registry / ravenry-app / 0.3.2
ravenry-app@0.3.2
A local board for following every Claude Code session on your Mac, answering agents from one page (cmux or iTerm2), and keeping project briefs.
AI Security Review
scanned 8h ago · by lpm-firewall-aiThe flagged network behavior belongs to optional alert channels configured by the user, and alert payloads do not include session text. Setup prompts before installing hooks, and the inspected source shows no malicious credential collection or hidden account actions.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
The user starts the CLI or server; alert delivery requires enabling alerts and configuring a channel.
Impact
No unsolicited credential exfiltration, unrelated collection, or publisher-chosen account actions were identified.
Mechanism
The app sends short project alerts through the selected Telegram, Slack/Discord webhook, or ntfy channel. Its AI-assisted features use the user's own Claude or Codex login.
AI rationale
The flagged network behavior belongs to optional alert channels configured by the user, and alert payloads do not include session text. Setup prompts before installing hooks, and the inspected source shows no malicious credential collection or hidden account actions.
Evidence
<RAVENRY_HOME>/alerts.json~/.claude/settings.json (only after setup confirmation)
Network endpoints3
api.telegram.org/bot<TOKEN>/{getMe,getUpdates,sendMessage}ntfy.sh/ (or the configured ntfy server root)User-configured Slack or Discord webhook URL
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a CLI and ordinary npm scripts; it declares no install lifecycle script.
- Setup asks before writing Ravenry hooks to ~/.claude/settings.json.
- Phone alert secrets are stored locally, and phone alerts start disabled by default.
- Alerts send only when enabled and a channel is configured; the alert data excludes session text.
- The README describes AI-assisted features as using the user's own Claude or Codex login.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggedtools/open-in-iterm.mjsView file
53import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
High
Child Process
Package source references child process execution.
tools/open-in-iterm.mjsView on unpkg · L5353import path from 'node:path';
L54: import { execFile } from 'node:child_process';
L55: import { fileURLToPath } from 'node:url';
...
L59: const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
L60: const env = process.env;
L61: const OSASCRIPT = env.ITERM_OSASCRIPT_BIN || '/usr/bin/osascript';
...
L68: export const portOf = (e = env) => Number(e.PORT || 4600);
L69: export const boardUrl = (port) => `http://localhost:${port}/`;
L70: export const pageName = (port) => (port === 4600 ? 'Ravenry board' : `Ravenry board :${port}`);
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
tools/open-in-iterm.mjsView on unpkg · L53server/handoff.mjsView file
Findings
2 Critical4 High4 Medium5 Low
CriticalCredential Exfiltrationpublic/app.js
CriticalPrevious Version Dangerous Deltaserver/index.mjs
HighChild Processtools/open-in-iterm.mjs
HighSame File Env Network Executiontools/open-in-iterm.mjs
HighFixed Authenticated Webhook Data Exfiltrationserver/channels.mjs
HighSandbox Evasion Gated Capabilitybin/ravenry.mjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helpertools/iterm-board-split.py
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptoserver/handoff.mjs
LowFilesystem
Affected versions and remediation
This report applies to ravenry-app@0.3.2.
See all versions of ravenry-app for other recorded verdicts.
- Review the evidence and your use of ravenry-app@0.3.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.