registry / monomind / 2.10.9

monomind@2.10.9

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The inspected lifecycle command is a bounded filesystem cleanup, and the CLI delegates to its declared companion package. The README’s review references describe product workflows, not instructions aimed at this reviewer.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation runs the postinstall hook; running the CLI invokes its entrypoint.

Impact

The inspected source establishes no credential transfer, network activity, or harmful account action; the cleanup targets matching sidecar files.

Mechanism

The hook attempts to delete `._*` entries under its relative `node_modules` directory on non-Windows platforms. The CLI resolves and imports `@monoes/monomindcli`.

AI rationale

Evidence

package.jsonbin/cli.jsREADME.md

Decision evidence

public snapshot

AI called this Clean at 97.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall removes matching `._*` files from a relative `node_modules` directory and suppresses errors; it does not show network or credential behavior.
The manifest depends on `@monoes/monomindcli`, and the CLI entrypoint locates and imports that companion package.
The README describes “review” as one of the package’s development workflows, which does not direct or manipulate this security review.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

100"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Low

Suspicious Lifecycle Evidence

The postinstall removes matching `._*` files from a relative `node_modules` directory and suppresses errors; it does not show network or credential behavior.

package.jsonView on unpkg · L100

24"@monoes/monomindcli": "2.10.9" }, "overrides": { "hono": ">=4.12.34", "ws": "$ws", "axios": ">=1.1

Low

Ai Review Evidence

The manifest depends on `@monoes/monomindcli`, and the CLI entrypoint locates and imports that companion package.

package.jsonView on unpkg · L24

README.mdView file

•isSafe('Ignore all previous instructions'); // → false (~0.04ms)

High

Ai Reviewer Manipulation

Package text addresses the security reviewer or scanner and tries to influence the review outcome.

README.mdView on unpkg

38**Reusable slash commands** — 30+ development workflows (build, review, debug, TDD, architecture) available as `/mastermind:*` commands inside Claude Code. ```bash npm install -g monomind

Low

Ai Review Evidence

The README describes “review” as one of the package’s development workflows, which does not direct or manipulate this security review.

README.mdView on unpkg · L38

bin/cli.jsView file

14L15: const require = createRequire(import.meta.url); L16:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/cli.jsView on unpkg · L14

17const CLI_PKG = '@monoes/monomindcli'; /** * Locate the CLI's bin on disk. * * Deliberately does NOT use require.resolve() on the package: the CLI declares * an `exports`

Low

Ai Review Evidence

The manifest depends on `@monoes/monomindcli`, and the CLI entrypoint locates and imports that companion package.

bin/cli.jsView on unpkg · L17

62await import(pathToFileURL(cliPath).href);

Low

Ai Review Evidence

The manifest depends on `@monoes/monomindcli`, and the CLI entrypoint locates and imports that companion package.

bin/cli.jsView on unpkg · L62

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

100"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Low

Suspicious Lifecycle Evidence

The postinstall removes matching `._*` files from a relative `node_modules` directory and suppresses errors; it does not show network or credential behavior.

package.jsonView on unpkg · L100

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencepackage.json

LowAi Review Evidencebin/cli.js

LowAi Review EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.10.9.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.10.9 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:13:52.134Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.