momentic-mobile@1.41.6
The official CLI for Momentic Mobile. Build, run, and manage end-to-end tests for iOS and Android through natural language prompts.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe CLI sends the signed-in user’s email to vendor analytics during interactive setup, with no evident consent control in the reviewed source. This is suspicious runtime telemetry, not evidence of credential theft or the other scanner-alleged behaviors.
Static reason
One or more suspicious static signals were detected.
Trigger
Interactive CLI setup after retrieving auth information.
Impact
The vendor analytics service receives identifying account information without an evident opt-in or opt-out in the reviewed source.
Mechanism
The CLI identifies the user to PostHog at https://p.momentic.ai, including their email address.
AI rationale
The CLI sends the signed-in user’s email to vendor analytics during interactive setup, with no evident consent control in the reviewed source. This is suspicious runtime telemetry, not evidence of credential theft or the other scanner-alleged behaviors.
Evidence
bin/cli.js
Network endpoints1
p.momentic.ai
Decision evidence
public snapshotAI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The CLI configures PostHog analytics to send to https://p.momentic.ai.
- During interactive CLI setup, it retrieves the signed-in user’s auth information and calls identifyUser with the user ID and email.
Evidence against
- The manifest has no lifecycle scripts; the package exposes a CLI entry point.
- The CLI’s stated purpose is mobile test development and execution, consistent with its use of network and process APIs.
- The reviewed CLI source contains no match for the cited cloud metadata address or alleged unofficial gateway.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings
Source & flagged code
11 flaggedbin/cli.jsView file
33import { PostHog } from 'posthog-node';
L34: import * as Nmt from 'child_process';
L35: import { execFile, execSync, execFileSync, exec } from 'child_process';
High
192L193: What the agent did: ${r}`:e}var AE=ns.extend({type:z.literal("AI_ACTION_DYNAMIC"),text:z.string(),effort:Rt.optional(),retries:z.number().optional(),version:CE.optional(),cache:VU....
L194: `).map((r,n)=>n>0?`${o}${r}`:r).join(`
...
L196: `).map((m,p)=>p>0?` ${m}`:m).join(`
L197: `)),i(" ",o(d));}}setMinLevel(e){typeof e=="string"?this.minLogLevel=DE[e]:this.minLogLevel=e;}setOutputStream(e){this.forcedStream=e;}log(...e){this.logWithLevel(30,hl.reset,...e...
L198: `)){let[r,n]=o.trim().split(/\s+/,2);if(!r||!n)continue;let i=Number.parseInt(n,10);Number.isFinite(i)&&(e[r]=i);}return e}function NHe(t,e){let o,r,n;for(let i of e.split(`
L199: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(r=Number.parseIn
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L192•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
import hr__default, { statSync, readFileSync, existsSync, readdir, readdirSync, mkdirSync, writeFileSync, appendFileSync, watch, rmSync, mkdtempSync, unlinkSync, renameSync } from ...
import Iut from 'readline';
import { createInterface } from 'node:readline';
import { writeFile as writeFile$1, rm as rm$1, mkdtemp as mkdtemp$1, stat as stat$1, copyFile } from 'node:fs/promises';
import oz, { mkdtemp, writeFile, rm, stat, readFile, readdir as readdir$1, mkdir, unlink } from 'fs/promises';
Use null when unknown or not applicable.`),e[o.name]=n.describe(i);}return z.strictObject(e)}function TNe(t){let e=[t.testCases??[],t.bugR
Findings
10 High4 Medium6 Low
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionbin/cli.js
HighCredential Redirect Persistencebin/cli.js
HighCommand Output Exfiltrationbin/cli.js
HighSandbox Evasion Gated Capabilitybin/cli.js
HighCloud Metadata Accessbin/cli.js
HighTrigger Reachable Command Output Exfiltrationbin/cli.js
HighTrigger Reachable External Post Callbackbin/cli.js
HighSemantic Analysis Limitedbin/cli.js
MediumDynamic Requirebin/cli.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to momentic-mobile@1.41.6.
See all versions of momentic-mobile for other recorded verdicts.
- Review the evidence and your use of momentic-mobile@1.41.6 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.