@mindrian_os/cli@2.0.0-beta.37
Install MindrianOS into Claude Code with one command -- `npx @mindrian_os/cli`. Ships the MindrianOS plugin (Larry + PWS methodology + Data Room) plus a setup/diagnostics CLI (install/doctor/update).
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe client silently registers an installation and sends a persistent random identifier to the package’s Brain service when a Brain tool is first used without a key. The request does not expose unrelated credentials or identifying machine data, but this undisclosed runtime telemetry warrants a warning.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A user invokes a Brain tool while no Brain key is available; the first such consult attempts registration automatically.
Impact
The Brain service can link calls from the same installation over time. The reviewed registration payload does not include credentials or identifying machine or project data.
Mechanism
The client POSTs a locally generated install ID to the configured Brain service, saves the returned token, and includes a persistent install-ID header in later Brain calls.
AI rationale
The client silently registers an installation and sends a persistent random identifier to the package’s Brain service when a Brain tool is first used without a key. The request does not expose unrelated credentials or identifying machine data, but this undisclosed runtime telemetry warrants a warning.
Evidence
lib/core/brain-client.cjslib/core/install-id.cjsbin/cli.js~/.mindrian-install.json~/.mindrian/theo-install-id.json
Network endpoints3
theo-mcp.onrender.com/registertheo-mcp.onrender.com/mcpMINDRIAN_BRAIN_URL override
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- A Brain tool call with no configured key automatically attempts registration on the first consult.
- Registration sends a persistent per-install identifier to the Brain service and saves its returned token locally.
- The installer describes Brain connection as optional and directs users to configure it with a key; it does not disclose the silent registration behavior.
- The identifier is generated from random bytes, rather than derived from a credential or machine information.
Evidence against
- The registration request sends only a random install ID; the source shows no host, username, project data, or unrelated credentials in that request.
- Brain tool requests target the package’s configured Brain service, and their API key is sent to that service.
- The package describes itself as an installer and CLI for the MindrianOS plugin, which includes Brain functionality.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
10 flaggedbin/cli.jsView file
40L41: const { spawnSync } = require('node:child_process');
L42: const path = require('node:path');
High
bin/mindrian-brain-mcp-client.cjsView file
25L26: const path = require('path');
L27:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/mindrian-brain-mcp-client.cjsView on unpkg · L25scripts/build-ecosystem-graph.cjsView file
25INDEXER_OWNED_NODE_TYPES, INDEXER_OWNED_EDGE_TYPES, clearIndexerOwnedRows,
L26: } = require(path.join(__dirname, '..', 'lib', 'core', 'lazygraph-ops.cjs'));
L27:
Findings
1 Critical6 High7 Medium6 Low
CriticalPrevious Version Dangerous Deltalib/core/brain-client.cjs
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionscripts/check-version-and-sha.cjs
HighCommand Output Exfiltrationscripts/generate-snapshot.cjs
HighRuntime Package Installscripts/doctor.cjs
HighSemantic Analysis Limitedlib/brain/curation-batch.cjs#virtual:normalized:round1
MediumDynamic Requirebin/mindrian-brain-mcp-client.cjs
MediumNetwork
MediumEnvironment Vars
MediumProtestware
MediumShips Build Helperhooks/run-hook.cmd
MediumOversized Source File
Affected versions and remediation
This report applies to @mindrian_os/cli@2.0.0-beta.37.
See all versions of @mindrian_os/cli for other recorded verdicts.
- Review the evidence and your use of @mindrian_os/cli@2.0.0-beta.37 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.