momentic-mobile@1.35.1
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiInspected source shows explicit CLI agent configuration and persistent instruction installation, which the supplied policy classifies as a warning. No npm install hook, self-dependency chain, or concrete malicious behavior supports blocking.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running install-mcp, skills, or project initialization, or accepting a skill installation or update prompt.
Impact
Changes future agent instructions and enables the Momentic MCP server; optional key embedding stores a Momentic credential in agent configuration.
Mechanism
Writes agent MCP configuration and bundled skills, adds instruction pointers, and records installed targets and versions. Saved targets do not bypass subsequent update confirmation.
AI rationale
Inspected source shows explicit CLI agent configuration and persistent instruction installation, which the supplied policy classifies as a warning. No npm install hook, self-dependency chain, or concrete malicious behavior supports blocking.
Evidence
bin/cli.jsAGENTS.mdCLAUDE.md.mcp.jsonopencode.json
Decision evidence
public snapshotAI called this Suspicious at 94.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json exposes bin/cli.js as the CLI and contains no install lifecycle hooks or runtime self-dependency.
- The flagged agent directory names belong to project scan exclusions.
- Explicit install-mcp and skills commands configure coding agents and add persistent instruction pointers, including AGENTS.md.
- MCP setup merges a named server entry into existing agent configuration.
- Skill targets and installed versions are saved; later skill updates require a fresh confirmation.
- Copying a saved Momentic API key into MCP configuration requires an explicit option.
Evidence against
- No concrete malicious install behavior or covert credential theft was established.
- The agent integration invokes the package's own MCP server and is activated through CLI commands.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
Source & flagged code
12 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.35.0
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.35.0
similarity = 0.636
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg32import { PostHog } from 'posthog-node';
L33: import * as Tat from 'child_process';
L34: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
181L182: What the agent did: ${r}`:e}var Rw=qa.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:St.optional(),retries:z.number().optional(),version:xw.optional(),cache:gF....
L183: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L185: `).map((d,p)=>p>0?` ${d}`:d).join(`
L186: `)),i(" ",o(m));}}setMinLevel(e){typeof e=="string"?this.minLogLevel=Bw[e]:this.minLogLevel=e;}setOutputStream(e){this.forcedStream=e;}log(...e){this.logWithLevel(30,el.reset,...e...
L187: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function bBe(t,e){let o,r,n;for(let i of e.split(`
L188: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Number.parseIn
Findings
1 Critical10 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
Medium
Affected versions and remediation
This report applies to momentic-mobile@1.35.1.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.35.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.