momentic-mobile@1.25.0
 [![npm]](https://www.npmjs.com/package/momentic-mobile)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo concrete malicious behavior was confirmed. The explicit overwrite of AI-agent skill files warrants a warning under the firewall policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs momentic-mobile install-skills with --editor.
Impact
Modifies project-local AI-agent instruction files for the selected editor.
Mechanism
Explicit agent skill installation and overwrite.
AI rationale
No concrete malicious behavior was confirmed. The explicit overwrite of AI-agent skill files warrants a warning under the firewall policy.
Evidence
package.jsonbin/cli.jsskills/momentic-maintain.mdskills/momentic-mobile-test.mdskills/momentic-test.md.cursor/skills/<skill>/SKILL.md.claude/skills/<skill>/SKILL.md.agents/skills/<skill>/SKILL.md.opencode/skills/<skill>/SKILL.md.github/skills/<skill>/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit install-skills command writes package skills into agent/editor directories.
- The writer overwrites SKILL.md without checking for an existing file.
Evidence against
- No npm lifecycle scripts are declared.
- Agent-directory writes require the explicit install-skills command and editor choice.
- Inspected bundled skills are testing workflow documentation; no credential theft or remote-payload instruction found.
- Observed Momentic API use is consistent with this authenticated test-runner CLI.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
13 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.24.0
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.24.0
similarity = 0.700
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg29import { PostHog } from 'posthog-node';
L30: import * as CHe from 'child_process';
L31: import { execFile, execSync, exec, execFileSync } from 'child_process';
High
173Original error: ${n}
L174: `}async function z2({dryRun:t,operation:e}){try{return await e()}catch(n){throw new Error(USe({err:n,dryRun:t}),{cause:n})}}function na(t){return t instanceof Error?t:new Error(G(t...
L175: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
...
L177: `).map((p,m)=>m>0?` ${p}`:p).join(`
L178: `)),i(" ",n(d));}}setMinLevel(e){typeof e=="string"?this.minLogLevel=sy[e]:this.minLogLevel=e;}setOutputStream(e){this.forcedStream=e;}log(...e){this.logWithLevel(30,Na.reset,...e...
L179: `)){let[o,r]=n.trim().split(/\s+/,2);if(!o||!r)continue;let i=Number.parseInt(r,10);Number.isFinite(i)&&(e[o]=i);}return e}function Jxe(t,e){let n,o,r;for(let i of e.split(`
L180: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(n=l),s==="PPid
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-rclkS1uB.js
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighEntrypoint Foreign Package Code Overwritebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirestatic/assets/index-rclkS1uB.js
MediumNetwork
Affected versions and remediation
This report applies to momentic-mobile@1.25.0.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.25.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.