registry / monomind / 2.9.27

monomind@2.9.27

Open-source CLI extension for Claude Code and Antigravity (agy). Adds an MCP server with a codebase knowledge graph, persistent memory, multi-agent coordination, and reusable slash commands. Apache 2.0 licensed, runs locally, no data leaves your machine.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

The lifecycle hook performs a narrowly patterned dependency-tree cleanup, and the CLI shim delegates to its declared dependency. The README excerpt is ordinary product description, with no reviewer manipulation or concrete attack behavior established by the inspected source.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Package installation on a non-Windows system.

Impact

The cleanup removes matching files from the dependency tree. The inspected source does not establish credential access, network transfer, or broader attack behavior.

Mechanism

The postinstall command runs `find` over `node_modules` and deletes matching paths; the CLI entrypoint locates and imports the declared CLI dependency.

AI rationale

Evidence

package.json

Decision evidence

public snapshot

AI called this Clean at 91.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json defines a non-Windows postinstall cleanup that removes files named `._*` under `node_modules`.
bin/cli.js resolves and imports the declared `@monoes/monomindcli` entrypoint.
README.md describes the package as an MCP server; the inspected text contains no review-directed instruction.

Evidence against

Behavioral surface

Source

DynamicRequireFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 2.04 KB of source

Source & flagged code

7 flagged

package.jsonView file

Lines 80-120json

80 "autonomous-agents",

81 "hooks",

82 "antigravity",

83 "agy",

84 "gemini"

85 ],

86 "author": {

87 "name": "nokhodian",

88 "email": "nokhodian@gmail.com",

89 "url": "https://github.com/nokhodian"

90 },

91 "license": "Apache-2.0",

92 "publishConfig": {

93 "access": "public",

94 "tag": "latest"

95 },

96 "volta": {

97 "node": "22.23.2"

98 },

99 "scripts": {

100 "postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg · L100

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L100

101 "dev": "cd packages/@monomind/cli && tsx watch src/index.ts",

Low

Suspicious Lifecycle Evidence

package.json defines a non-Windows postinstall cleanup that removes files named `._*` under `node_modules`.

package.jsonView on unpkg · L100

102 "build": "tsc",

103 "build:ts": "cd packages/@monomind/cli && npm run build",

104 "check:versions": "node scripts/check-publish-versions.mjs",

105 "docs:counts": "node scripts/generate-doc-counts.mjs",

106 "docs:counts:check": "node scripts/generate-doc-counts.mjs --check",

107 "test": "vitest",

108 "test:all": "vitest --config vitest.workspace.ts",

109 "test:ui": "vitest --ui",

110 "test:security": "vitest run tests/security/",

111 "test:semantic-eval": "node --test tests/memory/cognee-port-eval.test.mjs",

112 "test:coverage": "vitest run --coverage",

113 "lint": "biome check",

114 "lint:fix": "biome check --write",

115 "format": "biome format --write",

116 "security:audit": "npm audit --audit-level high",

117 "security:fix": "npm audit fix",

118 "security:test": "npm run test:security",

119 "v1:domains": "npm run build:domains",

120 "v1:swarm": "npm run start:swarm",

README.mdView file

Lines 1-25markdown

1<p align="center">

2 <img src="https://raw.githubusercontent.com/monoes/monomind/main/assets/banner.png" alt="Monomind" width="600" />

3</p>

5<h1 align="center">Monomind</h1>

7<p align="center">

8 <strong>An open-source MCP server that extends Claude Code with a codebase knowledge graph, persistent memory, and multi-agent coordination.</strong><br/>

Low

Ai Review Evidence

README.md describes the package as an MCP server; the inspected text contains no review-directed instruction.

README.mdView on unpkg · L5

9 Apache 2.0 licensed · Your code and memory stay local — see [

bin/cli.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * monomind — umbrella entry point.

4 *

5 * This package ships NO code of its own. It is a thin shim that depends on

6 * @monoes/monomindcli (the real CLI) and hands off to its bin. Publishing the

7 * CLI payload from both packages is what caused the ~27MB double-publish and

8 * the two-file lockstep version bump; do not reintroduce it.

9 */

10import { createRequire } from

Source & flagged code

7 flagged · loading source

package.jsonView file

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

Critical

Red Install Lifecycle Script

Install-time lifecycle script matches a deterministic static-gate block pattern.

package.jsonView on unpkg

•scripts.postinstall = node -e "if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

100"postinstall": "node -e \"if(process.platform!=='win32'){try{require('child_process').execSync('find node_modules -name ._* -delete 2>/dev/null',{stdio:'ignore'})}catch{}}\"",

Low

Suspicious Lifecycle Evidence

package.json defines a non-Windows postinstall cleanup that removes files named `._*` under `node_modules`.

package.jsonView on unpkg · L100

Findings

1 Critical2 High2 Medium5 Low

CriticalRed Install Lifecycle Scriptpackage.json

HighInstall Time Lifecycle Scriptspackage.json

HighAi Reviewer ManipulationREADME.md

MediumDynamic Requirebin/cli.js

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review EvidenceREADME.md

LowAi Review Evidencebin/cli.js

Affected versions and remediation

This report applies to monomind@2.9.27.

See all versions of monomind for other recorded verdicts.

Review the evidence and your use of monomind@2.9.27 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-20 07:16:25.491Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.