momentic-mobile@1.23.1
 [![npm]](https://www.npmjs.com/package/momentic-mobile)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNot malicious: the scanner's claimed credential gateway and foreign-package overwrite were not substantiated. The explicit agent-skill installation is a real but user-consented capability warranting a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `momentic-mobile install-skills --editor <editor>`.
Impact
Can alter coding-agent instructions in the current project after direct user invocation.
Mechanism
Explicit agent skill-file installation
AI rationale
Not malicious: the scanner's claimed credential gateway and foreign-package overwrite were not substantiated. The explicit agent-skill installation is a real but user-consented capability warranting a warning.
Evidence
package.jsonbin/cli.jsREADME.mdskillsproject/.cursor/skillsproject/.claude/skillsproject/.agents/skillsproject/.opencode/skillsproject/.github/skills
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `install-skills` command writes bundled SKILL.md files into selected agent-editor project directories.
Evidence against
- package.json has no lifecycle scripts; execution is only via the declared CLI bin.
- Agent-directory mutation requires the user to invoke `momentic-mobile install-skills --editor`.
- Credentials are saved only to the package's ~/.momentic/auth.json with restrictive file mode.
- Default service endpoint is https://api.momentic.ai; no unofficial credential gateway was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
14 flaggedstatic/assets/vendor-BGJYASAU.jsView file
20patternName = generic_password
severity = medium
line = 20
matchedText = Reason: ...ion.
Medium
Secret Pattern
Package contains a possible secret pattern.
static/assets/vendor-BGJYASAU.jsView on unpkg · L20bin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.15.1
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.15.1
similarity = 0.600
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg29import { PostHog } from 'posthog-node';
L30: import * as u2e from 'child_process';
L31: import { execFile, execSync, exec, execFileSync } from 'child_process';
Findings
1 Critical9 High5 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-RFrWS3F5.js
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighEntrypoint Foreign Package Code Overwritebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumSecret Patternstatic/assets/vendor-BGJYASAU.js
MediumDynamic Require
Affected versions and remediation
This report applies to momentic-mobile@1.23.1.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.23.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.