registry / flowmind / 1.5.14

flowmind@1.5.14

Memory and workflow automation for MCP, Codex, and Claude Code. Reuse repeatable developer operations through skills and explicit feedback.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. The package can import local SDD-Agent resource and scene configuration into its own `~/.flowmind` state. This occurs only through an explicit command or an opt-in environment variable during FlowMind initialization; no install-time behavior was found.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Run a FlowMind CLI/MCP command with `FLOWMIND_ENABLE_SDD_AGENT_AUTO_SYNC=1`, or invoke `flowmind resource --sync-sdd-agent`.

Impact

Copies local agent resource metadata and bindings into `~/.flowmind`; no confirmed foreign-agent control hijack or exfiltration.

Mechanism

guarded cross-agent configuration import into FlowMind-owned state

Rationale

No concrete malicious behavior was found, but the opt-in cross-agent configuration migration is a real agent-extension lifecycle capability. It should be warned on rather than blocked because it is guarded and writes only package-owned state.

Evidence

package.jsoncore/index.jscore/sdd-agent-sync.jsbin/flowmind.jsbin/flowmind-codex.jscore/config-manager.jscore/skill-loader.jscore/update-notifier.jsmcp/server.jscore/ai/base-model.jscore/ai/providers/openai.js

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

`core/index.js` invokes guarded SDD-Agent auto-sync during FlowMind initialization.
`core/sdd-agent-sync.js` reads `~/.sdd-agent` and writes imported configuration under `~/.flowmind`.
`bin/flowmind.js` exposes explicit `resource --sync-sdd-agent` import.
`bin/flowmind.js` runs `npm install` only through the explicit `flowmind update` command.

Evidence against

`package.json` has no preinstall, install, or postinstall lifecycle hook.
Auto-sync is disabled unless `FLOWMIND_ENABLE_SDD_AGENT_AUTO_SYNC=1` or forced.
Sync writes FlowMind-owned paths, not Codex/Claude configuration paths.
AI provider HTTP requests use configured provider endpoints and API keys; no unrelated exfiltration endpoint found.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 104 file(s), 796 KB of source, external domains: 127.0.0.1, aip.baidubce.com, api.anthropic.com, api.deepseek.com, api.mimo.ai, api.openai.com, cli.github.com, dashscope.aliyuncs.com, open.bigmodel.cn, yapi.example.com

Source & flagged code

5 flagged

core/release-check.jsView file

Lines 1-22javascript

1const fs = require('fs-extra');

2const path = require('path');

3const { execFile } = require('child_process');

4const { promisify } = require('util');

High

Child Process

Package source references child process execution.

core/release-check.jsView on unpkg · L2

5const packageJson = require('../package.json');

7const execFileAsync = promisify(execFile);

9const SECRET_PATTERNS = [

10 { name: 'npm token', pattern: /npm_[A-Za-z0-9]{20,}/ },

11 { name: 'generic bearer token', pattern: /Bearer\s+[A-Za-z0-9._-]{24,}/i },

12 { name: 'private key', pattern: /-----BEGIN (?:RSA |OPENSSH |EC |DSA )?PRIVATE KEY-----/ }

13];

15async function readIfExists(filePath) {

16 if (!(await fs.pathExists(filePath))) return null;

17 return fs.readFile(filePath, 'utf-8');

18}

20async function scanFileForSecrets(filePath) {

21 const content = await readIfExists(filePath);

22 if (!content) return [];

bin/flowmind.jsView file

Lines 3436-3476javascript

3436 console.log(chalk.yellow('\nFix release check errors before publishing.'));

3437 }

3438}

3439

3440function formatFileSize(bytes) {

3441 if (bytes === 0) return '0 B';

core/honor-engine.jsView file

Lines 1-25javascript

1/**

2 * FlowMind Honor Engine

3 * Tracks honor points earned through usage and manages dragon totem levels

4 */

6const fs = require('fs-extra');

7const path = require('path');

