agentiqa@1.1.61
AI-powered testing for web and mobile apps
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThis is not malicious by source evidence, but its explicit remote-agent and local-file/browser capability warrants a warning as dangerous dual-use functionality. Installation itself has no confirmed harmful behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
User runs an agentiqa testing command.
Impact
User-selected local content and test/browser context may reach the configured remote service; subprocesses are limited to test tooling/helpers.
Mechanism
Remote AI-guided browser testing with local-file and subprocess helpers.
AI rationale
This is not malicious by source evidence, but its explicit remote-agent and local-file/browser capability warrants a warning as dangerous dual-use functionality. Installation itself has no confirmed harmful behavior.
Evidence
package.jsonscripts/preinstall.cjsdist/cli.js~/.agentiqa/config.json~/.agentiqa/credentials.json~/.agentiqa/events-queue.ndjson
Network endpoints2
agentiqa.coms.agentiqa.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Benign with low false-positive risk.
Evidence for warning
- dist/cli.js exposes an AI testing runtime with browser, local-file, and page-JavaScript tools.
- The local-file tool accepts absolute paths; testing traces/tool results can be sent to the configured remote API.
- CLI runtime can invoke adb/xcrun and may run npm to cache ffmpeg-static during an explicit test run.
Evidence against
- scripts/preinstall.cjs only rejects Node versions below 18; it performs no network, file, or agent-config mutation.
- The risky capabilities are reached through explicit CLI testing commands, not installation or import.
- No stealth payload, credential harvesting, destructive action, or foreign AI-agent control-surface write was found.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedObfuscatedUrlStrings
NoLicense
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
5`)+`
L6: `}import{spawn as Bce}from"node:child_process";import{mkdirSync as Vce,writeFileSync as Gce,existsSync as qce,statSync as Hce}from"node:fs";import{tmpdir as Wce}from"node:os";impor...
L7: `);for(let[n,r]of p2)if(n.test(e))return r}function Dw(t){let e=t.map(s=>s.text).join(`
High
Findings
7 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowObfuscated
Low
Affected versions and remediation
This report applies to agentiqa@1.1.61.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.61 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.