registry / monomind / 2.16.0

monomind@2.16.0

Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.c

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The inspected lifecycle behavior is bounded to removing `._*` files under `node_modules`, and the CLI shim hands off to its declared dependency. The README's review-related matches are ordinary product references, not instructions to dictate or suppress this review.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm runs the package's postinstall hook on installation.

Impact

The cleanup removes matching metadata files. The inspected source does not establish credential collection, data disclosure, or agent control-surface mutation.

Mechanism

On non-Windows systems, the hook invokes `find` to delete files named `._*` under `node_modules`; the CLI shim resolves and imports its declared CLI dependency.

AI rationale

Evidence

package.jsonbin/cli.js

Decision evidence

public snapshot

AI called this Clean at 94.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook removes `._*` metadata files under `node_modules` on non-Windows systems; no unrelated policy or agent settings are changed.
The README identifies the package as a CLI and discloses that it makes a small number of outbound network calls.
The CLI entrypoint locates and imports the declared `@monoes/monomindcli` dependency.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

8 flagged

package.jsonView file

Lines 62-103json

62 "organizations",

63 "autonomous-agents",

64 "hooks",

65 "antigravity",

66 "agy",

67 "gemini"

68 ],

69 "author": {

70 "name": "nokhodian",

71 "email": "nokhodian@gmail.com",

72 "url": "https://github.com/nokhodian"

73 },

74 "license": "Apache-2.0",

75 "publishConfig": {

76 "access": "public",

77 "tag": "latest"

78 },

79 "volta": {

80 "node": "22.23.2"

81 },

82 "scripts": {

83 "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L83

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L83

84 "dev": "cd packages/@monomind/cli && tsx watch src/index.ts",

Low

Suspicious Lifecycle Evidence

The postinstall hook removes `._*` metadata files under `node_modules` on non-Windows systems; no unrelated policy or agent settings are changed.

package.jsonView on unpkg · L82

85 "build": "pnpm -r run build",

86 "build:ts": "cd packages/@monomind/cli && npm run build",

87 "typecheck": "tsc --noEmit -p tsconfig.json",

88 "check:versions": "node scripts/check-publish-versions.mjs && node scripts/check-package-bumps.mjs && node scripts/check-workspace-protocol.mjs && node scripts/check-overrides-source.mjs",

89 "docs:counts": "node scripts/generate-doc-counts.mjs",

90 "docs:counts:check": "node scripts/generate-doc-counts.mjs --check",

91 "docs:refs:check": "node scripts/check-doc-refs.mjs",

92 "sync:claude-trees": "node scripts/sync-claude-trees.mjs",

93 "sync:claude-trees:check": "node scripts/sync-claude-trees.mjs --check",

94 "test": "vitest",

95 "test:all": "vitest --config vitest.workspace.ts",

96 "test:run": "vitest run",

97 "test:all:run": "vitest run --config vitest.workspace.ts",

98 "test:ui": "vitest --ui",

99 "test:security": "vitest run tests/security/",

100 "test:semantic-eval": "node --test tests/memory/cognee-port-eval.test.mjs",

101 "test:coverage": "vitest run --coverage",

102 "verify": "pnpm run build && pnpm run typecheck && pnpm run lint && pnpm run docs:refs:check && pnpm run sync:claude-trees:check && pnpm run test:all:run && pnpm --filter @monoes/monobrowse test && pnpm --filter @monoes/monodesign test && pnpm --filter monofence-ai test",

103 "lint": "biome check",

README.mdView file

Lines 74-114markdown

75<details>

76<summary><strong>Using Codex?</strong></summary>

78```bash

79codex login

80monomind init --codex

81```

83This emits a project-scoped `.codex/config.toml` that registers Monomind's MCP

bin/cli.jsView file

Lines 1-53javascript

1#!/usr/bin/env node

2/**

3 * monomind — umbrella entry point.

4 *

5 * This package ships NO code of its own. It is a thin shim that depends on

6 * @monoes/monomindcli (the real CLI) and hands off to its bin. Publishing the

7 * CLI payload from both packages is what caused the ~27MB double-publish and

Low

Suspicious Dependency Evidence

The CLI entrypoint locates and imports the declared `@monoes/monomindcli` dependency.

bin/cli.jsView on unpkg · L3

8 * the two-file lockstep version bump; do not reintroduce it.

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

82"scripts": { "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "dev": "cd packages/@monomind/cli && tsx

Low

Suspicious Lifecycle Evidence

The postinstall hook removes `._*` metadata files under `node_modules` on non-Windows systems; no unrelated policy or agent settings are changed.

package.jsonView on unpkg · L82

Findings

1 Critical2 High2 Medium6 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review EvidenceREADME.md

LowSuspicious Dependency Evidencebin/cli.js

Affected versions and remediation

This report applies to monomind@2.16.0.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.16.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:20:01.397Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.