registry / @mnemonik/cli / 7.139.10
@mnemonik/cli@7.139.10
Mnemonik installer and local project helper
AI Security Review
scanned 20d ago · by lpm-firewall-aiThe manifest has no npm lifecycle hooks, and the apparent agent-configuration locations are shared scanner comments rather than configuration writes. Runtime updates are checked against a signed release manifest, while host setup is invoked through the CLI with explicit selection and apply controls.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the installed CLI, such as with the install or update command.
Impact
The inspected behavior updates the package runtime or configures selected integrations; no malicious effect was established.
Mechanism
The CLI bootstraps and updates its runtime, and installs selected host integrations through the CLI setup flow with explicit choices and trust checks.
AI rationale
The manifest has no npm lifecycle hooks, and the apparent agent-configuration locations are shared scanner comments rather than configuration writes. Runtime updates are checked against a signed release manifest, while host setup is invoked through the CLI with explicit selection and apply controls.
Evidence
package.jsondist/runtime/bootstrap.jsdist/runtime/selfUpdate.jsdist/install/journey.jsdist/install/hosts.js
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no lifecycle scripts or runtime dependencies; its host manifest pins first-party integration packages and versions.
- The launcher checks the installed package and its lockfile, and rejects dependency packages with preinstall, install, or postinstall hooks.
- The install flow requires explicit host, scope, and apply choices in non-interactive mode; the host setup verifies installed declarations and reports pending trust.
- The updater checks release integrity against a signed manifest before installing a new CLI runtime.
- The reported eval calls construct parser support functions from embedded parser data; the inspected update path uses signed release verification.
- The agent-configuration locations supplied for review fall within shared scanner comments about indexing project files, not agent configuration writes.
Evidence against
- The bundle contains eval calls and network requests for parser support and runtime updates; inspected source did not show an unverified remote execution path.
Behavioral surface
ChildProcess
Source & flagged code
7 flaggeddist/diagnostics.jsView file
898import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L899: import { execFile, execFileSync } from "node:child_process";
L900: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L8985213var func = `(${args}) => { ${body} };`;
L5214: ASM_CONSTS[start] = eval(func);
L5215: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
1 Critical5 High4 Medium4 Low
CriticalRemote Response Code Executiondist/runtime/selfUpdate.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to @mnemonik/cli@7.139.10.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.139.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.