Medium

Dynamic Require

Source & flagged code

5 flagged · loading source

core/release-check.jsView file

2const path = require('path'); L3: const { execFile } = require('child_process'); L4: const { promisify } = require('util');

High

Child Process

Package source references child process execution.

core/release-check.jsView on unpkg · L2

bin/flowmind.jsView file

•matchType = previous_version_dangerous_delta matchedPackage = flowmind@1.5.11 matchedIdentity = npm:Zmxvd21pbmQ:1.5.11 similarity = 0.640 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/flowmind.jsView on unpkg

3456stdio: 'inherit', L3457: shell: true L3458: });

High

Shell

Package source references shell execution.

bin/flowmind.jsView on unpkg · L3456

3675try { L3676: const globalRoot = execSync('npm root -g', { encoding: 'utf-8' }).trim(); L3677: const localPath = require.resolve('../package.json'); ... L3682: const installCmd = isGlobal L3683: ? `npm install -g flowmind@${latestVersion}` L3684: : `npm install flowmind@${latestVersion}`;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/flowmind.jsView on unpkg · L3675

core/honor-engine.jsView file

5L6: const fs = require('fs-extra'); L7: const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

core/honor-engine.jsView on unpkg · L5

Findings

1 Critical3 High4 Medium4 Low

CriticalPrevious Version Dangerous Deltabin/flowmind.js

HighChild Processcore/release-check.js

HighShellbin/flowmind.js

HighRuntime Package Installbin/flowmind.js

MediumDynamic Requirecore/honor-engine.js

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

86%Warn

Verdict confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

AuthorFlowMind Technologies

Maintainersmacheng11

Version1.5.14

PublishedJul 13, 2026

LicenseMIT

Dependencies11

Integrityverified

Package size213 KB

Files135

Keywordsmcpmodel-context-protocolcodexclaude-codeai-agentdeveloper-toolscliworkflow-automation

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → core/index.jsbin → flowmind, flowmind-codex, flowmind-mcp

Runtimenode >=18.0.0

Artifact950 KB · 135 files1 signature(s)

Install lifecycleNo install hooks · other: build, check:update, deps:graph, dev +8

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsUrlStringsManifest: clean

Lines 3655-3695javascript

3655 // Compare versions

3656 const parse = (v) => v.split('.').map(Number);

3657 const curr = parse(currentVersion);

3658 const latest = parse(latestVersion);

3659 const isNewer = latest[0] > curr[0] || (latest[0] === curr[0] && latest[1] > curr[1]) || (latest[0] === curr[0] && latest[1] === curr[1] && latest[2] > curr[2]);

3660

3661 if (!isNewer) {

3662 console.log(chalk.green('\n✓ You are on a newer version than npm latest.'));

3663 return;

3664 }

3665

3666 console.log(chalk.yellow(`\n⬆ Update available: ${currentVersion} → ${latestVersion}`));

3667

3668 if (options.check) {

3669 console.log(chalk.cyan('\nRun `flowmind update` to install.'));

3670 return;

3671 }

3672

3673 // Detect install method

3674 const isGlobal = (() => {

3675 try {

3676 const globalRoot = execSync('npm root -g', { encoding: 'utf-8' }).trim();

3677 const localPath = require.resolve('../package.json');

3678 return localPath.startsWith(globalRoot);

3679 } catch { return false; }

3680 })();

3681

3682 const installCmd = isGlobal

3683 ? `npm install -g flowmind@${latestVersion}`

3684 : `npm install flowmind@${latestVersion}`;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/flowmind.jsView on unpkg · L3675

3685

3686 console.log(chalk.cyan(`\nInstalling: ${installCmd}`));

3687 const spinner = ora('Updating FlowMind...').start();

3688

3689 try {

3690 execSync(installCmd, { encoding: 'utf-8', stdio: 'pipe' });

3691 spinner.succeed(`FlowMind updated to ${latestVersion}!`);

3692

3693 console.log(chalk.green('\n✓ Update complete!'));

3694 console.log(chalk.gray(' Run `flowmind --version` to verify.'));

3695 } catch (installError) {