agentiqa@1.1.96
AI-powered testing for web and mobile apps
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe CLI sends runtime analytics to Agentiqa’s `/api/t` endpoint, and test events include the app’s domain, exposing identifying project context. An opt-out is available, but the default telemetry still warrants a warning.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs a CLI test or exploration command.
Impact
Agentiqa receives identifying information about the app under test. The telemetry has an opt-out.
Mechanism
The CLI sends analytics events to the configured endpoint, defaulting to https://agentiqa.com/api/t; test events include target_domain.
AI rationale
The CLI sends runtime analytics to Agentiqa’s `/api/t` endpoint, and test events include the app’s domain, exposing identifying project context. An opt-out is available, but the default telemetry still warrants a warning.
Evidence
dist/cli.js~/.agentiqa/analytics.json~/.agentiqa/events-queue.ndjson
Network endpoints1
agentiqa.com/api/t
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- CLI test runs automatically emit a `test_started` event containing `target_domain` and `source_tool`.
- Events are POSTed to the configured analytics endpoint, which defaults to the CLI API’s `/api/t` path.
- The default API host in the source is `agentiqa.com`.
- Telemetry can be disabled with `AGENTIQA_TELEMETRY=0`, `DO_NOT_TRACK=1`, or a config setting.
Evidence against
- The preinstall hook only checks for Node.js 18 or newer and exits on older versions.
- The telemetry endpoint defaults to the package’s own service.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
2425L2426: Return a verdict for EVERY item, each with its 0-based "index", a "relation" ("cosmetic" or "critical"), and a one-line "reason".`}function use(t,e){return t.map(()=>({relation:"cr...
L2427: `}function Nse(t,e,n={}){if(!t||e!=="text")return 0;let r=n.writeStderr??(o=>{process.stderr.write(o)}),s=n.onExit??(o=>{process.once("exit",o)}),i=$Ke(t);return r(i),s(()=>r(i)),1...
L2428: `)}function Lt(t,e,n){process.stdout.write(JSON.stringify({ok:!1,schemaVersion:Lse,error:{code:t,message:e},...n??{},...Mse()})+`
L2429: `)}import{createServer as WJe}from"node:net";import{createRequire as KJe}from"node:module";import{appendFileSync as zJe}from"node:fs";import{inspect as YJe}from"node:util";import t...
L2430: `).join(""),g,p].join(`
Findings
3 Critical10 High4 Medium6 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/cli.js
HighShell
HighEvaldist/cli.js
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
Affected versions and remediation
This report applies to agentiqa@1.1.96.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.96 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.