registry / monomind / 2.20.0

monomind@2.20.0

Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.c

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The inspected postinstall hook performs a narrowly scoped metadata-file cleanup, and the shipped CLI shim delegates to its declared companion package. The README contains ordinary product and security disclosures; the inspected source shows no concrete attack behavior or review-directed instruction.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation activates the postinstall cleanup; running the `monomind` command activates the CLI shim.

Impact

No confirmed attack effect was established from the inspected source.

Mechanism

The cleanup is limited by filename pattern and directory. The shim searches Node module paths for `@monoes/monomindcli` and imports its CLI entrypoint.

AI rationale

Evidence

package.jsonbin/cli.jsnode_modules/._*

Decision evidence

public snapshot

AI called this Clean at 88.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

The postinstall hook removes only files matching `._*` under `node_modules` on non-Windows platforms.
The manifest ships `bin/**`, README.md and LICENSE, and declares `@monoes/monomindcli` 2.20.0 as its runtime dependency.
The CLI shim locates the companion package's CLI in Node's module paths and imports the located file.
The README contains ordinary product and security disclosures, including that the product makes some outbound network calls.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

9 flagged

package.jsonView file

Lines 1-38json

2 "name": "monomind",

3 "version": "2.20.0",

4 "description": "Open-source CLI extension for Claude Code, OpenCode, Antigravity, Kimi Code, and Codex. Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed. See https://github.com/monoes/monomind/blob/main/doc/privacy.md for what leaves your machine and when.",

5 "type": "module",

6 "bin": {

7 "monomind": "./bin/cli.js"

8 },

9 "homepage": "https://github.com/monoes/monomind#readme",

10 "bugs": {

11 "url": "https://github.com/monoes/monomind/issues",

12 "email": "support@monoes.me"

13 },

14 "funding": {

15 "type": "github",

16 "url": "https://github.com/sponsors/nokhodian"

17 },

18 "files": [

19 "bin/**",

20 "README.md",

21 "LICENSE"

22 ],

23 "dependencies": {

24 "@monoes/monomindcli": "2.20.0"

25 },

Low

Suspicious Dependency Evidence

The manifest ships `bin/**`, README.md and LICENSE, and declares `@monoes/monomindcli` 2.20.0 as its runtime dependency.

package.jsonView on unpkg · L18

26 "devDependencies": {

27 "@biomejs/biome": "^2.5.8",

28 "@types/better-sqlite3": "^7.6.13",

29 "@types/node": "^20.0.0",

30 "better-sqlite3": ">=12.0.0",

31 "tsx": "^4.21.0",

32 "typescript": "^7.0.2",

33 "vite": ">=8.0.16",

34 "vitest": "^4.1.11",

35 "yaml": "2.8.3",

36 "@monoes/monograph": "1.6.15"

37 },

38 "engines": {

Lines 64-104json

64 "autonomous-agents",

65 "hooks",

66 "antigravity",

67 "agy",

68 "gemini"

69 ],

70 "author": {

71 "name": "nokhodian",

README.mdView file

Lines 78-118markdown

79<details>

80<summary><strong>Using Codex?</strong></summary>

82```bash

83codex login

84monomind init --codex

85```

87This emits a project-scoped `.codex/config.toml` that registers Monomind's MCP

bin/cli.jsView file

Lines 1-63javascript

1#!/usr/bin/env node

2/**

3 * monomind — umbrella entry point.

4 *

5 * This package ships NO code of its own. It is a thin shim that depends on

6 * @monoes/monomindcli (the real CLI) and hands off to its bin. Publishing the

7 * CLI payload from both packages is what caused the ~27MB double-publish and

8 * the two-file lockstep version bump; do not reintroduce it.

9 */

10import { createRequire } from

Source & flagged code

9 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

84"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"", "dev": "cd packages/@monomind/cli && tsx watch src/index

Low

Suspicious Lifecycle Evidence

The postinstall hook removes only files matching `._*` under `node_modules` on non-Windows platforms.

package.jsonView on unpkg · L84

Findings

1 Critical2 High2 Medium7 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowSuspicious Dependency Evidencepackage.json

LowAi Review Evidencebin/cli.js

LowAi Review EvidenceREADME.md

Affected versions and remediation

This report applies to monomind@2.20.0.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.20.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:20:48.127Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.