registry / momentic-mobile / 1.40.0
momentic-mobile@1.40.0
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection did not substantiate the scanner’s credential-redirection or output-exfiltration claims. The package declares a CLI entry point without lifecycle scripts, uses Momentic’s service by default, and exposes agent configuration through an invoked setup flow.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Running the CLI or explicitly invoking its agent setup command.
Impact
No confirmed unauthorized credential transfer, command-output exfiltration, or install-time mutation was established.
Mechanism
The inspected source routes requests through the configured API client and offers a prompt-driven option to configure the Momentic MCP server for selected agents.
AI rationale
Source inspection did not substantiate the scanner’s credential-redirection or output-exfiltration claims. The package declares a CLI entry point without lifecycle scripts, uses Momentic’s service by default, and exposes agent configuration through an invoked setup flow.
Network endpoints2
api.momentic.aiapi.workos.com
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json identifies the package’s CLI entry point and declares no lifecycle scripts.
- The CLI uses Momentic’s API as its default service and routes requests through its configured base URL.
- When the server is default but the API key is explicitly supplied, the CLI selects Momentic’s API endpoint; its login flow contacts WorkOS for device authorization.
- Agent setup asks which coding agents to configure and adds a Momentic MCP server when that CLI setup is invoked.
- The unusual domain in the test bundle appears in a Faker URL example; searches found no matching occurrence in the CLI or other required bundles.
Evidence against
- The source includes network, environment, and child-process APIs, but inspected examples show ordinary service requests, device authorization, and local system checks.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
12 flaggedbin/cli.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = momentic-mobile@1.39.0
matchedIdentity = npm:bW9tZW50aWMtbW9iaWxl:1.39.0
similarity = 0.636
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
bin/cli.jsView on unpkg32import { PostHog } from 'posthog-node';
L33: import * as qlt from 'child_process';
L34: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
183L184: What the agent did: ${r}`:e}var iT=Za.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:Ct.optional(),retries:z.number().optional(),version:nT.optional(),cache:yz....
L185: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L191: `)}`;}o.required===false&&(n=n.nullable(),i+=`
L192: Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function xDe(t){let e=[t.testCases??[],t.bugReproductions??[]].map(o=>z.toJSONSchema(AD...
L193: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function w$e(t,e){let o,r,n;for(let i of e.split(`
L194: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Numb
Findings
1 Critical10 High4 Medium6 Low
CriticalPrevious Version Dangerous Deltabin/cli.js
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
Medium
Affected versions and remediation
This report applies to momentic-mobile@1.40.0.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.40.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.