agentiqa@1.1.48
AI-powered testing for web and mobile apps
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe preinstall hook is solely a Node-version gate, and the flagged network/subprocess behavior occurs in the documented runtime CLI. Source inspection found no concrete malicious chain or unconsented AI-agent control-surface mutation.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Explicit agentiqa CLI commands, especially explore or run.
Impact
The CLI can test a user-specified target and store its own credentials, telemetry, and artifacts; no covert exfiltration or foreign agent-control mutation was found.
Mechanism
User-invoked test automation, hosted API access, optional telemetry, and local browser/video tooling.
AI rationale
The preinstall hook is solely a Node-version gate, and the flagged network/subprocess behavior occurs in the documented runtime CLI. Source inspection found no concrete malicious chain or unconsented AI-agent control-surface mutation.
Evidence
package.jsonscripts/preinstall.cjsdist/cli.js
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/cli.js can provision ffmpeg with npm, but only during explicit runtime commands.
- dist/cli.js sends opt-out telemetry during CLI use.
Evidence against
- scripts/preinstall.cjs only rejects Node versions below 18.
- No install hook writes agent configs, harvests data, or contacts a network endpoint.
- dist/cli.js dispatches only explicit CLI commands (explore/run/login/etc.).
- Network calls are product APIs, hosted-engine access, auth, and user-selected LLM providers.
- Child processes are scoped to browser/mobile tooling and ffmpeg used by test execution.
- Telemetry excludes CI by default and honors DO_NOT_TRACK/AGENTIQA_TELEMETRY.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = agentiqa@1.1.45
matchedIdentity = npm:YWdlbnRpcWE:1.1.45
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsFindings
1 Critical7 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to agentiqa@1.1.48.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.48 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.