registry / romdevtools / 0.85.0

romdevtools@0.85.0

Tool server giving coding agents full control of homebrew ROM development AND reverse-engineering/romhacking across 17 retro platforms (NES, SNES, GB, Genesis, Atari, C64, PC Engine, MSX, PlayStation, N64, Dreamcast, ...) via WASM toolchains + emulator co

AI Security Review

scanned 14d ago · by lpm-firewall-ai

No confirmed malicious attack surface was established. The package is a ROM development MCP/HTTP tool server with explicit user-invoked build, emulator, file-output, and palette-fetch capabilities.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm install postinstall; user runs romdevtools/romdev-mcp or invokes MCP/HTTP tools

Impact

Package-aligned local ROM build/debug/playtest operations; no confirmed credential theft, persistence, or exfiltration

Mechanism

local tool server plus bundled WASM/native emulator tooling

Rationale

Static source inspection shows powerful ROM-dev/debug capabilities and an install hook, but they are disclosed, package-aligned, mostly user-invoked, and not tied to credential harvesting, persistence, or unauthorized agent control-surface mutation. The scanner’s dangerous-file and lifecycle hints are explained by the MCP server entrypoint and optional SDL binary bootstrap.

Evidence

package.jsonsrc/install/postinstall.mjssrc/mcp/server.jssrc/http/routes.jssrc/host/coreLoader.jssrc/playtest/playtest.jssrc/mcp/tools/index.jssrc/mcp/util.jssrc/mcp/tools/project.jssrc/mcp/tools/lospec.jssrc/install/postinstall.mjs may create @kmamal/sdl/dist/sdl.node via dependency installersrc/mcp/util.js writes caller-provided outputPathsrc/mcp/tools/project.js writes caller-requested project filessrc/playtest/playtest.js writes playtest screenshot/artifact paths

Network endpoints3

127.0.0.1:7331/mcplocalhost:7331/skills/romdev/SKILL.mdlospec.com/palette-list

Decision evidence

public snapshot

AI called this Clean at 86.0% confidence as Benign with medium false-positive risk.

Evidence for block

package.json defines postinstall and CLI/MCP bins.
src/install/postinstall.mjs runs @kmamal/sdl install.mjs if dist/sdl.node is missing.
src/mcp/server.js starts a local HTTP/MCP server and re-execs node with --experimental-vm-modules.
Tool surface can write user-requested outputs/projects and run WASM workers/SDL playtest.

Evidence against

Postinstall is narrowly scoped to optional @kmamal/sdl prebuilt binary, soft-fails, exits 0, and disables build-from-source flags.
No credential/env harvesting or exfiltration logic found in inspected entrypoints.
HTTP server defaults to loopback with localhost host validation; non-loopback requires explicit host/env.
Network use found is package-aligned: local MCP/HTTP routes and optional Lospec palette fetch by user tool call.
Dynamic imports load bundled emulator/toolchain modules or declared dependencies for ROM development.
File writes are explicit tool outputs/project scaffolding/playtest artifacts, not persistence or agent config mutation.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 200 file(s), 3.15 MB of source, external domains: github.com, lospec.com

Source & flagged code

7 flagged

package.jsonView file

Lines 1-33json

2 "name": "romdevtools",

3 "version": "0.85.0",

4 "description": "Tool server giving coding agents full control of homebrew ROM development AND reverse-engineering/romhacking across 17 retro platforms (NES, SNES, GB, Genesis, Atari, C64, PC Engine, MSX, PlayStation, N64, Dreamcast, ...) via WASM toolchains + emulator cores. Use over plain HTTP, as an Agent Skill, or as an MCP server.",

5 "type": "module",

6 "main": "src/mcp/server.js",

7 "bin": {

8 "romdevtools": "src/mcp/server.js",

9 "romdev-mcp": "src/mcp/server.js",

10 "romdevtools-cli": "src/cli/smoke.js"

11 },

12 "scripts": {

13 "postinstall": "node src/install/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L13

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L13

14 "smoke": "node --enable-source-maps src/cli/smoke.js",

15 "mcp": "node --enable-source-maps src/mcp/server.js",

16 "test": "node --test 'src/**/*.test.js' 'test/**/*.test.js'",

17 "test:jsgame": "node --experimental-vm-modules --test-force-exit --test test/jsgame-host.test.js"

18 },

19 "keywords": [

20 "mcp",

21 "model-context-protocol",

22 "libretro",

23 "wasm",

24 "emulator",

25 "homebrew",

26 "retro",

27 "nes",

28 "snes",

29 "game-boy",

30 "genesis",

31 "atari",

32 "commodore-64",

33 "pc-engine",

src/host/LibretroHost.jsView file

Lines 316-356javascript

316

317 async loadCore(jsPath, wasmPath, opts = {}) {

318 if (this.mod) throw new Error("core already loaded; create a new host");

319

320 // Proxied (multi-threaded) cores — e.g. PPSSPP/PSP — run on a dedicated "app thread" so the

