registry / @mindrian_os/cli
@mindrian_os/cli
Install MindrianOS into Claude Code with one command -- `npx @mindrian_os/cli`. Ships the MindrianOS plugin (Larry + PWS methodology + Data Room) plus a setup/diagnostics CLI (install/doctor/update).
This report shows the evidence for @mindrian_os/cli@2.0.0-beta.75. 0 of 28 known versions are blocked or flagged. See all versions.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged execution paths serve the package’s stated install and diagnostic functions, and the inspected credential flows target the relevant services. I found no automatic install hook or concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The CLI runs when a user invokes its bin; chat, funding search, and doctor checks run when their corresponding features or diagnostic modes are used.
Impact
No unauthorized data transfer, account action, or destructive behavior was identified in the reviewed paths.
Mechanism
The CLI delegates plugin installation to Claude Code. The inspected credential flows send Anthropic and Tavily keys to their respective APIs; the funding query is fixed and generic.
AI rationale
The flagged execution paths serve the package’s stated install and diagnostic functions, and the inspected credential flows target the relevant services. I found no automatic install hook or concrete attack behavior.
Network endpoints3
api.anthropic.com/v1/messagesapi.tavily.com/searchtheo-mcp.onrender.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a setup and diagnostics CLI and lists utility scripts; no install, preinstall, or postinstall hook is declared.
- The install and update operations run through the CLI when invoked, using Claude Code’s plugin commands.
- Fabric Chat sends the user-provided Anthropic key to Anthropic’s Messages API for the requested chat translation.
- The funding scan sends its Tavily key to Tavily with a fixed public-funding search query.
- The doctor’s npm install appears in its npx round-trip acceptance check, not as a package lifecycle action.
Evidence against
- The CLI can install or update the MindrianOS plugin and contact its marketplace when a user runs the command.
- Doctor acceptance checks can invoke npm and make network requests when that diagnostic mode is selected.
- The package includes credential-bearing requests, but the inspected flows send each key to its corresponding service.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
11 flaggedbin/local-chain-recommender.cjsView file
10if (require.main === module) {
L11: const { spawnSync } = require('node:child_process');
L12: const r = spawnSync(process.execPath, [target, ...process.argv.slice(2)], { stdio: 'inherit' });
High
Child Process
Package source references child process execution.
bin/local-chain-recommender.cjsView on unpkg · L10bin/cli.jsView file
54// 'claude' directly fails with ENOENT even when `claude --version` works in the
L55: // user's interactive shell. Routing through the shell (cmd.exe) on win32 lets
L56: // PATHEXT resolve the `.cmd` shim. POSIX is unaffected -- shell stays false there.
High
bin/mindrian-brain-mcp-client.cjsView file
Findings
1 Critical6 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltalib/core/doctor/class-m-brain-smoke.cjs
HighChild Processbin/local-chain-recommender.cjs
HighShellbin/cli.js
HighSame File Env Network Executionscripts/check-version-and-sha.cjs
HighCommand Output Exfiltrationscripts/generate-snapshot.cjs#virtual:normalized:round1
HighRuntime Package Installscripts/doctor.cjs
HighSemantic Analysis Limitedlib/brain/curation-batch.cjs#virtual:normalized:round1
MediumDynamic Requirebin/mindrian-brain-mcp-client.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperhooks/run-hook.cmd
Medium
Affected versions and remediation
This report applies to @mindrian_os/cli@2.0.0-beta.75.
The versions list below shows the verdict for each recorded version.
- Review the evidence and your use of @mindrian_os/cli@2.0.0-beta.75 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.