agentiqa@1.1.99
AI-powered testing for web and mobile apps
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe CLI sends default runtime usage telemetry with a persistent ID, but the inspected event fields contain only basic command and runtime metadata, and the code provides opt-outs. No install-time data collection or credential theft was identified, so this warrants a warning rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
On normal CLI invocation; a first-run installation event is also sent when the CLI is first used.
Impact
The service can associate CLI usage events with a persistent installation ID. The inspected event fields do not show credentials, file contents, or command arguments.
Mechanism
The CLI POSTs events to /api/t at https://agentiqa.com by default. Events include a persistent distinct ID and basic command and runtime metadata; opt-outs are supported.
AI rationale
The CLI sends default runtime usage telemetry with a persistent ID, but the inspected event fields contain only basic command and runtime metadata, and the code provides opt-outs. No install-time data collection or credential theft was identified, so this warrants a warning rather than a block.
Evidence
dist/cli.js~/.agentiqa/analytics.json~/.agentiqa/.installed~/.agentiqa/events-queue.ndjson
Network endpoints1
agentiqa.com/api/t
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Unknown with medium false-positive risk.
Evidence for warning
- Normal CLI startup sends a cli_invoked event containing the command, CLI version, Node version, OS, and CI status.
- The first CLI run also sends a cli_installed event and stores an installation marker.
- Telemetry events include a persistent distinct ID and are POSTed to the analytics endpoint, which defaults to Agentiqa's service.
Evidence against
- Telemetry can be disabled with DO_NOT_TRACK=1, AGENTIQA_TELEMETRY=0, or telemetry:false in the CLI config.
- The preinstall hook only checks the Node version and exits on unsupported versions.
- The CLI describes its bring-your-own-key provider feature and checks account entitlement before forwarding provider keys to the embedded engine.
Behavioral surface
EnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
NoLicense
Source & flagged code
13 flaggedpackage.jsonView file
•scripts.preinstall = node scripts/preinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.preinstall = node scripts/preinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/cli.jsView file
2439L2440: Return a verdict for EVERY item, each with its 0-based "index", a "relation" ("cosmetic" or "critical"), and a one-line "reason".`}function kie(t,e){return t.map(()=>({relation:"cr...
L2441: `}function zie(t,e,n={}){if(!t||e!=="text")return 0;let r=n.writeStderr??(o=>{process.stderr.write(o)}),s=n.onExit??(o=>{process.once("exit",o)}),i=w3e(t);return r(i),s(()=>r(i)),1...
L2442: `)}function Ot(t,e,n){process.stdout.write(JSON.stringify({ok:!1,schemaVersion:Qie,error:{code:t,message:e},...n??{},...Jie()})+`
L2443: `)}import{createServer as I7e}from"node:net";import{createRequire as C7e}from"node:module";import{appendFileSync as N7e}from"node:fs";import{inspect as O7e}from"node:util";import q...
L2444: `).join(""),g,h].join(`
Findings
3 Critical7 High6 Medium5 Low
CriticalSame File Env Network Executiondist/cli.js
CriticalCredential Exfiltrationdist/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/cli.js
HighInstall Time Lifecycle Scriptspackage.json
HighCredential Redirect Persistencedist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighRemote Agent Bridgedist/cli.js
HighTrigger Reachable Credential Exfiltrationdist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
HighSemantic Analysis Limiteddist/cli.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
Medium
Affected versions and remediation
This report applies to agentiqa@1.1.99.
See all versions of agentiqa for other recorded verdicts.
- Review the evidence and your use of agentiqa@1.1.99 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.