registry / @monoes/monomindcli / 1.18.0

@monoes/monomindcli@1.18.0

⚠ Under review

Monomind CLI - Enterprise AI agent orchestration with 60+ specialized agents, swarm coordination, MCP server, self-learning hooks, and vector memory for Claude Code

Static Scan Results

scanned 7d ago · by rust-scanner

Static analysis flagged 27 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 371 file(s), 4.84 MB of source, external domains: 127.0.0.1, a2a-protocol.org, accounts.google.com, api.anthropic.com, api.osv.dev, api.pinata.cloud, api.web3.storage, cdn.jsdelivr.net, cli.github.com, cloud.google.com, cloudflare-ipfs.com, dweb.link, gateway.pinata.cloud, gemini.google.com, generativelanguage.googleapis.com, git-scm.com, github.com, hub.docker.com, ipfs.io, login.microsoftonline.com, nodejs.org, pinata.cloud, registry.npmjs.org, services.nvd.nist.gov, storage.googleapis.com, w3s.link, web3.storage, www.instagram.com, www.linkedin.com, www.w3.org, x.com

Source & flagged code

18 flagged

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

dist/src/mcp-tools/quality/security-compliance/detect-secrets.jsView file

Lines 262-302javascript

262 const severityOrder = { critical: 0, high: 1, medium: 2, low: 3 };

263 return severityOrder[a.severity] - severityOrder[b.severity];

264 });

265 return { findings, scanStats: { filesScanned: files.length, linesScanned: totalLines } };

266}

267function getExposureRisk(severity) {

268 const risks = {

269 critical: 'High risk - immediate unauthorized access possible',

270 high: 'Significant risk - sensitive data exposure likely',

271 medium: 'Moderate risk - potential security issue',

272 low: 'Low risk - minor exposure concern',

273 };

274 return risks[severity] || 'Unknown risk level';

275}

276function getRemediation(type) {

277 const remediations = {

278 'api-key': 'Move API key to environment variable or secrets manager',

279 'aws-key': 'Rotate AWS credentials immediately and use IAM roles',

280 'aws-secret': 'Rotate AWS credentials and use AWS Secrets Manager',

281 'private-key': 'Remove private key from code, store in secure vault',

282 password: 'Use environment variables or secrets manager',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/mcp-tools/quality/security-compliance/detect-secrets.jsView on unpkg · L282

283 token: 'Use secure token storage, implement token rotation',

284 'connection-string': 'Use environment variables for connection strings',

285 'gcp-key': 'Use workload identity instead of service account keys',

286 'azure-key': 'Use Azure Key Vault for credential management',

287 generic: 'Review and move to secure configuration',

288 };

289 return remediations[type] || 'Remove secret from code and use secure storage';

290}

291function calculateSummary(findings) {

292 const counts = { critical: 0, high: 0, medium: 0, low: 0 };

293 for (const finding of findings) {

294 counts[finding.severity]++;

295 }

296 const files = new Set(findings.map((f) => f.location.file));

297 const verifiedCount = findings.filter((f) => f.verified).length;

298 // Calculate risk score

299 const riskScore = Math.max(0, 100 - (counts.critical * 25 + counts.high * 15 + counts.medium * 5 + counts.low * 2));

300 return {

301 totalFindings: findings.length,

302 criticalCount: counts.critical,

dist/workflow/builtin-handlers.jsView file

Lines 48-88javascript

48};

49var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {

50 if (pack || arguments.length === 2) for (

dist/src/init/statusline-generator.jsView file

Lines 21-61javascript

21 */

22export function generateStatuslineScript(options) {

23 const maxAgents = options.runtime.maxAgents;

24 return `#!/usr/bin/env node

25/**

26 * Monomind V1 Statusline Generator (Optimized)

27 * Displays real-time v1 implementation progress and system status

dist/src/workflow/condition-evaluator.jsView file

Lines 58-82javascript

58 if (expression.length > 500) {

59 throw new Error('Condition expression too long (max 500 characters)');

60 }

61 // Step 1: substitute variables (string values JSON-encoded to prevent quote injection)

62 const resolved = substituteCondition

dist/dashboard/server.jsView file

Lines 1-25javascript

1"use strict";

2var _a;

3Object.defineProperty(exports, "__esModule", { value: true });

4exports.startDashboard = startDashboard;

5exports.getDashboard = getDashboard;

6var node_http_1 = require("node:http");

dist/src/commands/providers.jsView file

Lines 13-53javascript

13 options: [

14 { name: 'type', short: 't', type: 'string', description: 'Filter by type: llm, embedding, image', default: 'all' },

