agentiqa@1.1.80
AI-powered testing for web and mobile apps
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe credential source, configurable destination, and request sink are connected in the CLI, so conditional token exposure remains a concrete risk. The destination requires an environment override, and the install hook only enforces the Node.js version; the evidence does not support blocking the package.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A CLI telemetry event is sent while telemetry is enabled and the endpoint override is set.
Impact
A recipient controlling the configured destination could receive the saved token. The source does not establish a hidden default redirection or malicious intent.
Mechanism
The CLI reads a token from its saved credentials file and attaches it as a bearer credential to a POST request at the configured analytics destination.
AI rationale
The credential source, configurable destination, and request sink are connected in the CLI, so conditional token exposure remains a concrete risk. The destination requires an environment override, and the install hook only enforces the Node.js version; the evidence does not support blocking the package.
Evidence
dist/cli.js~/.agentiqa/credentials.json
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI reads a saved token from its credentials file and uses it as a bearer credential for an analytics request.
- The analytics destination can be set through an environment variable, and telemetry sends unless disabled by configuration or certain CI conditions.
- The install hook only checks the Node.js version and exits on unsupported versions.
Evidence against
- The manifest’s install hook runs a Node.js version check; it does not install another package or change consumer configuration.
- The inspected credential forwarding is in telemetry, and the destination override must be set in the environment.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
10 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = agentiqa@1.1.76
matchedIdentity = npm:YWdlbnRpcWE:1.1.76
similarity = 0.500
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsFindings
1 Critical9 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighShell
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to agentiqa@1.1.80.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.80 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.