@momentic/wizard@1.8.4
Onboarding wizard for setting up Momentic end-to-end testing in your project.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe CLI forwards up to 400 characters of failed package-manager output to its analytics service, creating a conditional data exposure risk. The endpoint is Momentic’s and the behavior occurs on an install failure, so the source supports a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
The user runs the wizard and a package-manager install it launches fails.
Impact
Up to 400 characters of command output may reach the analytics service; the inspected source does not establish that the output contains secrets.
Mechanism
The CLI captures standard output and error, adds a truncated output tail to the install failure event, and sends telemetry to Momentic’s analytics host.
AI rationale
The CLI forwards up to 400 characters of failed package-manager output to its analytics service, creating a conditional data exposure risk. The endpoint is Momentic’s and the behavior occurs on an install failure, so the source supports a warning rather than a block.
Evidence
bin/cli.js
Network endpoints1
p.momentic.ai
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The wizard captures child process output and includes a bounded tail in its install failure event.
- That failure event carries the output tail into telemetry capture sent to Momentic’s analytics host.
- The output text is truncated to at most 400 characters before being included.
- The agent-related match is part of a directory exclusion list used during project scanning.
Evidence against
- The manifest describes a Momentic end-to-end testing setup CLI, and the telemetry host belongs to Momentic.
- The output is forwarded only on a failed package-manager install path, and the included text is capped.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
6 flaggedbin/cli.jsView file
22import l7 from 'open';
L23: import { spawn, spawnSync, execFileSync } from 'child_process';
L24: import { getUserAgent, detect, resolveCommand } from 'package-manager-detector';
High
209`)?u:`${u}
L210: `}function Q8(e,t){let n=be.join(be.dirname(e),`.${be.basename(e)}.${process.pid}.tmp`),r=go__default.existsSync(e)?go__default.statSync(e).mode:void 0;try{go__default.writeFileSyn...
L211: This usually means your machine or network intercepts HTTPS traffic (corporate proxy, firewall, or antivirus).
...
L224: `))r&&console.info(`\u2502 ${r}`);},success(n){console.info(`\u2714 ${n}`);},error(n){console.info(`\u2716 ${n}`);}}}};var zU=new Qa({debug:false});function ee(){return zU}funct...
L225: `;go__default.writeSync(this.handle,n);}catch{}}close(){if(this.handle!==void 0)try{go__default.closeSync(this.handle);}catch{}}},BU=new ff("",void 0);function FU(){let e=be.join(Y...
L226: ${f}`,code:"ETIMEDOUT",tailOutput:f});Nt().append({event:"spawn:timeout",command:e.com
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L209•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
Use null when unknown or not applicable.`),t[n.name]=o.describe(a);}return i.strictObject(t)}function k4(e){let t=[e.testCases??[],e.bugReproductions??[]].map(n=>i.toJSONSchema(w4(...
`)||e.includes("\r")||e.includes("{{")||e.includes("}}")||e.length===0||!e.toLowerCase().endsWith(".json"))}function ne(e){return Object.fromEntries(Object.entries(e).filter(([,t])...
`);function yr(e,t,{commentBefore:n,comment:r}){let o=e.items.find(a=>Ht.isPair(a)&&Ht.isScalar(a.key)&&a.key.value===t);if(o&&(n!==void 0&&Ht.isScalar(o.key)&&(o.key.commentBefore...
`);if(a===-1)continue;let s=o.slice(0,a),c=o.slice(a+1).trim();r[s]=c;}return r
Findings
7 High3 Medium6 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @momentic/wizard@1.8.4.
See all versions of @momentic/wizard for other recorded verdicts.
- Review the evidence and your use of @momentic/wizard@1.8.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.