registry / @mindrian_os/cli / 2.0.0-beta.47
@mindrian_os/cli@2.0.0-beta.47
Install MindrianOS into Claude Code with one command -- `npx @mindrian_os/cli`. Ships the MindrianOS plugin (Larry + PWS methodology + Data Room) plus a setup/diagnostics CLI (install/doctor/update).
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe manifest has no install lifecycle hooks, and its executable performs installation only when the user runs the CLI. The inspected credential flows send Brain credentials to the Brain service and Anthropic keys to Anthropic; the documented one-time registration sends only a random UUID and has an opt-out.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs the install/update CLI or invokes a Brain feature; first Brain use without a key can trigger one-time registration.
Impact
No malicious collection or unrelated account action was identified in the inspected paths.
Mechanism
The CLI delegates plugin installation to Claude’s plugin CLI. Brain requests use the configured Brain endpoint, and registration sends a random install UUID there.
AI rationale
The manifest has no install lifecycle hooks, and its executable performs installation only when the user runs the CLI. The inspected credential flows send Brain credentials to the Brain service and Anthropic keys to Anthropic; the documented one-time registration sends only a random UUID and has an opt-out.
Evidence
~/.mindrian-install.json
Network endpoints4
theo-mcp.onrender.com/registertheo-mcp.onrender.com/mcpapi.anthropic.com/v1/messagesraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no install, preinstall, or postinstall lifecycle hook.
- The CLI’s install path is an explicit command that adds and installs the Mindrian marketplace plugin through Claude’s plugin CLI.
- The Brain client sends its service key to its configured Brain endpoint, defaulting to theo-mcp.onrender.com; it does not forward Anthropic credentials there.
- When no Brain key exists, the client registers a random install UUID with the Brain service; package documentation describes this behavior and the MINDRIAN_DISABLE_AUTO_REGISTER opt-out.
Evidence against
- The package includes process execution, network requests, credential handling, and a local token cache, but the inspected paths tie them to the CLI’s install/update flow or Brain features.
- The Brain client’s automatic registration occurs at a Brain consult and sends an install UUID; the inspected registration payload contains no host, user, project, or file data.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
10 flaggedbin/cli.jsView file
40L41: const { spawnSync } = require('node:child_process');
L42: const path = require('node:path');
High
bin/mindrian-brain-mcp-client.cjsView file
25L26: const path = require('path');
L27:
Medium
Dynamic Require
Package source references dynamic require/import behavior.
bin/mindrian-brain-mcp-client.cjsView on unpkg · L25scripts/build-ecosystem-graph.cjsView file
25INDEXER_OWNED_NODE_TYPES, INDEXER_OWNED_EDGE_TYPES, clearIndexerOwnedRows,
L26: } = require(path.join(__dirname, '..', 'lib', 'core', 'lazygraph-ops.cjs'));
L27:
Findings
1 Critical6 High6 Medium6 Low
CriticalPrevious Version Dangerous Deltalib/core/brain-client.cjs
HighChild Processbin/cli.js
HighShell
HighSame File Env Network Executionscripts/check-version-and-sha.cjs
HighCommand Output Exfiltrationscripts/generate-snapshot.cjs#virtual:normalized:round1
HighRuntime Package Installscripts/doctor.cjs
HighSemantic Analysis Limitedlib/brain/curation-batch.cjs#virtual:normalized:round1
MediumDynamic Requirebin/mindrian-brain-mcp-client.cjs
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperhooks/run-hook.cmd
MediumOversized Source Filelib/wiki/editor-dist/wiki-editor.js
Affected versions and remediation
This report applies to @mindrian_os/cli@2.0.0-beta.47.
See all versions of @mindrian_os/cli for other recorded verdicts.
- Review the evidence and your use of @mindrian_os/cli@2.0.0-beta.47 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.