registry / monomind / 2.10.21

monomind@2.10.21

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The lifecycle hook’s inspected behavior is limited to removing `._*` files under `node_modules`, and the shipped CLI is a shim for the declared CLI dependency. The scanner’s manipulation and dynamic-require hints do not establish an attack in the inspected source.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation triggers the postinstall hook; invoking the CLI triggers the shim import.

Impact

The cleanup can remove matching AppleDouble metadata files. No credential transfer, external network request, or broader destructive behavior was established.

Mechanism

On non-Windows systems, the hook deletes files named `._*` under `node_modules`; the CLI shim locates and imports `@monoes/monomindcli`.

AI rationale

Evidence

node_modules/._*

Decision evidence

public snapshot

AI called this Clean at 89.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook runs only on non-Windows systems and removes files matching the `._*` name pattern under `node_modules`.
The README describes the package’s dependency setup and says its postinstall does not download code.
The CLI entrypoint locates and imports the declared CLI dependency; no other package source files are present.

Evidence against

The postinstall hook recursively deletes matching files under `node_modules`, but the inspected behavior is limited to the `._*` pattern and is consistent with cleanup of AppleDouble files.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

7 flagged

package.jsonView file

Lines 83-123json

83 "autonomous-agents",

84 "hooks",

85 "antigravity",

86 "agy",

87 "gemini"

88 ],

89 "author": {

90 "name": "nokhodian",

91 "email": "nokhodian@gmail.com",

92 "url": "https://github.com/nokhodian"

93 },

94 "license": "Apache-2.0",

95 "publishConfig": {

96 "access": "public",

97 "tag": "latest"

98 },

99 "volta": {

100 "node": "22.23.2"

101 },

102 "scripts": {

103 "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L103

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L103

104 "dev": "cd packages/@monomind/cli && tsx watch src/index.ts",

Low

Suspicious Lifecycle Evidence

The postinstall hook runs only on non-Windows systems and removes files matching the `._*` name pattern under `node_modules`.

package.jsonView on unpkg · L103

105 "build": "pnpm --filter \"@monoes/monobrowse\" run build && pnpm --filter \"@monoes/monomindcli^...\" run build && tsc",

106 "build:ts": "cd packages/@monomind/cli && npm run build",

107 "check:versions": "node scripts/check-publish-versions.mjs",

108 "docs:counts": "node scripts/generate-doc-counts.mjs",

109 "docs:counts:check": "node scripts/generate-doc-counts.mjs --check",

110 "test": "vitest",

111 "test:all": "vitest --config vitest.workspace.ts",

112 "test:ui": "vitest --ui",

113 "test:security": "vitest run tests/security/",

114 "test:semantic-eval": "node --test tests/memory/cognee-port-eval.test.mjs",

115 "test:coverage": "vitest run --coverage",

116 "lint": "biome check",

117 "lint:fix": "biome check --write",

118 "lint:skills": "node scripts/lint-skills.mjs",

119 "format": "biome format --write",

120 "security:audit": "pnpm audit --audit-level high",

121 "security:fix": "pnpm audit --fix",

122 "security:test": "npm run test:security",

123 "v1:domains": "npm run build:domains",

README.mdView file

Lines 80-120markdown

80monomind init --codex

81```

83This emits a project-scoped `.codex/config.toml` that registers Monomind's MCP

84server, plus `AGENTS.md` with Codex-specific guidance. Codex must trust the

85project before it loads project-scoped configuration. To run persistent

86Monomind organizations through Codex, set `"runtime": "codex"` in the org

87definition.

89Use `monomind init` with no target to initialize every supported coding system.

90Use `monomind init --target codex` (or `--codex`) to initialize only Codex. See [Codex guide →](doc/concepts/codex.md).

bin/cli.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * monomind — umbrella entry point.

4 *

5 * This package ships NO code of its own. It is a thin shim that depends on

6 * @monoes/monomindcli (the real CLI) and hands off to its bin. Publishing the

7 * CLI payload from both packages is what caused the ~27MB double-publish and

8 * the two-file lockstep version bump; do not reintroduce it.

9 */

10import { createRequire } from

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

103"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Low

Suspicious Lifecycle Evidence

The postinstall hook runs only on non-Windows systems and removes files matching the `._*` name pattern under `node_modules`.

package.jsonView on unpkg · L103

Findings

1 Critical2 High2 Medium5 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Lifecycle EvidenceREADME.md

LowSuspicious Dependency Evidencebin/cli.js

Affected versions and remediation

This report applies to monomind@2.10.21.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.10.21 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:13:27.414Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.