momentic-mobile@1.4.0
 [![npm]](https://www.npmjs.com/package/momentic-mobile)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiNo credential harvesting or unconsented lifecycle execution was confirmed. The explicit agent configuration mutation warrants a warning under policy, not a block.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User runs momentic-mobile install-skills with an editor selection.
Impact
Adds package-provided SKILL.md files to the selected repository agent configuration.
Mechanism
Explicit project AI-agent skill installation
AI rationale
No credential harvesting or unconsented lifecycle execution was confirmed. The explicit agent configuration mutation warrants a warning under policy, not a block.
Evidence
package.jsonbin/cli.jsREADME.mdskills/momentic-mobile-test.mdskills/momentic-test.mdskills/momentic-result-classification.md.agents/skills/<skill>/SKILL.md.claude/skills/<skill>/SKILL.md.cursor/skills/<skill>/SKILL.md.github/skills/<skill>/SKILL.md.opencode/skills/<skill>/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- bin/cli.js exposes explicit install-skills command
- Command writes SKILL.md into .agents/.claude/.cursor/.github skill paths
- Remote code evaluation is enabled only with two preconfigured environment variables
Evidence against
- package.json has no lifecycle scripts
- CLI is activated through its declared bin command
- Agent-skill mutation requires an explicit user command and editor choice
- Telemetry endpoint is package-aligned (p.momentic.ai)
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedObfuscatedTelemetryUrlStrings
NoLicense
Source & flagged code
14 flaggedstatic/assets/vendor-B9S17gUC.jsView file
20patternName = generic_password
severity = medium
line = 20
matchedText = Reason: ...ion.
Medium
Secret Pattern
Package contains a possible secret pattern.
static/assets/vendor-B9S17gUC.jsView on unpkg · L20bin/cli.jsView file
28import { PostHog } from 'posthog-node';
L29: import * as L_e from 'child_process';
L30: import { execFile as execFile$1, execSync, exec } from 'child_process';
...
L35: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L36: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L37: import { resourceFromAttributes, defaultResource } from '@opentelemetry/resources';
...
L128: var ole=Object.create;var xU=Object.defineProperty;var nle=Object.getOwnPropertyDescriptor;var rle=Object.getOwnPropertyNames;var ile=Object.getPrototypeOf,ale=Object.prototype.has...
L129: `:""},this._extScope=e,this._scope=new Ya.Scope({parent:e}),this._nodes=[new Y0];}toString(){return this._root.render(this.opts)}name(e){return this._scope.name(e)}scopeName(e){r
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L28Findings
3 Critical8 High5 Medium7 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-BGdh3vcX.js
HighEvalbin/cli.js
HighSame File Env Network Executionbin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Credential Exfiltrationbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumSecret Patternstatic/assets/vendor-B9S17gUC.js
Affected versions and remediation
This report applies to momentic-mobile@1.4.0.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.4.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.