registry / monomind / 2.10.30

monomind@2.10.30

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The install hook is limited to cleanup beneath its relative node_modules path, and the runtime entry point delegates to the declared same-publisher CLI dependency. The README’s scanner-flagged instruction string appears as a security-detector test example, not as an attempt to direct this review.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The postinstall hook runs during package installation; the CLI shim runs when the command is invoked.

Impact

The inspected source shows no credential collection, unrelated network transfer, account action, consumer policy mutation, or broad project modification.

Mechanism

The hook searches its relative node_modules directory for files named ._* and deletes them on non-Windows systems. The shim locates and imports the declared CLI dependency.

AI rationale

Evidence

package.jsonbin/cli.js

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook runs a best-effort cleanup under its relative node_modules directory, removing only filenames matching ._* on non-Windows systems.
The manifest declares the CLI as a same-publisher dependency at the matching version.
The command shim locates and imports that dependency’s CLI as its entry point.
The README describes its outbound service calls as product functions such as crash reports, vulnerability lookups, update checks, and model downloads.
The instruction-like text flagged in the README is an example input to a security detector and is marked unsafe.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

103"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "dev": "cd packages/@monomind/cli && tsx watch src

Low

Suspicious Lifecycle Evidence

The postinstall hook runs a best-effort cleanup under its relative node_modules directory, removing only filenames matching ._* on non-Windows systems.

package.jsonView on unpkg · L103

24"@monoes/monomindcli": "2.10.30" }, "overrides": { "hono": ">=4.13.5", "ws": "

Low

Suspicious Dependency Evidence

The manifest declares the CLI as a same-publisher dependency at the matching version.

package.jsonView on unpkg · L24

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

99| **Data privacy** | Your code and memory store stay local. Monomind does make outbound network calls, all to third-party services — never to a monoes-controlled server: crash reporting (on by default, `monomind crash-reporting disable` to opt out) files a GitHub issue via the GitHub API on a hard crash; `security cve` queries the OSV vulnerability database; `update` checks the npm registry for new versions; the embedding model is downloaded from the HuggingFace CDN on first use. Neural pattern export/import (`hooks intelligence export`/`import`) is local-file-only. | | **Dependencies** | St

Low

Ai Review Evidence

The README describes its outbound service calls as product functions such as crash reports, vulnerability lookups, update checks, and model downloads.

README.mdView on unpkg · L99

bin/cli.jsView file

14L15: const require = createRequire(import.meta.url); L16:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L14

33function resolveCliBin() { for (const dir of require.resolve.paths(CLI_PKG) ?? []) { const bin = join(dir, ...CLI_PKG.split('/'), 'bin', 'cli.js'); if (existsSync(bin)) return bin; } // Monorepo checkout before install / pnpm link edge case. const local = join( dirname(fileURLToPath(import.meta.url)), '..', 'packages', '@monomind', 'cli', 'bin', 'cli.js', ); return existsSync(lo

Low

Suspicious Dependency Evidence

The command shim locates and imports that dependency’s CLI as its entry point.

bin/cli.jsView on unpkg · L33

62await import(pathToFileURL(cliPath).href);

Low

Suspicious Dependency Evidence

The command shim locates and imports that dependency’s CLI as its entry point.

bin/cli.jsView on unpkg · L62

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

Low

Suspicious Lifecycle Evidence

The postinstall hook runs a best-effort cleanup under its relative node_modules directory, removing only filenames matching ._* on non-Windows systems.

package.jsonView on unpkg · L103

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Dependency Evidencepackage.json

LowSuspicious Dependency Evidencebin/cli.js

LowAi Review EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.10.30.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.10.30 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:15:26.266Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.