agentiqa@1.1.103
AI-powered testing for web and mobile apps
AI Security Review
scanned 9h ago · by lpm-firewall-aiThe install hook is a Node version gate, and the CLI’s reviewed credential paths send keys to the selected model provider or the Agentiqa API. The gateway URL occurs in bundled SDK code, while the package’s model factory routes only among Google, Anthropic, and OpenAI.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installation runs a Node version check; provider credentials are used when the CLI runs the selected AI feature.
Impact
No unauthorized credential transfer, persistence, or account action was identified.
Mechanism
The hook prints a Node upgrade message on unsupported versions. The CLI routes model keys to the selected provider and service keys to the Agentiqa API base.
AI rationale
The install hook is a Node version gate, and the CLI’s reviewed credential paths send keys to the selected model provider or the Agentiqa API. The gateway URL occurs in bundled SDK code, while the package’s model factory routes only among Google, Anthropic, and OpenAI.
Network endpoints4
s.agentiqa.comgenerativelanguage.googleapis.comapi.anthropic.comapi.openai.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes dist/cli.js as the CLI and declares scripts/preinstall.cjs as its preinstall hook.
- The preinstall hook checks the Node version and prints upgrade guidance; the curl command appears as text and is not run.
- The model factory routes the selected provider key through its matching Google, Anthropic, or OpenAI provider.
- Service keys are sent in an X-Service-Key header to the Agentiqa API base, which can be configured with AGENTIQA_API_URL.
- The ai-gateway.vercel.sh URL appears in bundled SDK provider code; the package model factory selects Google, Anthropic, or OpenAI.
Evidence against
- The install hook does not download or execute code.
- The inspected credential flows match the package’s AI testing and Agentiqa service features; no unrelated collector or automatic account action was identified.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsMinified
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
2439L2440: Return a verdict for EVERY item, each with its 0-based "index", a "relation" ("cosmetic" or "critical"), and a one-line "reason".`}function Poe(t,e){return t.map(()=>({relation:"cr...
L2441: `}function Zoe(t,e,n={}){if(!t||e!=="text")return 0;let r=n.writeStderr??(o=>{process.stderr.write(o)}),s=n.onExit??(o=>{process.once("exit",o)}),i=C5e(t);return r(i),s(()=>r(i)),1...
L2442: `)}function Dt(t,e,n){process.stdout.write(JSON.stringify({ok:!1,schemaVersion:nae,error:{code:t,message:e},...n??{},...rae()})+`
L2443: `)}import{createServer as Bet}from"node:net";import{createRequire as jet}from"node:module";import{appendFileSync as Vet}from"node:fs";import{inspect as Get}from"node:util";import T...
L2444: `).join(""),g,f].join(`
Findings
3 Critical7 High6 Medium5 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to agentiqa@1.1.103.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.103 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.