registry / @momentic/wizard / 1.8.1
@momentic/wizard@1.8.1
Onboarding wizard for setting up Momentic end-to-end testing in your project.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe package exposes an onboarding CLI without install hooks. Its agent configuration and credential handling are tied to explicit Momentic setup and the configured Momentic API, so the scanner signals do not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the momentic-wizard onboarding command and selects coding-agent setup.
Impact
Selected coding agents can use Momentic's MCP server with the configured Momentic credential; inspected source does not establish unrelated credential disclosure or malicious control.
Mechanism
The CLI writes Momentic MCP entries for selected tools and supplies the Momentic API key to its own MCP command.
AI rationale
The package exposes an onboarding CLI without install hooks. Its agent configuration and credential handling are tied to explicit Momentic setup and the configured Momentic API, so the scanner signals do not establish malicious behavior.
Evidence
bin/cli.jspackage.json
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes a Momentic onboarding CLI and declares no lifecycle hook.
- The CLI presents coding-agent setup as a user choice and writes Momentic MCP configuration for selected tools.
- MCP entries run Momentic's own CLI and pass its API key as MOMENTIC_API_KEY.
- Sign-in sends a WorkOS access token to the configured Momentic server; the CLI defaults to api.momentic.ai and exposes an explicit server override.
Evidence against
- The inspected source shows no package-install-time execution; configuration changes occur through the invoked onboarding CLI.
- The scanner's credential-redirection concern is not established: the observed credential flow targets the configured Momentic API, and agent setup is prompted interactively.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinified
Source & flagged code
6 flaggedbin/cli.jsView file
22import z8 from 'open';
L23: import { spawn, spawnSync, execFileSync } from 'child_process';
L24: import { getUserAgent, detect, resolveCommand } from 'package-manager-detector';
High
206`)?u:`${u}
L207: `}function _8(e,t){let r=be.join(be.dirname(e),`.${be.basename(e)}.${process.pid}.tmp`),n=So__default.existsSync(e)?So__default.statSync(e).mode:void 0;try{So__default.writeFileSyn...
L208: This usually means your machine or network intercepts HTTPS traffic (corporate proxy, firewall, or antivirus).
...
L221: `))n&&console.info(`\u2502 ${n}`);},success(r){console.info(`\u2714 ${r}`);},error(r){console.info(`\u2716 ${r}`);}}}};var gU=new Xa({debug:false});function ee(){return gU}funct...
L222: `;So__default.writeSync(this.handle,r);}catch{}}close(){if(this.handle!==void 0)try{So__default.closeSync(this.handle);}catch{}}},vU=new df("",void 0);function xU(){let e=be.join(O...
L223: ${g}`,code:"ETIMEDOUT",tailOutput:g});Lt().append({event:"spawn:timeout",command:e.com
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L206•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
`)),a(" ",r(m));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=WM[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,pe.reset,...t...
`)||e.includes("\r")||e.includes("{{")||e.includes("}}")||e.length===0||!e.toLowerCase().endsWith(".json"))}function re(e){return Object.fromEntries(Object.entries(e).filter(([,t])...
`);function yn(e,t,{commentBefore:r,comment:n}){let o=e.items.find(a=>Ht.isPair(a)&&Ht.isScalar(a.key)&&a.key.value===t);if(o&&(r!==void 0&&Ht.isScalar(o.key)&&(o.key.commentBefore...
`);if(a===-1)continue;let s=o.slice(0,a),c=o.slice(a+1).trim();n[s]=c;}return n
Findings
7 High3 Medium6 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @momentic/wizard@1.8.1.
See all versions of @momentic/wizard for other recorded verdicts.
- Review the evidence and your use of @momentic/wizard@1.8.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.