registry / monomind / 2.17.0

monomind@2.17.0

Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.c

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The flagged lifecycle hook is a narrow cleanup of AppleDouble-style files within node_modules, and the CLI entrypoint delegates to its declared runtime dependency. The hook has broader reach across dependencies than this package alone, but the inspected source does not establish malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

The postinstall hook runs during package installation on non-Windows systems.

Impact

The cleanup can remove matching files from installed dependencies, but the inspected source shows no payload download, credential transfer, or unrelated system-file modification.

Mechanism

It invokes find on node_modules and deletes files named ._*; the CLI shim locates and imports @monoes/monomindcli.

AI rationale

Evidence

package.jsonbin/cli.jsnode_modules

Decision evidence

public snapshot

AI called this Clean at 87.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall command is limited to non-Windows systems and deletes files named like AppleDouble metadata inside node_modules.
The manifest declares @monoes/monomindcli as the runtime dependency, and the CLI shim imports that package's located entrypoint.
The README describes the package's dependencies and states that no postinstall script downloads code.

Evidence against

The postinstall hook recursively deletes matching files across node_modules, so it can affect dependencies beyond this package.

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

Lines 1-38json

2 "name": "monomind",

3 "version": "2.17.0",

4 "description": "Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.com/monoes/monomind/blob/main/doc/privacy.md for what leaves your machine and when.",

5 "type": "module",

6 "bin": {

7 "monomind": "./bin/cli.js"

8 },

9 "homepage": "https://github.com/monoes/monomind#readme",

10 "bugs": {

11 "url": "https://github.com/monoes/monomind/issues",

12 "email": "support@monoes.me"

13 },

14 "funding": {

15 "type": "github",

16 "url": "https://github.com/sponsors/nokhodian"

17 },

18 "files": [

19 "bin/**",

20 "README.md",

21 "LICENSE"

22 ],

23 "dependencies": {

24 "@monoes/monomindcli": "2.17.0"

25 },

26 "devDependencies": {

Low

Suspicious Dependency Evidence

The manifest declares @monoes/monomindcli as the runtime dependency, and the CLI shim imports that package's located entrypoint.

package.jsonView on unpkg · L18

27 "@biomejs/biome": "^2.5.8",

28 "@types/better-sqlite3": "^7.6.13",

29 "@types/node": "^20.0.0",

30 "better-sqlite3": ">=12.0.0",

31 "tsx": "^4.21.0",

32 "typescript": "^7.0.2",

33 "vite": ">=8.0.16",

34 "vitest": "^4.1.11",

35 "yaml": "2.8.3",

36 "@monoes/monograph": "1.6.12"

37 },

38 "engines": {

Lines 63-104json

63 "organizations",

64 "autonomous-agents",

65 "hooks",

66 "antigravity",

67 "agy",

68 "gemini"

69 ],

70 "author": {

README.mdView file

Lines 80-122markdown

80```bash

81codex login

82monomind init --codex

83```

85This emits a project-scoped `.codex/config.toml` that registers Monomind's MCP

86server, plus `AGENTS.md` with Codex-specific guidance. Codex must trust the

87project before it loads project-scoped configuration. To run persistent

bin/cli.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * monomind — umbrella entry point.

4 *

5 * This package ships NO code of its own. It is a thin shim that depends on

6 * @monoes/monomindcli (the real CLI) and hands off to its bin. Publishing the

7 * CLI payload from both packages is what caused the ~27MB double-publish and

8 * the two-file lockstep version bump; do not reintroduce it.

9 */

10import { createRequire } from

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

83"scripts": { "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "dev": "cd packages/@monomind/cli && tsx watch src/

Low

Suspicious Lifecycle Evidence

The postinstall command is limited to non-Windows systems and deletes files named like AppleDouble metadata inside node_modules.

package.jsonView on unpkg · L83

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Dependency Evidencepackage.json

LowSuspicious Lifecycle EvidenceREADME.md

LowSuspicious Dependency Evidencebin/cli.js

LowSuspicious Lifecycle EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.17.0.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.17.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:19:57.015Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.