momentic-mobile@1.27.4
 [![npm]](https://www.npmjs.com/package/momentic-mobile)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe scanner's alleged credential redirect and entrypoint overwrite were not confirmed by source inspection. The remaining concrete risk is explicit AI-editor skill installation, which warrants a warning rather than a block.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs momentic-mobile install-skills --editor <editor>.
Impact
Modifies selected project-local AI-editor skill paths with bundled Markdown.
Mechanism
Explicit agent-skill file installation.
AI rationale
The scanner's alleged credential redirect and entrypoint overwrite were not confirmed by source inspection. The remaining concrete risk is explicit AI-editor skill installation, which warrants a warning rather than a block.
Evidence
package.jsonbin/cli.jsskills/momentic-explore-prompt.mdskills/momentic-maintain.mdskills/momentic-mobile-test.mdskills/momentic-test.mdskills/momentic-triage-quarantined-tests.md.cursor/skills/<skill>/SKILL.md.claude/skills/<skill>/SKILL.md.agents/skills/<skill>/SKILL.md.opencode/skills/<skill>/SKILL.md.github/skills/<skill>/SKILL.md
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The manifest exposes a CLI entrypoint.
- An explicit deprecated install-skills command copies packaged skill Markdown into a user-selected AI-editor skills directory.
Evidence against
- package.json contains no lifecycle scripts, so install does not execute the CLI.
- The skill write is only reached through the explicit install-skills command and requires an editor choice.
- The default authenticated API endpoint is package-aligned, https://api.momentic.ai; no fixed unofficial credential gateway was found.
- No source evidence established command-output exfiltration, foreign package overwrite, remote payload execution, or stealth persistence.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinified
Source & flagged code
13 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.27.1
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.27.1
similarity = 0.700
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg29import { PostHog } from 'posthog-node';
L30: import * as dGe from 'child_process';
L31: import { execFile, execSync, exec, execFileSync } from 'child_process';
High
176Original error: ${n}
L177: `}async function fH({dryRun:t,operation:e}){try{return await e()}catch(n){throw new Error($Te({err:n,dryRun:t}),{cause:n})}}function Hr(t){return t instanceof Error?t:new Error(W(t...
L178: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
...
L180: `).map((p,m)=>m>0?` ${p}`:p).join(`
L181: `)),i(" ",n(d));}}setMinLevel(e){typeof e=="string"?this.minLogLevel=Py[e]:this.minLogLevel=e;}setOutputStream(e){this.forcedStream=e;}log(...e){this.logWithLevel(30,Ua.reset,...e...
L182: `)){let[o,r]=n.trim().split(/\s+/,2);if(!o||!r)continue;let i=Number.parseInt(r,10);Number.isFinite(i)&&(e[o]=i);}return e}function c_e(t,e){let n,o,r;for(let i of e.split(`
L183: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(n=l),s==="PPid
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-2EsCZZkp.js
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighEntrypoint Foreign Package Code Overwritebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirestatic/assets/index-2EsCZZkp.js
MediumNetwork
Affected versions and remediation
This report applies to momentic-mobile@1.27.4.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.27.4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.