registry / @limina-labs/momentum / 0.34.0

@limina-labs/momentum@0.34.0

Agent-agnostic, specs-driven development framework — single project or multi-project ecosystem

AI Security Review

scanned 3h ago · by lpm-firewall-ai

No confirmed malicious attack surface. The package is a user-invoked CLI that scaffolds project specs and first-party agent integration files for supported coding agents.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Explicit `momentum` CLI commands such as `init`, `upgrade`, `swarm`, or `antigravity plugin-pack`.

Impact

Creates or updates Momentum-owned project files and optional agent workflow surfaces; no unconsented install-time mutation or exfiltration identified.

Mechanism

Project scaffolding and workflow-hook installation

Rationale

Static inspection found potentially sensitive primitives, but they are aligned with the package's documented agent-workflow CLI and require explicit user commands. There is no npm install-time execution, credential collection, remote payload execution, or stealthy mutation of foreign AI-agent control surfaces.

Evidence

package.jsonbin/momentum.jsadapters/codex/adapter.jsadapters/codex/hooks.jsonadapters/claude-code/adapter.jsadapters/claude-code/settings.jsonadapters/opencode/plugins/momentum.jscore/scripts/brainstorm-gate.shcore/scripts/check-history-reminder.shcore/git-hooks/run-check.js.codex/hooks.json.claude/settings.json.opencode/plugins/momentum.jsAGENTS.mdCLAUDE.md.githooks/pre-push.githooks/commit-msgscripts/brainstorm-gate.shscripts/check-history-reminder.shscripts/sessionstart-handoff.sh.momentum/installed.json

Network endpoints1

registry.npmjs.org/@limina-labs/momentum/latest

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for block

CLI can write agent config/hooks on explicit `momentum init/upgrade`: `.codex/hooks.json`, `.claude/settings.json`, `.opencode/plugins/momentum.js`.
CLI can spawn user-selected agent binaries for swarm commands in `adapters/*/adapter.js`.
CLI performs an update check to `https://registry.npmjs.org/@limina-labs/momentum/latest` during command execution.

Evidence against

`package.json` has no preinstall/install/postinstall hooks; only `prepublishOnly`.
`bin/momentum.js` only runs `main()` when invoked as CLI, not on import.
Agent-surface writes are first-party, documented, user-invoked, and skip/backup existing files rather than silently clobbering.
Hook scripts enforce project workflow reminders/gates; no credential harvesting or exfiltration found.
Network use is limited to npm registry update check/cache, not payload download or data upload.
Shell helpers are local project workflow scripts and bounded ecosystem logging, not persistence or destructive behavior.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 60 file(s), 618 KB of source, external domains: antigravity.google, github.com, registry.npmjs.org

Source & flagged code

3 flagged

core/ecosystem/lib/index.jsView file

Lines 1-40javascript

1'use strict';

3/**

4 * Ecosystem helpers — pure, dependency-free.

5 *

6 * Provides four building blocks the rest of Phase 9 depends on:

7 *

8 * - findRoot(startPath) — locate the ecosystem root by walking up

9 * - loadManifest(rootPath) — read + parse ecosystem.json

10 * - listMembers(manifest) — convenience accessor

11 * - validateManifest(obj) — minimal schema check (no external deps)

12 *

13 * Schema validation is deliberately hand-rolled: momentum has a

14 * zero-dependency posture for the CLI (no ajv, no joi). The check

15 * is structural — type + required fields — and surfaces the first

16 * violation with a human-readable path. The full JSON Schema in

17 * `../schema/ecosystem.schema.json` remains the authoritative

18 * contract; this validator is its operational counterpart.

19 */

21const fs = require('fs');

22const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/ecosystem/lib/index.jsView on unpkg · L20

24// Default upper bound on parent-directory walk-up. Honored by both this

25// module's findRoot and core/ecosystem/scripts/session-append.sh. The

26// authoritative export lives in core/ecosystem/lib/state.js as of

27// Phase 10 (ENH-022); we keep MAX_WALK_DEPTH as a backward-compat alias.

