agentiqa@1.1.56
AI-powered testing for web and mobile apps
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe preinstall hook is a transparent Node-version gate, not an attack chain. Runtime execution, network access, credentials, and mobile tooling are explicit, package-aligned QA features with no concrete unconsented mutation or exfiltration behavior found.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit agentiqa CLI commands, including test and mobile workflows
Impact
The user-selected target, supplied credentials, and test artifacts may be handled by the configured testing service; this is the stated product function.
Mechanism
Remote-assisted browser/mobile test automation
AI rationale
The preinstall hook is a transparent Node-version gate, not an attack chain. Runtime execution, network access, credentials, and mobile tooling are explicit, package-aligned QA features with no concrete unconsented mutation or exfiltration behavior found.
Evidence
package.jsonscripts/preinstall.cjsdist/cli.js~/.agentiqa/config.json~/.agentiqa/credentials.json~/.agentiqa/analytics.json~/.agentiqa/events-queue.ndjson
Network endpoints5
agentiqa.comraw.githubusercontent.com/Agentiqa/agentiqa-plugin/main/README.mdapi.openai.com/v1api.anthropic.com/v1generativelanguage.googleapis.com/v1beta
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/cli.js provides a user-invoked remote AI testing workflow with browser/mobile automation.
- dist/cli.js can install mobile MCP support globally only when an explicit mobile CLI workflow needs it.
Evidence against
- scripts/preinstall.cjs only enforces Node.js >=18 and exits on older versions.
- No install-time network, shell, file-harvesting, or agent-control-surface mutation found.
- dist/cli.js network calls target Agentiqa APIs, model providers, and explicitly requested test targets.
- Local writes are package-owned ~/.agentiqa config, credentials, analytics, and queued telemetry files.
- No foreign AI-agent configuration paths or hidden persistence behavior found.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
5`)+`
L6: `}import{spawn as loe}from"node:child_process";import{mkdirSync as coe,writeFileSync as doe,existsSync as uoe,statSync as poe}from"node:fs";import{tmpdir as hoe}from"node:os";impor...
L7: `);for(let[n,r]of Tj)if(n.test(e))return r}function Aj(t){let e=t.map(s=>s.text).join(`
High
Findings
7 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
Affected versions and remediation
This report applies to agentiqa@1.1.56.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.56 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.