registry / @mnemonik/cli / 7.144.2
@mnemonik/cli@7.144.2
Mnemonik installer and local project helper
AI Security Review
scanned 18d ago · by lpm-firewall-aiThe manifest has no install lifecycle script, and the flagged dynamic evaluation belongs to bundled WebAssembly parser glue. Hook setup and project linking occur through the user-run installer with consent; the inspected sources establish no malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
The CLI binary runs its bootstrap when a user invokes it; npm installation has no lifecycle trigger.
Impact
No confirmed harmful impact. Approved product flows can configure coding-tool hooks and link projects.
Mechanism
Installer changes require user consent. The inspected dynamic evaluation is WebAssembly parser glue, and the update check reports available versions instead of executing response content.
AI rationale
The manifest has no install lifecycle script, and the flagged dynamic evaluation belongs to bundled WebAssembly parser glue. Hook setup and project linking occur through the user-run installer with consent; the inspected sources establish no malicious behavior.
Network endpoints2
auth.mnemonik.aiapi.mnemonik.dev/
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares no npm lifecycle scripts; its CLI and library entrypoints are ordinary runtime entrypoints.
- The eval hits construct callbacks from embedded WebAssembly parser data. The update check fetches version metadata and tells the user to run the update command.
- The scanner’s built-in ignore patterns include shell snapshots; the cited agent-integration locations are scanner filtering code.
- Host setup runs through the user-invoked installer, which requires consent flags in non-interactive mode and an interactive install-and-upload confirmation before applying changes.
- Authentication uses Mnemonik’s auth and API services, and the inspected credential code stores credentials through the operating system credential store.
- The hook context helper derives a repository fingerprint and sends hashed project context to its configured server; it does not include raw Git command output in the payload.
Evidence against
- The package includes first-party hook setup and project-linking features that can alter coding-tool configuration and send project context during an approved install.
Behavioral surface
Source & flagged code
8 flaggeddist/diagnostics.jsView file
923import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L924: import { execFile, execFileSync } from "node:child_process";
L925: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L9235245var func = `(${args}) => { ${body} };`;
L5246: ASM_CONSTS[start] = eval(func);
L5247: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
1 Critical6 High4 Medium4 Low
CriticalRemote Response Code Executiondist/runtime/selfUpdate.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighCommand Output Exfiltrationdist/runtime/signers.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @mnemonik/cli@7.144.2.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.144.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.