15 { name: 'active', short: 'a', type: 'boolean', description: 'Show only active providers' },

16 ],

17 examples: [

dist/src/mcp-tools/agentdb-tools.jsView file

Lines 510-550javascript

510};

511// ===== agentdb_context_synthesize — Synthesize context from memories =====

512export const agentdbContextSynthesize = {

513 name: 'agentdb_context-synthesize',

514 description: 'Synthesize context from stored memories for a given query',

515 inputSchema: {

516 type: 'object',

517 properties: {

scripts/sync-claude-assets.shView file

•path = scripts/sync-claude-assets.sh kind = build_helper sizeBytes = 1014 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/sync-claude-assets.shView on unpkg

dist/src/init/executor.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = @monoes/monomindcli@1.17.0 matchedIdentity = npm:QG1vbm9lcy9tb25vbWluZGNsaQ:1.17.0 similarity = 0.750 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/init/executor.jsView on unpkg

.claude/agents/core/reviewer.mdView file

85patternName = generic_password severity = medium line = 85 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .claude/agents/core/reviewer.md

.claude/agents/core/reviewer.mdView on unpkg · L85

.claude/agents/testing/testing-api-tester.mdView file

78patternName = generic_password severity = medium line = 78 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in .claude/agents/testing/testing-api-tester.md

.claude/agents/testing/testing-api-tester.mdView on unpkg · L78

.claude/agents/testing/testing-performance-benchmarker.mdView file

94patternName = generic_password severity = medium line = 94 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in .claude/agents/testing/testing-performance-benchmarker.md

.claude/agents/testing/testing-performance-benchmarker.mdView on unpkg · L94

.claude/agents/sparc/refinement.mdView file

41patternName = generic_password severity = medium line = 41 matchedText = password...23!'

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L41

69patternName = generic_password severity = medium line = 69 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L69

245patternName = generic_password severity = medium line = 245 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L245

Source & flagged code

18 flagged · loading source

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

dist/src/mcp-tools/quality/security-compliance/detect-secrets.jsView file

282patternName = generic_password severity = medium line = 282 matchedText = password...er',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/mcp-tools/quality/security-compliance/detect-secrets.jsView on unpkg · L282

dist/workflow/builtin-handlers.jsView file

68var node_path_1 = require("node:path"); L69: var node_child_process_1 = require("node:child_process"); L70: // Call npx monomind browse <args> and return stdout. Never throws.

High

Child Process

Package source references child process execution.

dist/workflow/builtin-handlers.jsView on unpkg · L68

68var node_path_1 = require("node:path"); L69: var node_child_process_1 = require("node:child_process"); L70: // Call npx monomind browse <args> and return stdout. Never throws. L71: function browseCmd(args, timeoutMs) {

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/workflow/builtin-handlers.jsView on unpkg · L68

dist/src/init/statusline-generator.jsView file

186L187: const raw = safeExec(\`sh -c '\${script}'\`, 3000); L188: if (!raw) return result;

High

Shell

Package source references shell execution.

dist/src/init/statusline-generator.jsView on unpkg · L186

41const path = require('path'); L42: const { execSync } = require('child_process'); L43: const os = require('os'); ... L49: L50: const CWD = process.env.CLAUDE_PROJECT_DIR || process.cwd(); L51: L52: // Read monomind version — check global install first, then CWD package.json L53: function getVersion() { ... L66: if (!pkgStat || pkgStat.size > 1024 * 1024) continue; L67: const pkg = JSON.parse(fs.readFileSync(p, 'utf-8')); L68: if (pkg.version && (pkg.name === 'monomind' || pkg.name === '@monomind/cli' || (pkg.name || '').startsWith('@monomind'))) { ... L1268: if (!options.statusline.enabled) {

Medium

Install Persistence

Source writes installer persistence such as shell profile or service configuration.

dist/src/init/statusline-generator.jsView on unpkg · L41

dist/src/workflow/condition-evaluator.jsView file

78// eslint-disable-next-line @typescript-eslint/no-implied-eval L79: const fn = new Function(`"use strict"; return (${resolved});`); L80: return Boolean(fn());

