agentiqa@1.1.59
AI-powered testing for web and mobile apps
AI Security Review
scanned 3mo ago · by lpm-firewall-aiStatic inspection found a broad but package-aligned AI testing CLI, while its only lifecycle hook checks the Node major version. No concrete malicious chain, covert collection, or foreign AI-agent control-surface mutation was found.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit agentiqa CLI commands such as login, explore, or run.
Impact
Expected testing automation capabilities; no unconsented install-time mutation, persistence, or credential exfiltration established.
Mechanism
User-invoked AI-assisted web/mobile testing and vendor API interaction.
AI rationale
Static inspection found a broad but package-aligned AI testing CLI, while its only lifecycle hook checks the Node major version. No concrete malicious chain, covert collection, or foreign AI-agent control-surface mutation was found.
Evidence
package.jsonscripts/preinstall.cjsdist/cli.js~/.agentiqa/credentials.json
Network endpoints3
agentiqa.coms.agentiqa.comraw.githubusercontent.com/Agentiqa/agentiqa-plugin/main/README.md
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/cli.js exposes browser-testing, HTTP, and child-process capabilities after explicit CLI commands.
- dist/cli.js fetches Agentiqa product context for capability-question responses.
Evidence against
- scripts/preinstall.cjs only enforces Node.js >=18 and performs no network, file, or agent-config mutation.
- package.json identifies dist/cli.js as a user-invoked CLI entrypoint.
- dist/cli.js scopes credential storage to ~/.agentiqa/credentials.json for explicit login/logout flows.
- Observed network calls target Agentiqa services or documented product-context URLs; no covert exfiltration chain was found.
- Child-process use is for user-invoked browser/mobile/ffmpeg support, not install-time execution.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
Source & flagged code
7 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
5`)+`
L6: `}import{spawn as ple}from"node:child_process";import{mkdirSync as hle,writeFileSync as fle,existsSync as mle,statSync as gle}from"node:fs";import{tmpdir as yle}from"node:os";impor...
L7: `);for(let[n,r]of d1)if(n.test(e))return r}function aw(t){let e=t.map(s=>s.text).join(`
High
Findings
6 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to agentiqa@1.1.59.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.59 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.