registry / monomind / 2.10.25

monomind@2.10.25

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The inspected lifecycle command performs a bounded sidecar cleanup and the CLI entrypoint delegates to its declared matching CLI dependency. README mentions review only as a product workflow; the scanner hint does not establish reviewer manipulation or concrete attack behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation triggers postinstall; invoking the `monomind` binary triggers the CLI shim.

Impact

The cleanup removes matching sidecar files. No credential transfer, remote payload execution, or agent control-surface mutation was established in the inspected package source.

Mechanism

The hook runs a `find` cleanup on non-Windows systems. The shim locates and imports `@monoes/monomindcli`.

AI rationale

Evidence

package.jsonbin/cli.js

Decision evidence

public snapshot

AI called this Clean at 90.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook removes `._*` sidecar files from `node_modules` on non-Windows systems; it does not fetch code or transmit data.
The manifest delegates the CLI to the matching `@monoes/monomindcli` release, and the shim imports that CLI.
The README describes outbound calls to third-party services and says the dependency setup does not download code in postinstall.
The README uses “review” to describe a development workflow, not to direct this security review.

Evidence against

The package does define an automatic postinstall hook that deletes matching files under `node_modules`.
The CLI entrypoint dynamically imports its declared CLI dependency.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

103"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Low

Suspicious Lifecycle Evidence

The postinstall hook removes `._*` sidecar files from `node_modules` on non-Windows systems; it does not fetch code or transmit data.

package.jsonView on unpkg · L103

23"dependencies": { "@monoes/monomindcli": "2.10.25" }, "overrides": { "hono": ">=4.13.5", "ws": "$ws", "axios": ">=1.16.0", "qs": ">=6.16.0", "esbuild":

Low

Ai Review Evidence

The manifest delegates the CLI to the matching `@monoes/monomindcli` release, and the shim imports that CLI.

package.jsonView on unpkg · L23

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

99| **Data privacy** | Your code and memory store stay local. Monomind does make outbound network calls, all to third-party services — never to a monoes-controlled server: crash re

Low

Suspicious Lifecycle Evidence

The README describes outbound calls to third-party services and says the dependency setup does not download code in postinstall.

README.mdView on unpkg · L99

100| **Dependencies** | Standard npm packages (tree-sitter, better-sqlite3, sql.js, zod). tree-sitter and better-sqlite3 are native (prebuilt) Node addons, not pure JS/WASM — sql.js

Low

Suspicious Lifecycle Evidence

The README describes outbound calls to third-party services and says the dependency setup does not download code in postinstall.

README.mdView on unpkg · L100

Low

bin/cli.jsView file

14L15: const require = createRequire(import.meta.url); L16:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L14

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

103"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Low

Suspicious Lifecycle Evidence

The postinstall hook removes `._*` sidecar files from `node_modules` on non-Windows systems; it does not fetch code or transmit data.

package.jsonView on unpkg · L103

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Lifecycle EvidenceREADME.md

LowAi Review Evidencepackage.json

LowSuspicious Lifecycle EvidenceREADME.md

LowAi Review EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.10.25.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.10.25 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:13:57.852Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.