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/src/workflow/condition-evaluator.jsView on unpkg · L78

dist/dashboard/server.jsView file

5exports.getDashboard = getDashboard; L6: var node_http_1 = require("node:http"); L7: var node_fs_1 = require("node:fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/dashboard/server.jsView on unpkg · L5

dist/src/commands/providers.jsView file

33], L34: data: [ L35: { provider: 'Anthropic', type: 'LLM', models: 'claude-3.5-sonnet, opus', status: output.success('Active') }, ... L67: output.printError('Provider name is required. Use -p <name> or pass as first argument.'); L68: return { success: false, exitCode: 1 }; L69: } L70: const cwd = process.cwd(); L71: const config = configManager.getConfig(cwd); ... L146: test: async () => { L147: const key = process.env.ANTHROPIC_API_KEY || getConfigApiKey('anthropic'); L148: if (key) ... L174: const entry = configuredProviders.find((p) => typeof p.name === 'string' && p.name.toLowerCase() === 'ollama');

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/src/commands/providers.jsView on unpkg · L33

dist/src/mcp-tools/agentdb-tools.jsView file

530package = @monoes/monomindcli; repositoryIdentity = monomind; dependency = @monomind/security L530: try { L531: const secMod = await import('@monomind/security').catch(() => null); L532: const validateExternalContent = secMod?.validateExternalContent;

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/src/mcp-tools/agentdb-tools.jsView on unpkg · L530

scripts/sync-claude-assets.shView file

•path = scripts/sync-claude-assets.sh kind = build_helper sizeBytes = 1014 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/sync-claude-assets.shView on unpkg

dist/src/init/executor.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/init/executor.jsView on unpkg

.claude/agents/core/reviewer.mdView file

85patternName = generic_password severity = medium line = 85 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .claude/agents/core/reviewer.md

.claude/agents/core/reviewer.mdView on unpkg · L85

.claude/agents/testing/testing-api-tester.mdView file

78patternName = generic_password severity = medium line = 78 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in .claude/agents/testing/testing-api-tester.md

.claude/agents/testing/testing-api-tester.mdView on unpkg · L78

.claude/agents/testing/testing-performance-benchmarker.mdView file

94patternName = generic_password severity = medium line = 94 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in .claude/agents/testing/testing-performance-benchmarker.md

.claude/agents/testing/testing-performance-benchmarker.mdView on unpkg · L94

.claude/agents/sparc/refinement.mdView file

41patternName = generic_password severity = medium line = 41 matchedText = password...23!'

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L41

69patternName = generic_password severity = medium line = 69 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L69

245patternName = generic_password severity = medium line = 245 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L245

Findings

1 Critical6 High14 Medium6 Low

CriticalPrevious Version Dangerous Deltadist/src/init/executor.js

HighAi Reviewer ManipulationREADME.md

HighChild Processdist/workflow/builtin-handlers.js

HighShelldist/src/init/statusline-generator.js

HighCloud Metadata Accessdist/src/commands/providers.js

HighCopied Package Dependency Bridgedist/src/mcp-tools/agentdb-tools.js

HighRuntime Package Installdist/workflow/builtin-handlers.js

MediumSecret Patterndist/src/mcp-tools/quality/security-compliance/detect-secrets.js

MediumDynamic Requiredist/dashboard/server.js

MediumNetwork

MediumEnvironment Vars

MediumInstall Persistencedist/src/init/statusline-generator.js

MediumShips Build Helperscripts/sync-claude-assets.sh

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

MediumSecret Pattern.claude/agents/core/reviewer.md

MediumSecret Pattern.claude/agents/testing/testing-api-tester.md

MediumSecret Pattern.claude/agents/testing/testing-performance-benchmarker.md

MediumSecret Pattern.claude/agents/sparc/refinement.md

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/src/workflow/condition-evaluator.js

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Source & flagged code

18 flagged

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

dist/src/mcp-tools/quality/security-compliance/detect-secrets.jsView file

Lines 262-302javascript

262 const severityOrder = { critical: 0, high: 1, medium: 2, low: 3 };

263 return severityOrder[a.severity] - severityOrder[b.severity];

264 });

265 return { findings, scanStats: { filesScanned: files.length, linesScanned: totalLines } };

266}

267function getExposureRisk(severity) {

268 const risks = {

269 critical: 'High risk - immediate unauthorized access possible',

270 high: 'Significant risk - sensitive data exposure likely',

271 medium: 'Moderate risk - potential security issue',

272 low: 'Low risk - minor exposure concern',

273 };

274 return risks[severity] || 'Unknown risk level';

275}

276function getRemediation(type) {

277 const remediations = {

278 'api-key': 'Move API key to environment variable or secrets manager',

279 'aws-key': 'Rotate AWS credentials immediately and use IAM roles',

280 'aws-secret': 'Rotate AWS credentials and use AWS Secrets Manager',

281 'private-key': 'Remove private key from code, store in secure vault',

282 password: 'Use environment variables or secrets manager',

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/src/mcp-tools/quality/security-compliance/detect-secrets.jsView on unpkg · L282

