agentiqa@1.1.85
AI-powered testing for web and mobile apps
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe source confirms that a saved service token accompanies telemetry sent to an unrestricted configured endpoint, so conditional credential exposure remains. The default endpoint is package-aligned and telemetry can be disabled, so this supports a warning rather than a block.
Static reason
One or more suspicious static signals were detected.
Trigger
A CLI telemetry event occurs while telemetry is enabled and AGENTIQA_ANALYTICS_ENDPOINT is set.
Impact
The configured endpoint can receive the service token. The source does not establish malicious use of the token.
Mechanism
The telemetry sender reads the token from credentials.json and attaches it as a bearer token to a POST sent to the selected endpoint.
AI rationale
The source confirms that a saved service token accompanies telemetry sent to an unrestricted configured endpoint, so conditional credential exposure remains. The default endpoint is package-aligned and telemetry can be disabled, so this supports a warning rather than a block.
Evidence
dist/cli.js
Network endpoints1
agentiqa.com
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- dist/cli.js lets AGENTIQA_ANALYTICS_ENDPOINT replace the analytics destination; otherwise it uses the API base with /api/t.
- Telemetry reads a token from the local credentials file and sends it as a bearer token in a POST to the selected destination.
- CLI startup sends installation and invocation events; telemetry is active unless disabled by environment or config.
- The default API base is https://agentiqa.com, the package's own service.
Evidence against
- package.json defines preinstall as a Node script, and scripts/preinstall.cjs only checks the Node version and exits on unsupported versions.
- The token exposure requires a custom analytics endpoint to be configured; the default destination is the package's own service, and telemetry has opt-out controls.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStrings
Source & flagged code
9 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
5`)+`
L6: `}var zH=new Set(["hint","known-issue","credential"]);function KH(t=jg){let e=new Set,n=new Set,r=a=>{e.add(a.flag),a.arg&&n.add(a.flag)};for(let a of t.commands)for(let i of a.fla...
L7: Error message: ${ba(e)}`,cause:e}),this[DT]=!0,this.text=t}static isInstance(t){return Me.hasMarker(t,uR)}},pR="AI_LoadAPIKeyError",hR=`vercel.ai.error.${pR}`,rq=Symbol.for(hR),UT,...
High
Child Process
Package source references child process execution.
Findings
9 High4 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighShell
HighSame File Env Network Executiondist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Affected versions and remediation
This report applies to agentiqa@1.1.85.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.85 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.