mnemon

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  can delete files.

  PERMISSION_DELETE_FILES

  src/mnemon/cli.py, line 74

  subprocess.run(["streamlit", "run", str(app_path), f"--server.port={port}", "--theme.base=dark", "--client.toolbarMode=minimal"], check=True)

  src/mnemon/downgrade.py, line 183

  subprocess.run(

  src/mnemon/downgrade.py, line 199

  subprocess.run(

  Show more

  src/mnemon/setup.py, line 430

  subprocess.run(

  src/mnemon/setup.py, line 435

  subprocess.run(

  src/mnemon/sync.py, line 56

  result = subprocess.run(cmd, shell=True, capture_output=True, text=True)

  src/mnemon/uninstall.py, line 112

  out = subprocess.run(

  src/mnemon/uninstall.py, line 168

  out = subprocess.run(

  src/mnemon/uninstall.py, line 383

  shutil.rmtree(mdir)

• Install and update

  Serious

  install fetches a script from the network.

  INSTALL_REMOTE_SCRIPT

  .github/workflows/deploy-fly.yml, line 96

  curl -fsSL https://fly.io/install.sh | sh && break

• Network

  Serious

  accepts a host from input, with no fixed list in this file.

  NETWORK_HOST_FROM_INPUT

  scripts/build_standing_set.py, line 49

  per-prompt HTTP fetch (~5s for

  scripts/check_health.py, line 63

  with urllib.request.urlopen(req, timeout=timeout) as resp:

  scripts/promote_stable.sh, line 90

  with urllib.request.urlopen("https://pypi.org/pypi/mnemon-memory/json", timeout=10) as r:

  Show more

  scripts/promote_stable.sh, line 114

  with urllib.request.urlopen("https://pypi.org/pypi/mnemon-memory/json", timeout=10) as r:

  scripts/promote_stable.sh, line 551

  until curl -fsS "https://test.pypi.org/pypi/mnemon-memory/json" 2>/dev/null \

  src/mnemon/doctor.py, line 133

  with urllib.request.urlopen(health_url, timeout=HEALTH_TIMEOUT_SEC) as resp:

  src/mnemon/doctor.py, line 190

  with urllib.request.urlopen(metadata_url, timeout=HEALTH_TIMEOUT_SEC) as resp:

  src/mnemon/setup.py, line 71

  so Fly is awake before the MCP call. Uses ``curl ... || true`` so

  src/mnemon/setup.py, line 93

  "command": f"curl -fs --max-time 35 {health_url} > /dev/null || true",

  src/mnemon/setup.py, line 162

  f"curl -sf -m 2 {health_url} > /dev/null 2>&1 && exit 0; "

  src/mnemon/upgrade.py, line 128

  curl unzip ca-certificates \\

  src/mnemon/upgrade.py, line 129

  && curl -fsSL https://awscli.amazonaws.com/awscli-exe-linux-x86_64.zip -o /tmp/awscli.zip \\

  src/mnemon/upgrade.py, line 133

  && apt-get purge -y curl unzip \\

  src/mnemon/upgrade.py, line 144

  CMD python -c "import urllib.request, sys; sys.exit(0 if urllib.request.urlopen('http://localhost:8080/health', timeout=3).status == 200 else 1)"

  Dockerfile, line 55

  CMD python -c "import urllib.request, sys; sys.exit(0 if urllib.request.urlopen('http://localhost:8080/health', timeout=3).status == 200 else 1)"

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_ENV_READ SECRETS_PATH_DOTENV

  scripts/promote_stable.sh, line 536

  leaks="$(tar tzf "$sdist" | grep -E "(^|/)(\.env|fly\.toml|default\.sqlite)$|(^|/)(private|\.mnemon)/" || true)"

  scripts/promote_stable.sh, line 599

  # Forbidden: private/, .env, vault files, raw fly.toml.

  scripts/promote_stable.sh, line 602

  leaks="$(tar tzf "$sdist" | grep -E "(^|/)(\.env|fly\.toml|default\.sqlite)$|(^|/)(private|\.mnemon)/" || true)"

  Show more

  src/mnemon/auth.py, line 68

  return cls(local_token=os.environ.get("MNEMON_LOCAL_TOKEN") or None)

  src/mnemon/doctor.py, line 78

  from_env = bool(os.environ.get("MNEMON_LOCAL_TOKEN"))

  src/mnemon/doctor.py, line 89

  if os.environ.get("MNEMON_LOCAL_TOKEN"):

  src/mnemon/setup.py, line 352

  prior_token = os.environ.get("MNEMON_LOCAL_TOKEN")

  src/mnemon/upgrade.py, line 931

  prior_token = os.environ.get("MNEMON_LOCAL_TOKEN")

  src/mnemon/hooks/_remote_client.py, line 117

  env = os.environ.get("MNEMON_LOCAL_TOKEN", "").strip()

  .gitignore, line 24

  # Environment / secrets

  .gitignore, line 25

  .env

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Pass

  No encoded or minified payload found.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 1f68b574f5ea. can delete files. install fetches a script from the network. accepts a host from input, with no fixed list in this file. reads a credential or environment file.

Date and source

Date checked: 24 Oct 2026

Read how this letter is chosen