registry / momentic-mobile / 1.4.1
momentic-mobile@1.4.1
 [![npm]](https://www.npmjs.com/package/momentic-mobile)
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe flagged primitives belong to an explicitly invoked testing CLI and its user-authenticated platform operations. Source inspection found no lifecycle trigger or concrete malicious chain.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
User invokes CLI commands or supplies test definitions.
Impact
No unconsented install-time execution or credential exfiltration established.
Mechanism
User-directed test automation and optional vendor API communication.
AI rationale
The flagged primitives belong to an explicitly invoked testing CLI and its user-authenticated platform operations. Source inspection found no lifecycle trigger or concrete malicious chain.
Evidence
package.jsonbin/cli.jsREADME.mdskills/momentic-mobile-test.mdskills/momentic-test.mdskills/momentic-result-classification.md
Decision evidence
public snapshotAI called this Clean at 93.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- bin/cli.js contains user-test JavaScript evaluation and child-process support.
- bin/cli.js can POST test code/state only to an operator-configured GCP evaluation endpoint.
Evidence against
- package.json has no preinstall, install, postinstall, or prepare hook.
- bin/cli.js is reached only through the declared momentic-mobile CLI.
- Dynamic Function uses are schema compilation and explicit test/webview execution.
- Telemetry is package-aligned PostHog/Sentry; diagnostics tracing requires --share-diagnostics.
- install-skills writes editor skill files only after explicit install-skills --editor.
- No hidden payload, credential harvesting, or foreign agent-control mutation was found.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStrings
Source & flagged code
14 flaggedstatic/assets/vendor-BW_zrL8f.jsView file
20patternName = generic_password
severity = medium
line = 20
matchedText = Reason: ...ion.
Medium
Secret Pattern
Package contains a possible secret pattern.
static/assets/vendor-BW_zrL8f.jsView on unpkg · L20bin/cli.jsView file
28import { PostHog } from 'posthog-node';
L29: import * as F_e from 'child_process';
L30: import { execFile as execFile$1, execSync, exec } from 'child_process';
...
L35: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L36: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L37: import { resourceFromAttributes, defaultResource } from '@opentelemetry/resources';
...
L128: var ile=Object.create;var PU=Object.defineProperty;var ale=Object.getOwnPropertyDescriptor;var sle=Object.getOwnPropertyNames;var lle=Object.getPrototypeOf,cle=Object.prototype.has...
L129: `:""},this._extScope=e,this._scope=new Ya.Scope({parent:e}),this._nodes=[new J0];}toString(){return this._root.render(this.opts)}name(e){return this._scope.name(e)}scopeName(e){r
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
bin/cli.jsView on unpkg · L28Findings
3 Critical8 High5 Medium7 Low
CriticalCredential Exfiltrationbin/cli.js
CriticalTrigger Reachable Dangerous Capabilitybin/cli.js
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShellstatic/assets/index-BtmSB-tv.js
HighEvalbin/cli.js
HighSame File Env Network Executionbin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighTrigger Reachable Credential Exfiltrationbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
MediumSecret Patternstatic/assets/vendor-BW_zrL8f.js
Affected versions and remediation
This report applies to momentic-mobile@1.4.1.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.4.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.