registry / momentic-mobile / 1.38.1
momentic-mobile@1.38.1
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 22d ago · by lpm-firewall-aiThe inspected source aligns with a mobile testing CLI: login sends a WorkOS device token to the configured Momentic server, and coding-agent skill installation is prompted. Remote-browser diagnostics disclose network metadata to ipinfo.io during user-invoked testing, but the reviewed source does not establish unauthorized credential or account access or another concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs a remote-browser test through the CLI; diagnostics follow a successful connection.
Impact
The inspected paths do not show credential disclosure, unauthorized account changes, persistence, or install-time mutation.
Mechanism
The diagnostic request retrieves network metadata from ipinfo.io. Login and agent-skill setup are separate CLI flows.
AI rationale
The inspected source aligns with a mobile testing CLI: login sends a WorkOS device token to the configured Momentic server, and coding-agent skill installation is prompted. Remote-browser diagnostics disclose network metadata to ipinfo.io during user-invoked testing, but the reviewed source does not establish unauthorized credential or account access or another concrete attack.
Network endpoints1
ipinfo.io/json
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json maps the package command to the Momentic CLI.
- The login flow sends a WorkOS device token to the configured server, defaults to api.momentic.ai, and saves the returned account data in the local Momentic auth file.
- The CLI prompts before installing coding-agent skills, and its project scan excludes agent configuration directories such as .claude and .codex.
- Remote-browser diagnostics run after a successful browser connection and query ipinfo.io for network information.
- The inspected frontend bundles contain remote-control WebSocket handling and run-step validation; suspicious-looking domains in the test bundle appear in Faker URL examples.
Evidence against
- Remote-browser diagnostics request public IP and location metadata from ipinfo.io; this is a third-party disclosure during a user-invoked testing flow.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
11 flaggedbin/cli.jsView file
32import { PostHog } from 'posthog-node';
L33: import * as Rlt from 'child_process';
L34: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
183L184: What the agent did: ${r}`:e}var Qw=Za.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:Et.optional(),retries:z.number().optional(),version:Zw.optional(),cache:az....
L185: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L191: `)}`;}o.required===false&&(n=n.nullable(),i+=`
L192: Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function cDe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(lD...
L193: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function t$e(t,e){let o,r,n;for(let i of e.split(`
L194: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Numb
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L183•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
import gr__default, { statSync, readFileSync, existsSync, readdir, readdirSync, mkdirSync, writeFileSync, rmSync, appendFileSync, watch, unlinkSync, renameSync } from 'fs';
import Wat from 'readline';
import { createInterface } from 'node:readline';
import tF, { mkdtemp, writeFile, rm as rm$1, stat, readFile, readdir as readdir$1, mkdir, unlink } from 'fs/promises';
Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function cDe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(lD...
${o}`:o}function Qne(t){let e;return "moduleName"in t?e=t.moduleName:"name"in
Findings
10 High4 Medium6 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to momentic-mobile@1.38.1.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.38.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.