momentic@3.22.2
 [![npm]](https://www.npmjs.com/package/momentic)
AI Security Review
scanned 4mo ago · by lpm-firewall-aiStatic source inspection found a bundled, powerful CLI, but its risky primitives are package-aligned and user-invoked, with no lifecycle hook, stealth persistence, destructive action, broad credential exfiltration, remote payload execution, or unconsented AI-agent control-surface mutation. Scanner findings are explained by legitimate Momentic testing, browser automation, telemetry, MCP, and AI workflow features.
Decision evidence
public snapshot- package.json exposes bin momentic -> ./bin/cli.js and has no lifecycle scripts.
- bin/cli.js is a large bundled CLI importing child_process, fs, node:vm, network, Playwright, MCP, AI SDK, telemetry, and Sentry/PostHog clients.
- User commands include install-browsers, install-codetools, install-skills, login/logout, mcp, run/test, triage/heal, migrate/upgrade, queue, and app.
- CLI can write project/config/test artifacts and user auth/cache files such as ~/.momentic/auth.json, ~/.momentic/codetools, .momentic, and momentic config files.
- No preinstall/install/postinstall/prepare hooks; package install does not execute bin/cli.js automatically.
- Powerful behavior is behind explicit CLI commands and aligns with a web/mobile E2E testing and AI healing tool.
- Network endpoints are package-aligned: app.momentic.ai, momentic.ai docs/static, Momentic API/telemetry, Browserbase, Sentry, PostHog, npm registry, and Pylon widget in static UI.
- install-skills is an explicit deprecated user command copying package-owned Momentic skill markdown, not unconsented install-time mutation of a broad agent surface.
- Env/credential handling is for user-provided API keys, auth, CI/provider config, snapshots, telemetry, or test variables; no broad credential harvesting path was confirmed.
Source & flagged code
3 flaggedPackage name is suspiciously similar to a popular package name.
package.jsonView on unpkgPackage contains source files above the static scanner size ceiling.
bin/cli.jsView on unpkgPackage contains an oversized executable-looking CLI entrypoint.
bin/cli.jsView on unpkgFindings
Affected versions and remediation
This report applies to momentic@3.22.2.
See all versions of momentic for other recorded verdicts.
- Review the evidence and your use of momentic@3.22.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.