registry / @mnemonik/cli / 7.174.1
@mnemonik/cli@7.174.1
Mnemonik installer and local project helper
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe package has no install hooks, and the flagged dynamic execution is part of the bundled Tree-sitter WebAssembly runtime rather than execution of remote responses. The reviewed signer request sends project identity hashes to a configured server and does not expose discovered third-party credentials.
Static reason
One or more suspicious static signals were detected.
Trigger
Explicit CLI invocation or a caller invoking the relevant scanner or hook-binding helper; no install lifecycle scripts are declared.
Impact
No malicious credential collection, unrelated code execution, or unsolicited account action was identified.
Mechanism
The scanner loads WebAssembly assets, and the hook-binding helper posts project context to its supplied server.
AI rationale
The package has no install hooks, and the flagged dynamic execution is part of the bundled Tree-sitter WebAssembly runtime rather than execution of remote responses. The reviewed signer request sends project identity hashes to a configured server and does not expose discovered third-party credentials.
Evidence
MNEMONIK_STATE_DIR or platform-specific Mnemonik state directory (when the relevant helper runs)
Network endpoints2
api.mnemonik.dev (default API origin)Configured server URL used by postHookBoundJson
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes an installer and local project helper, has no lifecycle scripts, and declares no runtime dependencies.
- The CLI runs its bootstrap when invoked; the package’s remote-code execution flag comes from Tree-sitter’s embedded WebAssembly runtime, which builds functions from its in-memory exports.
- The signer helper posts project context containing HMAC and repository fingerprint hashes to a supplied server using a bearer token; the inspected payload contains no discovered third-party credentials.
- The scanner’s WebAssembly runtime locates its wasm asset relative to the module or through a caller-provided locator.
Evidence against
- The package can access the network and execute local helper commands as part of its installer and runtime features.
- The runtime signer sends project identity context to its configured server when its binding helper is invoked.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystem
Source & flagged code
8 flaggeddist/diagnostics.jsView file
923import { createHash, createPublicKey, randomUUID, timingSafeEqual, verify as verifySignature } from "node:crypto";
L924: import { execFile, execFileSync } from "node:child_process";
L925: function windowsCommand(file) {
High
Child Process
Package source references child process execution.
dist/diagnostics.jsView on unpkg · L9235256var func = `(${args}) => { ${body} };`;
L5257: ASM_CONSTS[start] = eval(func);
L5258: }
High
1import { createRequire as __createRequire } from "node:module"; const require = __createRequire(import.meta.url);
L2: var __create = Object.create;
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/diagnostics.jsView on unpkg · L1Findings
1 Critical6 High4 Medium4 Low
CriticalRemote Response Code Executiondist/scanner/service.js
HighChild Processdist/diagnostics.js
HighEvaldist/diagnostics.js
HighSame File Env Network Executiondist/install/journey.js
HighCommand Output Exfiltrationdist/runtime/signers.js
HighSandbox Evasion Gated Capabilitydist/install/journey.js
HighCross File Remote Execution Contextdist/auth/credentials.js
MediumDynamic Requiredist/diagnostics.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to @mnemonik/cli@7.174.1.
See all versions of @mnemonik/cli for other recorded verdicts.
- Review the evidence and your use of @mnemonik/cli@7.174.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.