agentiqa@1.1.77
AI-powered testing for web and mobile apps
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe package has an install-time Node-version gate and a CLI that can route authenticated runs to its hosted engine or execute locally. Source inspected here does not substantiate a concrete attack, but the remote agent capability remains a warning-level risk.
Static reason
One or more suspicious static signals were detected.
Trigger
Running the CLI in authenticated hosted mode or selecting embedded execution.
Impact
Depending on mode and configuration, execution and provider credentials may be handled by a remote service or local engine. No concrete malicious data transfer was established from the inspected excerpts.
Mechanism
The CLI reads provider keys from the environment and routes hosted execution to an Agentiqa engine; embedded mode serves HTTP and WebSocket requests with an optional engine-token check.
AI rationale
The package has an install-time Node-version gate and a CLI that can route authenticated runs to its hosted engine or execute locally. Source inspected here does not substantiate a concrete attack, but the remote agent capability remains a warning-level risk.
Evidence
package.jsondist/cli.js
Network endpoints2
engine.agentiqa.coms-engine.agentiqa.com
Decision evidence
public snapshotAI called this Suspicious at 69.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a preinstall hook that checks the Node version.
- The CLI reads provider API keys from the environment and supports a configurable OpenAI base URL.
- The embedded engine exposes HTTP and WebSocket interfaces; non-health requests require the configured engine token when one is set.
- Authenticated use selects a hosted Agentiqa engine by default, enabling remote agent execution.
Evidence against
- The preinstall script only checks the Node version and exits on unsupported versions.
- OpenAI provider calls use the configured base URL or the standard OpenAI endpoint.
- The CLI exposes an embedded execution option, and the hosted engine URL is within the package vendor's domain.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
1#!/usr/bin/env node
L2: var uV=Object.create;var xS=Object.defineProperty;var pV=Object.getOwnPropertyDescriptor;var hV=Object.getOwnPropertyNames;var fV=Object.getPrototypeOf,mV=Object.prototype.hasOwnPr...
L3: ${n.message}`),r?new D6.VercelOidcTokenError(r):n}return t}function oy(){let t=(0,L6.getContext)().headers?.["x-vercel-oidc-token"]??process.env.VERCEL_OIDC_TOKEN;if(!t)throw new E...
...
L5: `)+`
L6: `}var bV=new Set(["hint","known-issue","credential"]);function vV(t=Jm){let e=new Set,n=new Set,r=a=>{e.add(a.flag),a.arg&&n.add(a.flag)};for(let a of t.commands)for(let i of a.fla...
L7: `);for(let[n,r]of FV)if(n.test(e))return r}function KS(t){let e=t.map(s=>s.text).join(`
Findings
7 High4 Medium5 Low
HighInstall Time Lifecycle Scriptspackage.json
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to agentiqa@1.1.77.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.77 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.