scanned 12 file(s), 7.48 MB of source, external domains: 127.0.0.1, access.redhat.com, api.momentic.ai, app.posthog.com, atelierbram.github.io, avatars.githubusercontent.com, bit.ly, cdn.jsdelivr.net, chriskempson.com, cloudflare-ipfs.com, clrs.cc, commonmark.org, cscorley.github.io, developer.mozilla.org, docs.mongodb.com, docs.sentry.io, en.wikipedia.org, err.47ng.com, ethanschoonover.com, example.com, fakerjs.dev, fb.me, github.com, google.com, hart-dev.com, hosted-run-viewer-files.s3.us-east-2.amazonaws.com, i.ytimg.com, json-schema.org, loremflickr.com, momentic.ai, p.momentic.ai, picsum.photos, playwright.dev, posthog.com, radix-ui.com, railscasts.com, react-dnd.github.io, react.dev, reactjs.org, redux-toolkit.js.org, redux.js.org, regex101.com, registry.npmjs.org, remarkable-hackwork.info, semver.org, sentry.io, sethawright.com, slow-timer.info, socket.io, stackoverflow.com
10import Spe from 'truncate-json';
L11: import yd, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L12: import Vht from 'safe-stable-stringify';
...
L32: import fK, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L33: import * as fZt from 'child_process';
L34: import { execSync, exec, spawnSync, spawn as spawn$1, execFile } from 'child_process';
...
L39: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L40: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L41: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L45: import { [redacted], PeriodicExportingMetricReader, MeterProvider, AggregationType, InstrumentType } from '@opentelemetry/sdk-metrics';
L46: import { APICallError, t
10Trigger-reachable chain: manifest.bin -> bin/cli.js
L10: import Spe from 'truncate-json';
L11: import yd, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L12: import Vht from 'safe-stable-stringify';
...
L32: import fK, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L33: import * as fZt from 'child_process';
L34: import { execSync, exec, spawnSync, spawn as spawn$1, execFile } from 'child_process';
...
L39: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L40: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L41: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L45: import { [redacted], PeriodicExportingMetricReader, MeterProvider, AggregationType, InstrumentType } from '@opent
CriticalTrigger Reachable Dangerous Capability
A package entrypoint or install-time lifecycle script reaches a source file with blocking dangerous behavior.
bin/cli.jsView on unpkg · L10 186L187: What the agent did: ${n}`:t}function Nmt(e){return {id:v4$1(),type:"PRESET_ACTION",command:{id:v4$1(),type:"AI_ASSERTION",assertion:e,timeout:5}}}function Y0(e){return {preconditio...
L188: `).map((n,r)=>r>0?`${o}${n}`:n).join(`
...
L190: `).map((m,p)=>p>0?` ${m}`:m).join(`
L191: `)),i(" ",o(d));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=wP[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,yd.reset,...t...
L192: `)){let[n,r]=o.trim().split(/\s+/,2);if(!n||!r)continue;let i=Number.parseInt(r,10);Number.isFinite(i)&&(t[n]=i);}return t}function LRt(e,t){let o,n,r;for(let i of t.split(`
L193: `)){let a=i.indexOf(":");if(a===-1)continue;let s=i.slice(0,a),l=i.slice(a+1).trim();if(s==="Name"&&(o=l),s==="PPid"&&(n=Number.parseIn
HighSame File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
bin/cli.jsView on unpkg · L186 •Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
bin/cli.js:
import wr__default, { createReadStream, existsSync, mkdirSync, writeFileSync, readFileSync, readdirSync, statSync, readdir as readdir$1, unlinkSync, renameSync, appendFileSync, rmS...
import pD, { readFile, realpath, lstat, readdir as readdir$2, open, mkdtemp as mkdtemp$1, rm as rm$1, writeFile as writeFile$1, mkdir as mkdir$1, copyFile } from 'node:fs/promises'...
import jne__default, { mkdirSync as mkdirSync$1, writeFileSync as writeFileSync$1, promises, constants, rmSync as rmSync$1, mkdtempSync as mkdtempSync$1 } from 'node:fs';
import iee, { writeFile, cp as cp$1, rm, readFile as readFile$1, mkdir, readdir, mkdtemp, st
HighCredential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
bin/cli.jsView on unpkg 186L187: What the agent did: ${n}`:t}function Nmt(e){return {id:v4$1(),type:"PRESET_ACTION",command:{id:v4$1(),type:"AI_ASSERTION",assertion:e,timeout:5}}}function Y0(e){return {preconditio...
L188: `).map((n,r)=>r>0?`${o}${n}`:n).join(`
L189: `)}logWithLevelHelper(t,o,...n){if(t<this.minLogLevel)return;let r=this.forcedStream??(t>=40?"stderr":"stdout"),i=(...u)=>{let d=e.redactedValues.length===0?u:u.map(m=>typeof m=="s...
L190: `).map((m,p)=>p>0?` ${m}`:m).join(`
L191: `)),i(" ",o(d));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=wP[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,yd.reset,...t...
L192: `)){let[n,r]=o.trim().split(/\s+/,2);if(!n||!r)continue;let i=Number.parseInt(r,10);Number.isFinite(i)&&(t[n]=i);}return t}functi
HighCommand Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
bin/cli.jsView on unpkg · L186 10import Spe from 'truncate-json';
L11: import yd, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L12: import Vht from 'safe-stable-stringify';
...
