registry / @mnemonik/codex-hooks / 0.8.17

@mnemonik/codex-hooks@0.8.17

Codex lifecycle hooks for Mnemonik memory awareness and host-side grounding gates. Hooks only: does not install skills, rules, AGENTS.md, .mnemonik.json, or MCP config.

AI Security Review

scanned 18h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. An explicit installer registers a persistent Codex hook and enables hooks in Codex configuration. At hook runtime it forwards agent context and tool data to the configured Mnemonik server, which can return visible policy/context messages.

Static reason

No blocking static signals were detected.

Trigger

User runs mnemonik-codex-hooks install (or invokes its bin); later Codex hook events run the copied dispatcher.

Impact

Can influence Codex via hook messages and transmit prompt/tool/workspace metadata to the configured service.

Mechanism

Persistent Codex hook registration with authenticated remote policy/context requests.

Rationale

This is a real agent-extension and remote-context capability, but it is user-invoked and package-aligned rather than an unconsented lifecycle mutation or concrete malware behavior. Warn for the persistent control surface and data-forwarding capability.

Evidence

package.jsondist/install.jsdist/hook.jsdist/lib/http.jsdist/lib/env.jsdist/lib/installerSupport.js.codex/hooks.json.codex/config.toml~/.codex/hooks.json~/.codex/config.toml~/.mnemonik/hooks/codex-hooks/

Network endpoints7

api.mnemonik.dev/api/v1/hooks/mcp-precheck

@mnemonik/codex-hooks@0.8.17

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code