321 // JS main thread never blocks while the core's worker threads proxy back to it (which would

322 // deadlock the synchronous frame-stepping). They own the ENTIRE GL stack on the app thread

src/platforms/gba/lib/libgba/crtend.oView file

•path = [redacted].o kind = native_binary sizeBytes = 1040 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

src/platforms/gba/lib/libgba/crtend.oView on unpkg

src/analysis/wasm/rizin.wasmView file

•path = src/analysis/wasm/rizin.wasm kind = wasm_module sizeBytes = 30762096 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/analysis/wasm/rizin.wasmView on unpkg

src/platforms/snes/lib/pvsneslib/source/MakefileView file

•path = [redacted] kind = build_helper sizeBytes = 2332 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/platforms/snes/lib/pvsneslib/source/MakefileView on unpkg

src/mcp/server.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = romdevtools@0.84.1 matchedIdentity = npm:cm9tZGV2dG9vbHM:0.84.1 similarity = 0.942 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

src/mcp/server.jsView on unpkg

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node src/install/postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node src/install/postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

src/host/LibretroHost.jsView file

336// GL deps lazily (clear install hint if absent). L337: const { LibretroGL } = await import("./LibretroGL.js"); L338: const { loadWebGl2Context } = await import("./glOptionalDep.js");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/host/LibretroHost.jsView on unpkg · L336

src/platforms/gba/lib/libgba/crtend.oView file

•path = [redacted].o kind = native_binary sizeBytes = 1040 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

src/platforms/gba/lib/libgba/crtend.oView on unpkg

src/analysis/wasm/rizin.wasmView file

•path = src/analysis/wasm/rizin.wasm kind = wasm_module sizeBytes = 30762096 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/analysis/wasm/rizin.wasmView on unpkg

src/platforms/snes/lib/pvsneslib/source/MakefileView file

•path = [redacted] kind = build_helper sizeBytes = 2332 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/platforms/snes/lib/pvsneslib/source/MakefileView on unpkg

src/mcp/server.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

src/mcp/server.jsView on unpkg

Findings

1 Critical1 High8 Medium4 Low

CriticalPrevious Version Dangerous Deltasrc/mcp/server.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requiresrc/host/LibretroHost.js

MediumNetwork

MediumEnvironment Vars

MediumShips Native Binarysrc/platforms/gba/lib/libgba/crtend.o

MediumShips Wasm Modulesrc/analysis/wasm/rizin.wasm

MediumShips Build Helpersrc/platforms/snes/lib/pvsneslib/source/Makefile

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

7 flagged

package.jsonView file

Lines 1-33json

2 "name": "romdevtools",

3 "version": "0.85.0",

5 "type": "module",

6 "main": "src/mcp/server.js",

7 "bin": {

8 "romdevtools": "src/mcp/server.js",

9 "romdev-mcp": "src/mcp/server.js",

10 "romdevtools-cli": "src/cli/smoke.js"

11 },

12 "scripts": {

13 "postinstall": "node src/install/postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L13

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L13

14 "smoke": "node --enable-source-maps src/cli/smoke.js",

15 "mcp": "node --enable-source-maps src/mcp/server.js",

16 "test": "node --test 'src/**/*.test.js' 'test/**/*.test.js'",

17 "test:jsgame": "node --experimental-vm-modules --test-force-exit --test test/jsgame-host.test.js"

18 },

19 "keywords": [

20 "mcp",

21 "model-context-protocol",

22 "libretro",

23 "wasm",

24 "emulator",

25 "homebrew",

26 "retro",

27 "nes",

28 "snes",

29 "game-boy",

30 "genesis",

31 "atari",

32 "commodore-64",

33 "pc-engine",

src/host/LibretroHost.jsView file

Lines 316-356javascript

316

317 async loadCore(jsPath, wasmPath, opts = {}) {

318 if (this.mod) throw new Error("core already loaded; create a new host");

319

320 // Proxied (multi-threaded) cores — e.g. PPSSPP/PSP — run on a dedicated "app thread" so the

321 // JS main thread never blocks while the core's worker threads proxy back to it (which would

322 // deadlock the synchronous frame-stepping). They own the ENTIRE GL stack on the app thread

src/platforms/gba/lib/libgba/crtend.oView file

•path = [redacted].o kind = native_binary sizeBytes = 1040 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

src/platforms/gba/lib/libgba/crtend.oView on unpkg

src/analysis/wasm/rizin.wasmView file

•path = src/analysis/wasm/rizin.wasm kind = wasm_module sizeBytes = 30762096 magicHex = [redacted]

Medium

Ships Wasm Module

Package ships WebAssembly modules.

src/analysis/wasm/rizin.wasmView on unpkg

src/platforms/snes/lib/pvsneslib/source/MakefileView file

•path = [redacted] kind = build_helper sizeBytes = 2332 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

src/platforms/snes/lib/pvsneslib/source/MakefileView on unpkg

src/mcp/server.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version.

src/mcp/server.jsView on unpkg