registry / monomind / 2.10.2

monomind@2.10.2

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The postinstall hook's deletion is limited by its `._*` filename match beneath `node_modules`; the runtime entrypoint resolves and imports the declared CLI dependency. The scanner labels are not proof of malicious behavior, and the inspected README excerpt contains ordinary product setup text.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The postinstall hook runs during package installation on non-Windows platforms.

Impact

Matching files beneath `node_modules` may be removed. The inspected behavior does not establish broader deletion or data disclosure.

Mechanism

The hook runs `find node_modules -name ._* -delete` and ignores failures; the inspected source shows no credential transfer or unrelated network request.

AI rationale

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook runs a `find` command beneath `node_modules` that deletes entries named `._*`; it is skipped on Windows and ignores failures.
The manifest declares `@monoes/monomindcli` as the runtime dependency, and the CLI shim locates and imports that dependency's entrypoint.
The README contains ordinary installation and initialization instructions, with no review-directed instructions in the inspected excerpt.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

99"scripts": { "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "dev":

Low

Suspicious Lifecycle Evidence

The postinstall hook runs a `find` command beneath `node_modules` that deletes entries named `._*`; it is skipped on Windows and ignores failures.

package.jsonView on unpkg · L99

23"dependencies": { "@monoes/monomindcli": "2.10.2" }, "overrides": { "hono": ">=4.12.34", "ws

Low

Suspicious Dependency Evidence

The manifest declares `@monoes/monomindcli` as the runtime dependency, and the CLI shim locates and imports that dependency's entrypoint.

package.jsonView on unpkg · L23

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

40```bash npm install -g monomind # Apache 2.0 licensed, runs entirely on your machine cd your-project && monomind init claude mcp add monomind -- npx -y monomind@latest mcp start ```

Low

Ai Review Evidence

The README contains ordinary installation and initialization instructions, with no review-directed instructions in the inspected excerpt.

README.mdView on unpkg · L40

bin/cli.jsView file

Lines 1-63javascript

1#!/usr/bin/env node

2/**

3 * monomind — umbrella entry point.

4 *

5 * This package ships NO code of its own. It is a thin shim that depends on

6 * @monoes/monomindcli (the real CLI) and hands off to its bin. Publishing the

7 * CLI payload from both packages is what caused the ~27MB double-publish and

8 * the two-file lockstep version bump; do not reintroduce it.

9 */

10import { createRequire } from

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

99"scripts": { "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "dev":

Low

Suspicious Lifecycle Evidence

The postinstall hook runs a `find` command beneath `node_modules` that deletes entries named `._*`; it is skipped on Windows and ignores failures.

package.jsonView on unpkg · L99

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Dependency Evidencepackage.json

LowSuspicious Dependency Evidencebin/cli.js

LowAi Review EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.10.2.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.10.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:15:41.941Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.