283 token: 'Use secure token storage, implement token rotation',

284 'connection-string': 'Use environment variables for connection strings',

285 'gcp-key': 'Use workload identity instead of service account keys',

286 'azure-key': 'Use Azure Key Vault for credential management',

287 generic: 'Review and move to secure configuration',

288 };

289 return remediations[type] || 'Remove secret from code and use secure storage';

290}

291function calculateSummary(findings) {

292 const counts = { critical: 0, high: 0, medium: 0, low: 0 };

293 for (const finding of findings) {

294 counts[finding.severity]++;

295 }

296 const files = new Set(findings.map((f) => f.location.file));

297 const verifiedCount = findings.filter((f) => f.verified).length;

298 // Calculate risk score

299 const riskScore = Math.max(0, 100 - (counts.critical * 25 + counts.high * 15 + counts.medium * 5 + counts.low * 2));

300 return {

301 totalFindings: findings.length,

302 criticalCount: counts.critical,

dist/workflow/builtin-handlers.jsView file

Lines 48-88javascript

48};

49var __spreadArray = (this && this.__spreadArray) || function (to, from, pack) {

50 if (pack || arguments.length === 2) for (

dist/src/init/statusline-generator.jsView file

Lines 21-61javascript

21 */

22export function generateStatuslineScript(options) {

23 const maxAgents = options.runtime.maxAgents;

24 return `#!/usr/bin/env node

25/**

26 * Monomind V1 Statusline Generator (Optimized)

27 * Displays real-time v1 implementation progress and system status

dist/src/workflow/condition-evaluator.jsView file

Lines 58-82javascript

58 if (expression.length > 500) {

59 throw new Error('Condition expression too long (max 500 characters)');

60 }

61 // Step 1: substitute variables (string values JSON-encoded to prevent quote injection)

62 const resolved = substituteCondition

dist/dashboard/server.jsView file

Lines 1-25javascript

1"use strict";

2var _a;

3Object.defineProperty(exports, "__esModule", { value: true });

4exports.startDashboard = startDashboard;

5exports.getDashboard = getDashboard;

6var node_http_1 = require("node:http");

dist/src/commands/providers.jsView file

Lines 13-53javascript

13 options: [

14 { name: 'type', short: 't', type: 'string', description: 'Filter by type: llm, embedding, image', default: 'all' },

15 { name: 'active', short: 'a', type: 'boolean', description: 'Show only active providers' },

16 ],

17 examples: [

dist/src/mcp-tools/agentdb-tools.jsView file

Lines 510-550javascript

510};

511// ===== agentdb_context_synthesize — Synthesize context from memories =====

512export const agentdbContextSynthesize = {

513 name: 'agentdb_context-synthesize',

514 description: 'Synthesize context from stored memories for a given query',

515 inputSchema: {

516 type: 'object',

517 properties: {

scripts/sync-claude-assets.shView file

•path = scripts/sync-claude-assets.sh kind = build_helper sizeBytes = 1014 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/sync-claude-assets.shView on unpkg

dist/src/init/executor.jsView file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/src/init/executor.jsView on unpkg

.claude/agents/core/reviewer.mdView file

85patternName = generic_password severity = medium line = 85 matchedText = console....rd);

Medium

Secret Pattern

Hardcoded password in .claude/agents/core/reviewer.md

.claude/agents/core/reviewer.mdView on unpkg · L85

.claude/agents/testing/testing-api-tester.mdView file

78patternName = generic_password severity = medium line = 78 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in .claude/agents/testing/testing-api-tester.md

.claude/agents/testing/testing-api-tester.mdView on unpkg · L78

.claude/agents/testing/testing-performance-benchmarker.mdView file

94patternName = generic_password severity = medium line = 94 matchedText = password...123'

Medium

Secret Pattern

Hardcoded password in .claude/agents/testing/testing-performance-benchmarker.md

.claude/agents/testing/testing-performance-benchmarker.mdView on unpkg · L94

.claude/agents/sparc/refinement.mdView file

41patternName = generic_password severity = medium line = 41 matchedText = password...23!'

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L41

69patternName = generic_password severity = medium line = 69 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L69

245patternName = generic_password severity = medium line = 245 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in .claude/agents/sparc/refinement.md

.claude/agents/sparc/refinement.mdView on unpkg · L245