registry  /  youmindag  /  2.2.0

youmindag@2.2.0

🧠 Inyecta inteligencia de contexto a cualquier proyecto. Una línea y tu AI coding tool entiende toda la arquitectura.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
User runs `npx youmindag` in a project directory.
Impact
Changes an AI-agent control surface and runs package-manager/Graphify commands in the selected project.
Mechanism
Explicit CLI setup of project-local AI-agent configuration and plugin hooks.
Rationale
Source inspection does not establish malicious behavior, but it confirms explicit-user-command mutation of a project AI-agent extension surface plus runtime dependency installation. This fits a warn-level agent-capability risk rather than a publish block.
Evidence
package.jsonbin/run.mjstemplate/.opencode/plugins/context-loader.jstemplate/.opencode/opencode.jsontemplate/AGENTS.md.opencode/plugins/context-loader.js.opencode/opencode.jsonAGENTS.md.youmindag/plugin-state.jsonscripts/

Decision evidence

public snapshot
AI called this Suspicious at 92.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
  • `bin/run.mjs` copies a packaged OpenCode plugin into the invoking project’s `.opencode/`.
  • `bin/run.mjs` overwrites `.opencode/opencode.json` and `AGENTS.md` after explicit `npx youmindag` use.
  • `template/.opencode/plugins/context-loader.js` hooks agent tool events and injects command-prefix reminders while writing `.youmindag/plugin-state.json`.
  • The CLI installs and executes `@sentropic/graphify` through `npm install` and `npx graphify`.
Evidence against
  • `package.json` has no `preinstall`, `install`, or `postinstall` lifecycle hook.
  • No package source calls HTTP/network APIs or contains a concrete exfiltration endpoint.
  • The agent-control writes occur only in the user-invoked CLI path, not at install or import time.
  • Inspected plugin behavior is project-local context/checkpoint automation rather than credential harvesting or payload delivery.
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystemShell
Supply chain
HighEntropyStringsUrlStrings
ManifestNo manifest risk signals triggered.
scanned 11 file(s), 129 KB of source, external domains: xxx.supabase.co

Source & flagged code

3 flagged · loading source
bin/run.mjsView file
•matchType = previous_version_dangerous_delta matchedPackage = youmindag@1.1.0 matchedIdentity = npm:eW91bWluZGFn:1.1.0 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/run.mjsView on unpkg
8import { fileURLToPath } from 'url' L9: import { execSync } from 'child_process' L10: import { spawn } from 'child_process'
High
Child Process

Package source references child process execution.

bin/run.mjsView on unpkg · L8
2// YouMindAG — Inyecta inteligencia de contexto a cualquier proyecto. L3: // Uso: npx youmindag L4: // Ejecutar DENTRO del directorio del proyecto destino. ... L8: import { fileURLToPath } from 'url' L9: import { execSync } from 'child_process' L10: import { spawn } from 'child_process'
High
Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/run.mjsView on unpkg · L2

Findings

1 Critical3 High2 Medium3 Low
CriticalPrevious Version Dangerous Deltabin/run.mjs
HighChild Processbin/run.mjs
HighShell
HighRuntime Package Installbin/run.mjs
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings