registry / @momentic/wizard / 1.7.4
@momentic/wizard@1.7.4
Onboarding wizard for setting up Momentic end-to-end testing in your project.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe package exposes an onboarding CLI without lifecycle hooks. Its agent configuration behavior is user-invoked, and the inspected credential flow uses the selected Momentic server, which defaults to api.momentic.ai.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the Momentic wizard and selects coding-agent setup.
Impact
The inspected behavior does not establish an attack surface; the credential is used for Momentic authentication and its own MCP integration.
Mechanism
The wizard adds the Momentic MCP server to the selected project configuration and can pass the Momentic API key to that server.
AI rationale
The package exposes an onboarding CLI without lifecycle hooks. Its agent configuration behavior is user-invoked, and the inspected credential flow uses the selected Momentic server, which defaults to api.momentic.ai.
Evidence
bin/cli.js
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes an onboarding CLI and has no lifecycle hook; the agent setup runs through that CLI.
- The CLI asks which coding agents to configure, then writes the selected Momentic MCP entry to project configuration.
- API keys authenticate against the selected server; the login command defaults to api.momentic.ai.
Evidence against
- The inspected agent-related paths show explicit onboarding setup and Momentic’s own MCP server, not an install-time agent configuration change or unrelated credential recipient.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
6 flaggedbin/cli.jsView file
22import u8 from 'open';
L23: import { spawn, spawnSync, execFileSync } from 'child_process';
L24: import { getUserAgent, detect, resolveCommand } from 'package-manager-detector';
High
206`)?l:`${l}
L207: `}function e8(e,t){let n=Te.join(Te.dirname(e),`.${Te.basename(e)}.${process.pid}.tmp`),r=So__default.existsSync(e)?So__default.statSync(e).mode:void 0;try{So__default.writeFileSyn...
L208: This usually means your machine or network intercepts HTTPS traffic (corporate proxy, firewall, or antivirus).
...
L221: `))r&&console.info(`\u2502 ${r}`);},success(n){console.info(`\u2714 ${n}`);},error(n){console.info(`\u2716 ${n}`);}}}};var QD=new Za({debug:false});function ee(){return QD}funct...
L222: `;So__default.writeSync(this.handle,n);}catch{}}close(){if(this.handle!==void 0)try{So__default.closeSync(this.handle);}catch{}}},iU=new lf("",void 0);function aU(){let e=Te.join(m...
L223: ${g}`,code:"ETIMEDOUT",tailOutput:g});kt().append({event:"spawn:timeout",command:e.com
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L206•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
`)),a(" ",n(m));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=UM[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,pe.reset,...t...
`)||e.includes("\r")||e.includes("{{")||e.includes("}}")||e.length===0||!e.toLowerCase().endsWith(".json"))}function ne(e){return Object.fromEntries(Object.entries(e).filter(([,t])...
`);function yr(e,t,{commentBefore:n,comment:r}){let o=e.items.find(a=>Gt.isPair(a)&&Gt.isScalar(a.key)&&a.key.value===t);if(o&&(n!==void 0&&Gt.isScalar(o.key)&&(o.key.commentBefore...
`);if(a===-1)continue;let s=o.slice(0,a),c=o.slice(a+1).trim();r[s]=c;}return r
Findings
7 High3 Medium6 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @momentic/wizard@1.7.4.
See all versions of @momentic/wizard for other recorded verdicts.
- Review the evidence and your use of @momentic/wizard@1.7.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.