registry / momentic-mobile / 1.37.3
momentic-mobile@1.37.3
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 28d ago · by lpm-firewall-aiThe source inspection found no lifecycle hook or concrete attack behavior. The agent integration is user-facing and consent-gated, while the flagged `.claude` location is only an exclusion-list entry.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the CLI; skills setup runs only when its command conditions are met and confirmation is accepted.
Impact
No confirmed attack impact was established.
Mechanism
The skills workflow asks before writing skills and agent instruction pointers. API requests use Momentic’s default API endpoint unless a caller supplies a server.
AI rationale
The source inspection found no lifecycle hook or concrete attack behavior. The agent integration is user-facing and consent-gated, while the flagged `.claude` location is only an exclusion-list entry.
Network endpoints1
api.momentic.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest identifies this as Momentic’s CLI and exposes `bin/cli.js`; no lifecycle scripts are defined.
- The flagged `.claude` occurrence is in a directory exclusion list, not an agent configuration write.
- The agent skills workflow asks for confirmation before installing or updating skills, then installs only for selected or detected agents.
- API keys are routed to Momentic’s default API unless the caller selects a server; the default is `api.momentic.ai`.
- No concrete malicious behavior was established in the inspected source.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
12 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.37.2
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.37.2
similarity = 0.727
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg32import { PostHog } from 'posthog-node';
L33: import * as Ast from 'child_process';
L34: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
182L183: What the agent did: ${r}`:e}var Bw=Ka.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:Et.optional(),retries:z.number().optional(),version:Uw.optional(),cache:NF....
L184: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L190: `)}`;}o.required===false&&(n=n.nullable(),i+=`
L191: Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function xNe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(AN...
L192: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function Sje(t,e){let o,r,n;for(let i of e.split(`
L193: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Numb
Findings
1 Critical10 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
Medium
Affected versions and remediation
This report applies to momentic-mobile@1.37.3.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.37.3 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.