28const MAX_PARENT_WALK_DEFAULT = 5;

29const MAX_WALK_DEPTH = MAX_PARENT_WALK_DEFAULT;

30const MANIFEST_FILENAME = 'ecosystem.json';

32function resolveMaxParentWalk() {

33 const raw = process.env.MOMENTUM_MAX_PARENT_WALK;

34 if (raw === undefined || raw === '') return MAX_PARENT_WALK_DEFAULT;

35 const n = Number(raw);

36 if (!Number.isFinite(n) || n < 0) return MAX_PARENT_WALK_DEFAULT;

37 return Math.floor(n);

38}

40// Per-process cache: absolute-startPath-prefix → resolved root (or null)

core/ecosystem/scripts/session-append.shView file

•path = core/ecosystem/scripts/session-append.sh kind = build_helper sizeBytes = 5436 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

core/ecosystem/scripts/session-append.shView on unpkg

adapters/codex/adapter.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @limina-labs/momentum@0.33.0 matchedIdentity = npm:QGxpbWluYS1sYWJzL21vbWVudHVt:0.33.0 similarity = 0.879 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

adapters/codex/adapter.jsView on unpkg

Source & flagged code

3 flagged · loading source

core/ecosystem/lib/index.jsView file

20L21: const fs = require('fs'); L22: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/ecosystem/lib/index.jsView on unpkg · L20

core/ecosystem/scripts/session-append.shView file

•path = core/ecosystem/scripts/session-append.sh kind = build_helper sizeBytes = 5436 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

core/ecosystem/scripts/session-append.shView on unpkg

adapters/codex/adapter.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

adapters/codex/adapter.jsView on unpkg

Findings

1 High5 Medium5 Low

HighPrevious Version Dangerous Deltaadapters/codex/adapter.js

MediumDynamic Requirecore/ecosystem/lib/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helpercore/ecosystem/scripts/session-append.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

3 flagged

core/ecosystem/lib/index.jsView file

Lines 1-40javascript

1'use strict';

3/**

4 * Ecosystem helpers — pure, dependency-free.

5 *

6 * Provides four building blocks the rest of Phase 9 depends on:

7 *

8 * - findRoot(startPath) — locate the ecosystem root by walking up

9 * - loadManifest(rootPath) — read + parse ecosystem.json

10 * - listMembers(manifest) — convenience accessor

11 * - validateManifest(obj) — minimal schema check (no external deps)

12 *

13 * Schema validation is deliberately hand-rolled: momentum has a

14 * zero-dependency posture for the CLI (no ajv, no joi). The check

15 * is structural — type + required fields — and surfaces the first

16 * violation with a human-readable path. The full JSON Schema in

17 * `../schema/ecosystem.schema.json` remains the authoritative

18 * contract; this validator is its operational counterpart.

19 */

21const fs = require('fs');

22const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/ecosystem/lib/index.jsView on unpkg · L20

24// Default upper bound on parent-directory walk-up. Honored by both this

25// module's findRoot and core/ecosystem/scripts/session-append.sh. The

26// authoritative export lives in core/ecosystem/lib/state.js as of

27// Phase 10 (ENH-022); we keep MAX_WALK_DEPTH as a backward-compat alias.

28const MAX_PARENT_WALK_DEFAULT = 5;

29const MAX_WALK_DEPTH = MAX_PARENT_WALK_DEFAULT;

30const MANIFEST_FILENAME = 'ecosystem.json';

32function resolveMaxParentWalk() {

33 const raw = process.env.MOMENTUM_MAX_PARENT_WALK;

34 if (raw === undefined || raw === '') return MAX_PARENT_WALK_DEFAULT;

35 const n = Number(raw);

36 if (!Number.isFinite(n) || n < 0) return MAX_PARENT_WALK_DEFAULT;

37 return Math.floor(n);

38}

40// Per-process cache: absolute-startPath-prefix → resolved root (or null)

core/ecosystem/scripts/session-append.shView file

•path = core/ecosystem/scripts/session-append.sh kind = build_helper sizeBytes = 5436 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

core/ecosystem/scripts/session-append.shView on unpkg

adapters/codex/adapter.jsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

adapters/codex/adapter.jsView on unpkg