registry / momentic-mobile / 1.39.0
momentic-mobile@1.39.0
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 19d ago · by lpm-firewall-aiSource inspection did not confirm the scanner’s credential redirection or exfiltration claims. The flagged domain is a Faker example, and the indicated agent-related code excludes common agent directories from file discovery.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was established; the test bundle performs a public IP lookup when loaded.
Impact
No confirmed attack impact was established from the inspected source.
Mechanism
The inspected code does not show credential forwarding to an unrelated fixed gateway, command-output exfiltration, or an external callback.
AI rationale
Source inspection did not confirm the scanner’s credential redirection or exfiltration claims. The flagged domain is a Faker example, and the indicated agent-related code excludes common agent directories from file discovery.
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies the package as Momentic Mobile and provides a CLI entrypoint; it has no lifecycle scripts.
- The CLI’s OpenAI provider defaults to api.openai.com and uses the caller’s configured base URL and API key.
- The flagged agent-related CLI bytes list .claude and .codex among directories excluded from project file discovery.
- The flagged unofficial domain appears in a Faker example, not as a configured network destination.
- The test bundle makes a public IP lookup, but the inspected code does not show that result being sent elsewhere.
- The inspected frontend bundles contain ordinary router and instance-status checks; no attack behavior was established in the required paths.
Evidence against
- Static scanning reported credential redirection, command-output exfiltration, and an external callback, but inspection did not substantiate those behaviors.
- A public IP lookup occurs when the test bundle loads; the inspected source does not establish further collection or transfer.
Behavioral surface
ChildProcess
Source & flagged code
12 flaggedbin/cli.jsView file
32import { PostHog } from 'posthog-node';
L33: import * as Dlt from 'child_process';
L34: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
183L184: What the agent did: ${r}`:e}var tT=Za.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:Et.optional(),retries:z.number().optional(),version:eT.optional(),cache:cz....
L185: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L191: `)}`;}o.required===false&&(n=n.nullable(),i+=`
L192: Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function hDe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(fD...
L193: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function u$e(t,e){let o,r,n;for(let i of e.split(`
L194: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Numb
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L183•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
import gr__default, { statSync, readFileSync, existsSync, readdir, readdirSync, mkdirSync, writeFileSync, rmSync, appendFileSync, watch, unlinkSync, renameSync } from 'fs';
import est from 'readline';
import { createInterface } from 'node:readline';
import nF, { mkdtemp, writeFile, rm as rm$1, stat, readFile, readdir as readdir$1, mkdir, unlink } from 'fs/promises';
Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function hDe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(fD...
${o}`:o}function sie(t){let e;return "moduleName"in t?e=t.moduleName:"name"in
Findings
1 Critical10 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltastatic/assets/test-BkxVL01V.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
Affected versions and remediation
This report applies to momentic-mobile@1.39.0.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.39.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.