agentiqa@1.1.101
AI-powered testing for web and mobile apps
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe preinstall hook only rejects Node.js versions below 18. The flagged credential and network behavior is consistent with explicit login and model-provider use, and provider keys are withheld from the embedded engine without the required entitlement.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The version check runs during installation; login, service requests, and model calls run when a user invokes CLI commands or starts a test run.
Impact
No malicious behavior was identified in the reviewed paths.
Mechanism
The install hook checks the Node.js version. Login targets the selected or configured Agentiqa API; provider keys are gated by BYOK entitlement before being passed to the embedded engine.
AI rationale
The preinstall hook only rejects Node.js versions below 18. The flagged credential and network behavior is consistent with explicit login and model-provider use, and provider keys are withheld from the embedded engine without the required entitlement.
Evidence
~/.agentiqa/credentials.json
Network endpoints4
agentiqa.comgenerativelanguage.googleapis.comapi.anthropic.comapi.openai.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/cli.js as a command-line executable.
- The preinstall hook checks the Node.js version and exits on versions below 18.
- Login is an explicit CLI command and uses the selected or configured Agentiqa API URL.
- Provider keys are removed before starting the embedded engine when BYOK entitlement is absent.
Evidence against
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Oversized source lightweight scan
dist/cli.js4.06 MB file, sampled 256 KB
Filesystem
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
2439L2440: Return a verdict for EVERY item, each with its 0-based "index", a "relation" ("cosmetic" or "critical"), and a one-line "reason".`}function loe(t,e){return t.map(()=>({relation:"cr...
L2441: `}function xoe(t,e,n={}){if(!t||e!=="text")return 0;let r=n.writeStderr??(o=>{process.stderr.write(o)}),s=n.onExit??(o=>{process.once("exit",o)}),i=NYe(t);return r(i),s(()=>r(i)),1...
L2442: `)}function Ot(t,e,n){process.stdout.write(JSON.stringify({ok:!1,schemaVersion:Noe,error:{code:t,message:e},...n??{},...Ooe()})+`
L2443: `)}import{createServer as FZe}from"node:net";import{createRequire as BZe}from"node:module";import{appendFileSync as jZe}from"node:fs";import{inspect as VZe}from"node:util";import l...
L2444: `).join(""),g,p].join(`
Findings
3 Critical7 High6 Medium5 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to agentiqa@1.1.101.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.101 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.