registry / monomind / 2.10.28

monomind@2.10.28

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

Source inspection confirms a postinstall cleanup limited by the `._*` filename pattern and a CLI shim that delegates to the declared dependency. The scanner’s README reviewer hint corresponds to an ordinary agent-role diagram, and the inspected source does not establish an attack.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation triggers the postinstall cleanup; invoking the CLI triggers resolution and import of the declared CLI dependency.

Impact

The cleanup can remove matching metadata files; the inspected source does not establish malicious behavior or an attack impact.

Mechanism

On non-Windows systems, postinstall searches `node_modules` for names matching `._*` and deletes them. The CLI shim locates and imports `@monoes/monomindcli`.

AI rationale

Evidence

package.jsonbin/cli.jsnode_modules/._*

Decision evidence

public snapshot

AI called this Clean at 92.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall command runs only on non-Windows systems and removes names matching `._*` under `node_modules`; it does not download or run a payload.
The CLI shim locates the declared `@monoes/monomindcli` executable and imports it.
README’s `reviewer` mention appears in a diagram listing agent roles, not as an instruction to the reviewer.
README describes outbound requests as named product features such as crash reporting and update checks.

Evidence against

The postinstall does modify files across `node_modules`, but its filename filter is limited to `._*` entries and errors are ignored.
The inspected lifecycle and shim code show no credential collection, unrelated network transfer, or reviewer-directed override.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

102"scripts": { "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "

Low

Suspicious Lifecycle Evidence

The postinstall command runs only on non-Windows systems and removes names matching `._*` under `node_modules`; it does not download or run a payload.

package.jsonView on unpkg · L102

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

447CC -->|"Task tool - spawns agents"| AG["In-session agents\narchitect, coder\ntester, reviewer\nsecurity, perf"] AG <-->|reads and writes| ADB

Low

Ai Review Evidence

README’s `reviewer` mention appears in a diagram listing agent roles, not as an instruction to the reviewer.

README.mdView on unpkg · L447

99| **Data privacy** | Your code and memory store stay local. Monomind does make outbound network calls, all to third-party services — never to a monoes-controlled server: crash reporting (on by default, `monomind crash-reporting disable` to opt out) files a GitHub issue via the GitHub API on a hard crash; `security cve` queries the OSV vulnerability database; `update` checks the npm registry for new versions

Low

Ai Review Evidence

README describes outbound requests as named product features such as crash reporting and update checks.

README.mdView on unpkg · L99

bin/cli.jsView file

14L15: const require = createRequire(import.meta.url); L16:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L14

33function resolveCliBin() { for (const dir of require.resolve.paths(CLI_PKG) ?? []) { const bin = join(dir, ...CLI_PKG.split('/'), 'bin', 'cli.js'); if (existsSync(bin)) return bin; } // Monorepo checkout b

Low

Ai Review Evidence

The CLI shim locates the declared `@monoes/monomindcli` executable and imports it.

bin/cli.jsView on unpkg · L33

60} await import(pathToFileURL(cliPath).href);

Low

Ai Review Evidence

The CLI shim locates the declared `@monoes/monomindcli` executable and imports it.

bin/cli.jsView on unpkg · L60

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

102"scripts": { "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "

Low

Suspicious Lifecycle Evidence

The postinstall command runs only on non-Windows systems and removes names matching `._*` under `node_modules`; it does not download or run a payload.

package.jsonView on unpkg · L102

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencebin/cli.js

LowAi Review EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.10.28.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.10.28 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:15:16.684Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.