agentiqa@1.1.95
AI-powered testing for web and mobile apps
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package is an AI-powered testing CLI. Its preinstall hook only enforces the Node version requirement, and the reviewed credential handling is consistent with documented bring-your-own model configuration; the scanner's gateway and command-execution indicators were not sufficient to establish an attack.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
The preinstall hook runs during installation; CLI behavior runs when a user invokes the command.
Impact
No unauthorized credential forwarding, install-time data collection, or unrelated persistence was established from the inspected source.
Mechanism
The hook checks the Node major version. The CLI documents bring-your-own model keys and provider endpoints; the inspected Anthropic provider uses its service endpoint by default.
AI rationale
The package is an AI-powered testing CLI. Its preinstall hook only enforces the Node version requirement, and the reviewed credential handling is consistent with documented bring-your-own model configuration; the scanner's gateway and command-execution indicators were not sufficient to establish an attack.
Network endpoints2
api.anthropic.comuser-configured Anthropic or OpenAI-compatible endpoint
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes an AI testing CLI and exposes dist/cli.js as its command entry point.
- The preinstall hook only checks the Node.js version and exits on versions below 18.
- The CLI documents non-Google model keys as bring-your-own keys, with a user-configurable OpenAI-compatible endpoint.
- The Anthropic provider defaults to api.anthropic.com and accepts an explicit base URL override.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
15 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
2425L2426: Return a verdict for EVERY item, each with its 0-based "index", a "relation" ("cosmetic" or "critical"), and a one-line "reason".`}function lse(t,e){return t.map(()=>({relation:"cr...
L2427: `}function kse(t,e,n={}){if(!t||e!=="text")return 0;let r=n.writeStderr??(o=>{process.stderr.write(o)}),s=n.onExit??(o=>{process.once("exit",o)}),i=MKe(t);return r(i),s(()=>r(i)),1...
L2428: `)}function Lt(t,e,n){process.stdout.write(JSON.stringify({ok:!1,schemaVersion:Nse,error:{code:t,message:e},...n??{},...Ose()})+`
L2429: `)}import{createServer as GJe}from"node:net";import{createRequire as HJe}from"node:module";import{appendFileSync as qJe}from"node:fs";import{inspect as WJe}from"node:util";import e...
L2430: `).join(""),g,p].join(`
Findings
3 Critical12 High4 Medium6 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighShell
HighEvaldist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
Affected versions and remediation
This report applies to agentiqa@1.1.95.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.95 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.