L32: import fK, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L33: import * as fZt from 'child_process';
L34: import { execSync, exec, spawnSync, spawn as spawn$1, execFile } from 'child_process';
...
L39: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L40: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L41: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L45: import { [redacted], PeriodicExportingMetricReader, MeterProvider, AggregationType, InstrumentType } from '@opentelemetry/sdk-metrics';
L46: import { APICallError, t
HighCloud Metadata Access
Source reaches cloud instance metadata or link-local credential endpoints.
bin/cli.jsView on unpkg · L10 32import fK, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L33: import * as fZt from 'child_process';
L34: import { execSync, exec, spawnSync, spawn as spawn$1, execFile } from 'child_process';
...
L176: `,detailedDescription:Co`
L177: Use this only after the available tools cannot establish a defensible root cause. Do not use OTHER while targeted current-run step results, container screenshots, or required past-...
L178: `,action:"fail"}],Jdt="warn",Xdt="pull-request",vw=(n=>(n.COMMIT_TO_SOURCE="commit-to-source",n.ROUTE_TO_OWNER="route-to-owner",n.ALREADY_FIXED="already-fixed",n))(vw||{}),Qdt=["co...
...
L186:
L187: What the agent did: ${n}`:t}function Nmt(e){return {id:v4$1(),type:"PRESET_ACTION",command:{id:v4$1(),type:"AI_ASSERTION",assertion:e,timeout:5}}
HighRemote Agent Bridge
Source exposes local file and command tools to a remote model endpoint.
bin/cli.jsView on unpkg · L32 10Trigger-reachable credential exfiltration chain: manifest.bin -> bin/cli.js
L10: import Spe from 'truncate-json';
L11: import yd, { supportsColorStderr, supportsColor, Chalk } from 'chalk';
L12: import Vht from 'safe-stable-stringify';
...
L32: import fK, { randomUUID, createHash, createHmac, timingSafeEqual } from 'crypto';
L33: import * as fZt from 'child_process';
L34: import { execSync, exec, spawnSync, spawn as spawn$1, execFile } from 'child_process';
...
L39: import { registerInstrumentations } from '@opentelemetry/instrumentation';
L40: import { UndiciInstrumentation } from '@opentelemetry/instrumentation-undici';
L41: import { resourceFromAttributes } from '@opentelemetry/resources';
...
L45: import { [redacted], PeriodicExportingMetricReader, MeterProvider, AggregationType, Instr
HighTrigger Reachable Credential Exfiltration
A manifest entrypoint or package-local install chain reaches credential exfiltration behavior.
bin/cli.jsView on unpkg · L10 186Trigger-reachable command-output exfiltration chain: manifest.bin -> bin/cli.js
L186:
L187: What the agent did: ${n}`:t}function Nmt(e){return {id:v4$1(),type:"PRESET_ACTION",command:{id:v4$1(),type:"AI_ASSERTION",assertion:e,timeout:5}}}function Y0(e){return {preconditio...
L188: `).map((n,r)=>r>0?`${o}${n}`:n).join(`
L189: `)}logWithLevelHelper(t,o,...n){if(t<this.minLogLevel)return;let r=this.forcedStream??(t>=40?"stderr":"stdout"),i=(...u)=>{let d=e.redactedValues.length===0?u:u.map(m=>typeof m=="s...
L190: `).map((m,p)=>p>0?` ${m}`:m).join(`
L191: `)),i(" ",o(d));}}setMinLevel(t){typeof t=="string"?this.minLogLevel=wP[t]:this.minLogLevel=t;}setOutputStream(t){this.forcedStream=t;}log(...t){this.logWithLevel(30,yd.reset,...t...
L192: `)){let[n,r]=o.trim().split(/\s+/,2);if(!n||!r)co
HighTrigger Reachable Command Output Exfiltration
A manifest entrypoint or package-local install chain reaches command-output exfiltration behavior.
bin/cli.jsView on unpkg · L186 397${GZ}`,s=wr__default.existsSync(r)?wr__default.readFileSync(r,"utf8"):"";return wr__default.writeFileSync(r,TVt(s,a)),t.file}function VZ(e){return e.length<=1?e.join(""):`${e.slice...
L398: `);return ["# Momentic skills","",`Momentic skills are installed in ${o}. Read the matching \`SKILL.md\` before you work with Momentic tests, the Momentic MCP server or CLI, or Mo:...
L399: `)}function TVt(e,t){let o=e.indexOf(q1e),n=e.indexOf(GZ);if(o!==-1&&n!==-1&&n>o)return e.slice(0,o)+t+e.slice(n+GZ.length);if(e.trim().length===0)return `${t}
...
L410: Generated for ${r} (skills ${n}). Run \`${AS(t)}\` after you upgrade ${t}.
L411: `}function RS(e){try{return execSync("git rev-parse --show-toplevel",{cwd:e,encoding:"utf8",stdio:["ignore","pipe","ignore"]}).trim()||e}catch{return e}}var xVt,Tk
HighRuntime Package Install
Package source invokes a package manager install command at runtime.
bin/cli.jsView on unpkg · L397