registry / @mnemonik/cli / 7.144.1
@mnemonik/cli@7.144.1
Mnemonik installer and local project helper
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe package has no install lifecycle hook, and the flagged evaluation sites are bundled Emscripten support rather than remote response execution. The agent-configuration locations are scanner comments, and the updater checks signed release integrity before installation.
Static reason
One or more suspicious static signals were detected.
Trigger
A user invokes the CLI or an update command.
Impact
No confirmed attack impact was established.
Mechanism
The updater fetches release metadata, checks package identity and integrity against a signed manifest, then installs the verified package.
AI rationale
The package has no install lifecycle hook, and the flagged evaluation sites are bundled Emscripten support rather than remote response execution. The agent-configuration locations are scanner comments, and the updater checks signed release integrity before installation.
Evidence
package.jsondist/bin.jsdist/runtime/selfUpdate.js
Network endpoints1
registry.npmjs.org
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json defines a CLI and library entrypoint with no lifecycle scripts or runtime dependencies.
- The updater checks package identity and version metadata, then verifies matching integrity against a signed release manifest before installing an update.
- The agent-configuration hints point to comments describing scanner ignore rules; the inspected excerpts do not show configuration mutation.
- The flagged eval excerpts are in bundled Emscripten support code, not a remote-response execution path.
Evidence against
- The CLI performs network-backed update checks and can install a new release when invoked.
- Bundled files contain dynamic evaluation, but the inspected instances are in Emscripten support code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
8 flaggeddist/diagnostics.jsView file
923import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L924: import { execFile, execFileSync } from "node:child_process";
L925: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L9235245var func = `(${args}) => { ${body} };`;
L5246: ASM_CONSTS[start] = eval(func);
L5247: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
1 Critical6 High4 Medium4 Low
CriticalRemote Response Code Executiondist/runtime/selfUpdate.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighCommand Output Exfiltrationdist/runtime/signers.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @mnemonik/cli@7.144.1.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.144.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.