registry / @momentic/wizard / 1.7.2
@momentic/wizard@1.7.2
Onboarding wizard for setting up Momentic end-to-end testing in your project.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe package exposes an onboarding CLI without an install hook. The inspected credential and agent setup behavior is consistent with user-invoked Momentic setup, and the scanner hints do not establish a concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the wizard and selects or requests agent setup.
Impact
No confirmed attack surface was established in the inspected paths.
Mechanism
The wizard presents agent choices, then merges the Momentic MCP entry into configuration for selected tools. API authentication uses a bearer key and defaults to the Momentic API server.
AI rationale
The package exposes an onboarding CLI without an install hook. The inspected credential and agent setup behavior is consistent with user-invoked Momentic setup, and the scanner hints do not establish a concrete attack.
Evidence
bin/cli.js
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a project onboarding CLI and defines no install lifecycle hook.
- Agent setup is offered through a selection prompt; noninteractive setup follows the user's command options and defaults.
- The CLI uses a Momentic API key as a bearer credential, with api.momentic.ai as the default server.
- The cited file exclusion list treats agent configuration directories as scan exclusions, not as destinations being modified.
Evidence against
- The scanner's credential and command-output warnings are not supported by the inspected excerpts as evidence of an unrelated recipient or an attack.
- Agent configuration setup is reached through the invoked wizard rather than an npm install hook.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscation
Source & flagged code
6 flaggedbin/cli.jsView file
21import R9 from 'open';
L22: import { spawn, spawnSync, execFileSync } from 'child_process';
L23: import { getUserAgent, detect, resolveCommand } from 'package-manager-detector';
High
205`)?u:`${u}
L206: `}function y9(e,t){let n=ve.join(ve.dirname(e),`.${ve.basename(e)}.${process.pid}.tmp`),r=mo__default.existsSync(e)?mo__default.statSync(e).mode:void 0;try{mo__default.writeFileSyn...
L207: This usually means your machine or network intercepts HTTPS traffic (corporate proxy, firewall, or antivirus).
...
L219: ${o.code(sz(p,r))}`,a),t)try{await R9(p);}catch{e.warn(`Could not open a browser automatically. Paste ${o.code(p)} manually.`);}let m=e.spinner();m.start(s);try{let f=await _D({cli...
L220: `))r&&console.info(`\u2502 ${r}`);},success(n){console.info(`\u2714 ${n}`);},error(n){console.info(`\u2716 ${n}`);}}}};var MD=new Fa({debug:false});function Q(){return MD}functi...
L221: `;mo__default.writeSync(this.handle,n);}catch{}}close(){if(this.handle!==void 0)try{mo
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L205•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
`)),a(" ",n(m));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=yM[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,ue.reset,...t...
`)||e.includes("\r")||e.includes("{{")||e.includes("}}")||e.length===0||!e.toLowerCase().endsWith(".json"))}function oe(e){return Object.fromEntries(Object.entries(e).filter(([,t])...
`);function dr(e,t,{commentBefore:n,comment:r}){let o=e.items.find(a=>jt.isPair(a)&&jt.isScalar(a.key)&&a.key.value===t);if(o&&(n!==void 0&&jt.isScalar(o.key)&&(o.key.commentBefore...
`);if(a===-1)continue;let s=o.slice(0,a),c=o.slice(a+1).trim();r[s]=c;}return r
Findings
7 High3 Medium5 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @momentic/wizard@1.7.2.
See all versions of @momentic/wizard for other recorded verdicts.
- Review the evidence and your use of @momentic/wizard@1.7.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.