momentic-maintain
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches run metadata and test artifacts (screenshots, DOM snapshots, logs) from the official API endpoint at
api.momentic.ai. These assets are downloaded as ZIP archives and extracted locally for analysis. - [COMMAND_EXECUTION]: The skill utilizes the
momenticCLI tool vianpxfor result classification and automated triage. It also provides shell script templates that usecurl,jq, andunzipto manage local artifact inspection. Theai triagecommand specifically supports a--startflag which allows users to execute local build and start commands as part of the test repair process. - [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow where AI agents analyze data from external applications, such as DOM content, console logs, and network traces. This ingestion of untrusted external content represents a potential surface for indirect prompt injection targeting the test-repair logic.
- Ingestion points: Test execution artifacts (DOM, logs, screenshots) processed by
momentic_get_step_resultandmomentic ai triage(SKILL.md). - Boundary markers: The instructions do not specify explicit delimiters for the ingested content, relying on the underlying
momenticCLI to manage the agent context. - Capability inventory: The skill has the ability to execute shell commands (via
npxand--start), perform network operations (viacurl), and modify the local filesystem (viaunzipandai triageedits). - Sanitization: The documentation does not describe explicit sanitization or filtering of the processed web application content.
Audit Metadata