registry / @momentic/wizard / 1.8.5
@momentic/wizard@1.8.5
Onboarding wizard for setting up Momentic end-to-end testing in your project.
AI Security Review
scanned 19d ago · by lpm-firewall-aiThe manifest has no install lifecycle hook, and the flagged agent configuration behavior belongs to the explicitly invoked setup wizard. The inspected source shows a package-aligned default service endpoint and no concrete attack behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the momentic-wizard command and confirms the coding-agent setup choices.
Impact
The selected agent configuration is updated to launch Momentic's MCP server. The inspected source does not establish credential theft or unconsented agent control.
Mechanism
The CLI writes Momentic MCP configuration for selected agents and uses api.momentic.ai by default for its service connection; the server can be overridden through an advanced CLI option.
AI rationale
The manifest has no install lifecycle hook, and the flagged agent configuration behavior belongs to the explicitly invoked setup wizard. The inspected source shows a package-aligned default service endpoint and no concrete attack behavior.
Evidence
package.jsonbin/cli.js
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes bin/cli.js and contains no lifecycle scripts.
- The CLI asks whether to set up Momentic in coding agents; the user invoked wizard command controls this setup.
- Agent configuration is written through a merge into the selected agent configuration file.
- The API server defaults to api.momentic.ai; overriding it is an advanced CLI option.
- Sign-in uses a WorkOS device authorization flow.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
6 flaggedbin/cli.jsView file
22import f7 from 'open';
L23: import { spawn, spawnSync, execFileSync } from 'child_process';
L24: import { getUserAgent, detect, resolveCommand } from 'package-manager-detector';
High
209`)?u:`${u}
L210: `}function r7(e,t){let n=be.join(be.dirname(e),`.${be.basename(e)}.${process.pid}.tmp`),r=go__default.existsSync(e)?go__default.statSync(e).mode:void 0;try{go__default.writeFileSyn...
L211: This usually means your machine or network intercepts HTTPS traffic (corporate proxy, firewall, or antivirus).
...
L224: `))r&&console.info(`\u2502 ${r}`);},success(n){console.info(`\u2714 ${n}`);},error(n){console.info(`\u2716 ${n}`);}}}};var jU=new es({debug:false});function ee(){return jU}funct...
L225: `;go__default.writeSync(this.handle,n);}catch{}}close(){if(this.handle!==void 0)try{go__default.closeSync(this.handle);}catch{}}},WU=new hf("",void 0);function KU(){let e=be.join(e...
L226: ${f}`,code:"ETIMEDOUT",tailOutput:f});Nt().append({event:"spawn:timeout",command:e.com
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L209•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
Use null when unknown or not applicable.`),t[n.name]=o.describe(a);}return i.strictObject(t)}function z4(e){let t=[e.testCases??[],e.bugReproductions??[]].map(n=>i.toJSONSchema(N4(...
`)||e.includes("\r")||e.includes("{{")||e.includes("}}")||e.length===0||!e.toLowerCase().endsWith(".json"))}function ne(e){return Object.fromEntries(Object.entries(e).filter(([,t])...
`);function yr(e,t,{commentBefore:n,comment:r}){let o=e.items.find(a=>Ht.isPair(a)&&Ht.isScalar(a.key)&&a.key.value===t);if(o&&(n!==void 0&&Ht.isScalar(o.key)&&(o.key.commentBefore...
`);if(a===-1)continue;let s=o.slice(0,a),c=o.slice(a+1).trim();r[s]=c;}return r
Findings
7 High3 Medium6 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @momentic/wizard@1.8.5.
See all versions of @momentic/wizard for other recorded verdicts.
- Review the evidence and your use of @momentic/wizard@1.8.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.