registry / momentic-mobile / 1.38.0
momentic-mobile@1.38.0
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 25d ago · by lpm-firewall-aiSource inspection found no install lifecycle hook or concrete attack behavior. The agent integration is user-invoked setup for the package's own MCP server, with no evidence of an unrelated credential recipient.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user runs the MCP setup command; prompts can be skipped with `--yes`.
Impact
No confirmed malicious effect or credential exfiltration surface was established.
Mechanism
The command configures selected agent clients to invoke this package's MCP server and writes the selected configuration file.
AI rationale
Source inspection found no install lifecycle hook or concrete attack behavior. The agent integration is user-invoked setup for the package's own MCP server, with no evidence of an unrelated credential recipient.
Evidence
package.jsonbin/cli.js
Decision evidence
public snapshotAI called this Clean at 88.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies a CLI package and declares no install lifecycle scripts.
- The flagged CLI bytes concern project file exclusion patterns, including `.codex`; they do not show agent configuration mutation.
- The CLI exposes a separate MCP setup command that accepts client, scope, config path, and API key options; it can skip prompts only with `--yes`.
- MCP configuration builds commands to run this package's own `mcp` command and includes the API key only when provided.
- The config writer updates the selected configuration file; the CLI explains how the MCP server obtains its key.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetry
Source & flagged code
12 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.37.3
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.37.3
similarity = 0.818
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg32import { PostHog } from 'posthog-node';
L33: import * as vlt from 'child_process';
L34: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
183L184: What the agent did: ${r}`:e}var Jw=Za.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:Et.optional(),retries:z.number().optional(),version:Xw.optional(),cache:iz....
L185: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L191: `)}`;}o.required===false&&(n=n.nullable(),i+=`
L192: Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function aDe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(iD...
L193: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function Xje(t,e){let o,r,n;for(let i of e.split(`
L194: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Numb
Findings
1 Critical10 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
Medium
Affected versions and remediation
This report applies to momentic-mobile@1.38.0.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.38.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.