registry / @mindrian_os/cli / 2.0.0-beta.39
@mindrian_os/cli@2.0.0-beta.39
Install MindrianOS into Claude Code with one command -- `npx @mindrian_os/cli`. Ships the MindrianOS plugin (Larry + PWS methodology + Data Room) plus a setup/diagnostics CLI (install/doctor/update).
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe flagged network, credential, and process behavior is tied to the package’s stated installer and AI features. The reviewed code does not show unrelated credential exfiltration or other concrete attack behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
CLI commands or explicit Brain, chat, and offline snapshot use; dependency repair is triggered by a missing module.
Impact
No unrelated credential collection, unsolicited account action, or concealed code execution was identified in the reviewed paths.
Mechanism
The Brain client sends its own key to its configured Brain service; chat sends a supplied Anthropic key to Anthropic. Registration sends a generated install ID to the Brain service and caches the returned token locally.
AI rationale
The flagged network, credential, and process behavior is tied to the package’s stated installer and AI features. The reviewed code does not show unrelated credential exfiltration or other concrete attack behavior.
Evidence
~/.mindrian-install.json
Network endpoints7
theo-mcp.onrender.comapi.anthropic.comraw.githubusercontent.comapi.github.comcdnjs.cloudflare.comunpkg.comcdn.jsdelivr.net
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a MindrianOS installer and diagnostics CLI; its documented commands install, diagnose, or update the plugin.
- The Brain key resolver reads MINDRIAN_BRAIN_KEY from the environment or Mindrian-specific local files, and Brain requests use the configured Brain endpoint.
- On a Brain consult without an existing key, the client registers a generated random install ID with the Brain service and stores the returned token locally.
- The chat UI asks for an API key when none is available and sends it to Anthropic’s Messages API for the user’s chat request.
- The flagged dependency repair runs npm install only after a module is missing; snapshot code downloads CDN assets for its explicit offline-inlining feature.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
Source & flagged code
10 flaggedbin/cli.jsView file
40L41: const { spawnSync } = require('node:child_process');
L42: const path = require('node:path');
High
bin/mindrian-brain-mcp-client.cjsView file
25L26: const path = require('path');
L27:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/mindrian-brain-mcp-client.cjsView on unpkg · L25scripts/build-ecosystem-graph.cjsView file
25INDEXER_OWNED_NODE_TYPES, INDEXER_OWNED_EDGE_TYPES, clearIndexerOwnedRows,
L26: } = require(path.join(__dirname, '..', 'lib', 'core', 'lazygraph-ops.cjs'));
L27:
Findings
1 Critical6 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltalib/core/brain-client.cjs
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionscripts/check-version-and-sha.cjs
HighCommand Output Exfiltrationscripts/generate-snapshot.cjs#virtual:normalized:round1
HighRuntime Package Installscripts/doctor.cjs
HighSemantic Analysis Limitedlib/brain/curation-batch.cjs#virtual:normalized:round1
MediumDynamic Requirebin/mindrian-brain-mcp-client.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperhooks/run-hook.cmd
MediumOversized Source Filelib/wiki/editor-dist/wiki-editor.js
Affected versions and remediation
This report applies to @mindrian_os/cli@2.0.0-beta.39.
See all versions of @mindrian_os/cli for other recorded verdicts.
- Review the evidence and your use of @mindrian_os/cli@2.0.0-beta.39 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.