hooks or enabling rule suggestions. The flagged network and process behavior supports the dashboard and user-configured terminal and alert integrations; no unrelated credential exfiltration or attacker-chosen account action was found.
Evidence
~/.claude/settings.json~/.ravenry
Network endpoints3
api.telegram.orgntfy.shUser-configured Discord or Slack webhook URL
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exposes a CLI and has no install lifecycle scripts; its npm scripts run the board or developer tools on request.
- Setup asks before writing Claude Code hooks and presents the specific settings changes.
- Rule suggestions are presented as a user choice and run through the user's own Claude login.
- Alert webhooks are validated and sent to the URL configured for that channel.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
9 flaggedtools/open-in-iterm.mjsView file
53import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
High
Child Process
Package source references child process execution.
tools/open-in-iterm.mjsView on unpkg · L5353import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
...
L59: const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
L60: const env = process.env;
L61: const OSASCRIPT = env.ITERM_OSASCRIPT_BIN || '/usr/bin/osascript';
...
L68: export const portOf = (e = env) => Number(e.PORT || 4600);
L69: export const boardUrl = (port) => `http://localhost:${port}/`;
L70: export const pageName = (port) => (port === 4600 ? 'Ravenry board' : `Ravenry board :${port}`);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
tools/open-in-iterm.mjsView on unpkg · L53server/handoff.mjsView file
Findings
2 Critical5 High4 Medium5 Low
CriticalCredential Exfiltrationpublic/app.js
CriticalPrevious Version Dangerous Deltaserver/index.mjs
HighChild Processtools/open-in-iterm.mjs
HighSame File Env Network Executiontools/open-in-iterm.mjs
HighFixed Authenticated Webhook Data Exfiltrationserver/channels.mjs
HighSandbox Evasion Gated Capabilitybin/ravenry.mjs
HighSemantic Analysis Limitedserver/pictures.mjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertools/iterm-board-split.py
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to ravenry-app@0.1.2.
See all versions of ravenry-app for other recorded verdicts.
- Review the evidence and your use of ravenry-app@0.1.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.