momentic-mobile@1.28.0
 [![npm]](https://www.npmjs.com/package/momentic-mobile)
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe scanner’s overwrite and credential-redirection claims overstate the inspected source. The explicit AI-agent skill installation remains a meaningful capability warranting a warning under policy.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `momentic-mobile install-skills --editor <selected-editor>`.
Impact
Package-provided instructions can influence the selected coding agent when later loaded.
Mechanism
Explicit AI-editor skill installation and local credential storage.
AI rationale
The scanner’s overwrite and credential-redirection claims overstate the inspected source. The explicit AI-agent skill installation remains a meaningful capability warranting a warning under policy.
Evidence
package.jsonbin/cli.jsREADME.md.cursor/skills.claude/skills.agents/skills.opencode/skills.github/skills~/.momentic/auth.json
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Explicit `install-skills` CLI command writes Momentic skill files into selected AI-editor project directories.
- CLI persists Momentic credentials in `~/.momentic/auth.json` with restrictive mode.
Evidence against
- package.json exposes only a bin entry and has no lifecycle scripts.
- The default API endpoint is `https://api.momentic.ai`; no fixed unofficial credential gateway was confirmed.
- Agent-directory writes require an explicit deprecated command and mandatory editor selection.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
NoLicense
Source & flagged code
13 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.27.4
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.27.4
similarity = 0.900
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg29import { PostHog } from 'posthog-node';
L30: import * as _Ge from 'child_process';
L31: import { execFile, execSync, exec, execFileSync } from 'child_process';
High
176Original error: ${n}
L177: `}async function AH({dryRun:t,operation:e}){try{return await e()}catch(n){throw new Error(sEe({err:n,dryRun:t}),{cause:n})}}function Hr(t){return t instanceof Error?t:new Error(W(t...
L178: `).map((o,r)=>r>0?`${n}${o}`:o).join(`
...
L180: `).map((p,m)=>m>0?` ${p}`:p).join(`
L181: `)),i(" ",n(d));}}setMinLevel(e){typeof e=="string"?this.minLogLevel=Ny[e]:this.minLogLevel=e;}setOutputStream(e){this.forcedStream=e;}log(...e){this.logWithLevel(30,Ua.reset,...e...
L182: `)){let[o,r]=n.trim().split(/\s+/,2);if(!o||!r)continue;let i=Number.parseInt(r,10);Number.isFinite(i)&&(e[o]=i);}return e}function __e(t,e){let n,o,r;for(let i of e.split(`
L183: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(n=l),s==="PPid
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-TyBtas4x.js
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighEntrypoint Foreign Package Code Overwritebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirestatic/assets/index-TyBtas4x.js
MediumNetwork
Affected versions and remediation
This report applies to momentic-mobile@1.28.0.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.28.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.