agentiqa@1.1.100
AI-powered testing for web and mobile apps
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe CLI’s default-on runtime telemetry reports command and test-target details to the vendor, including an explore target. This is a warning-level telemetry concern; the reviewed source does not establish credential theft or unrelated file collection.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
CLI invocation and test or explore runs; first CLI use also emits an installation event.
Impact
Usage and task-target information is reported to the vendor without an explicit opt-in; users can disable telemetry through environment variables or config.
Mechanism
The CLI posts events to the control plane’s `/api/t` endpoint. Events include a persistent random ID and can include command, platform, test target, and target-domain details.
AI rationale
The CLI’s default-on runtime telemetry reports command and test-target details to the vendor, including an explore target. This is a warning-level telemetry concern; the reviewed source does not establish credential theft or unrelated file collection.
Evidence
dist/cli.js
Network endpoints2
agentiqa.com/api/tAGENTIQA_ANALYTICS_ENDPOINT (configurable)
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI sends telemetry to the control plane’s `/api/t` endpoint by default; an environment variable can override the endpoint.
- Normal CLI invocation emits a `cli_invoked` event, and first use emits `cli_installed` with Node version and platform.
- An explore run’s `test_started` event includes the target and target domain.
- Telemetry is enabled by default but can be disabled with `DO_NOT_TRACK=1`, `AGENTIQA_TELEMETRY=0`, or a config setting.
Evidence against
- The package is an AI testing CLI, and its test-run events relate to that purpose.
- The preinstall hook only checks the Node version and prints upgrade guidance when the version is unsupported.
- No automatic transfer of unrelated credentials or files was established.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
2439L2440: Return a verdict for EVERY item, each with its 0-based "index", a "relation" ("cosmetic" or "critical"), and a one-line "reason".`}function Mie(t,e){return t.map(()=>({relation:"cr...
L2441: `}function toe(t,e,n={}){if(!t||e!=="text")return 0;let r=n.writeStderr??(o=>{process.stderr.write(o)}),s=n.onExit??(o=>{process.once("exit",o)}),i=L3e(t);return r(i),s(()=>r(i)),1...
L2442: `)}function Ot(t,e,n){process.stdout.write(JSON.stringify({ok:!1,schemaVersion:soe,error:{code:t,message:e},...n??{},...ioe()})+`
L2443: `)}import{createServer as V7e}from"node:net";import{createRequire as G7e}from"node:module";import{appendFileSync as H7e}from"node:fs";import{inspect as q7e}from"node:util";import K...
L2444: `).join(""),g,p].join(`
Findings
3 Critical7 High6 Medium5 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to agentiqa@1.1.100.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.100 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.