registry / momentic-mobile / 1.33.2
momentic-mobile@1.33.2
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has a real guarded AI-agent configuration mutation capability, which warrants a warning under the policy. Static inspection found no lifecycle trigger or concrete malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
An interactive run, test, or app CLI command in a configured Momentic project, followed by user confirmation.
Impact
This modifies project-level AI-agent guidance, but the observed flow is guarded by an interactive prompt rather than an install lifecycle hook.
Mechanism
The CLI writes bundled skills and agent instruction pointers, replacing existing Momentic-named skill directories.
AI rationale
The package has a real guarded AI-agent configuration mutation capability, which warrants a warning under the policy. Static inspection found no lifecycle trigger or concrete malicious behavior.
Evidence
bin/cli.js.agents/skillsAGENTS.md.momentic/skills.json
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The manifest exposes a CLI entry point and contains no install lifecycle hook.
- The CLI pre-action hook invokes the skills installer for run, test, and app commands.
- The skills installer deletes and writes coding-agent skill files and instruction pointers in the project.
Evidence against
- The automatic skills flow is limited to interactive terminals, requires a Momentic configuration file, and presents a confirmation prompt.
- No install-time execution, credential export, or unrelated network recipient was identified in the inspected entry point.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
12 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.33.1
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.33.1
similarity = 0.818
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg31import { PostHog } from 'posthog-node';
L32: import * as V7e from 'child_process';
L33: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
178L179: What the agent did: ${r}`:e}var QS=ca.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:st.optional(),retries:z.number().optional(),version:ZS.optional(),cache:CD....
L180: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L182: `).map((d,p)=>p>0?` ${d}`:d).join(`
L183: `)),i(" ",o(m));}}setMinLevel(e){typeof e=="string"?this.minLogLevel=dv[e]:this.minLogLevel=e;}setOutputStream(e){this.forcedStream=e;}log(...e){this.logWithLevel(30,ms.reset,...e...
L184: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function O0e(t,e){let o,r,n;for(let i of e.split(`
L185: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Number.parseIn
Findings
1 Critical9 High4 Medium7 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to momentic-mobile@1.33.2.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.33.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.