What is the Neural Link?

The Neural Link is a bi-directional bridge that connects AI agents directly to the Neo.mjs runtime. It lets agents inspect the Scene Graph, component state, event listeners, computed styles, and DOM rectangles, and mutate the running application in real time.

Why is Neo.mjs called an Application Engine instead of a framework?

Neo.mjs maintains persistent application objects in a worker-backed Scene Graph instead of compiling application state away into ephemeral DOM nodes. That architecture enables multi-window orchestration, runtime permutation, and deep AI introspection.

What is Context Engineering?

Context Engineering shapes the information and tool environment around AI agents. Neo.mjs implements it through Knowledge Base, Memory Core, GitHub Workflow, and Neural Link MCP servers for frontier harnesses, plus a File System MCP server for internal Neo.ai.Agent local loops.

What is the Neo.mjs Agent OS?

The Neo.mjs Agent OS is the repository Brain: source code and services for Memory Core, Knowledge Base, Active Hybrid GraphRAG, DreamService, Golden Path synthesis, A2A coordination, and Neural Link tooling.

Neo.mjs - Self-Evolving Software Organism

Frontmatter

title	Add SafeSkill security badge (20/100 — Blocked)
author	OyaAIProd
state	Closed
createdAt	Jun 3, 2026, 4:08 AM
updatedAt	Jun 3, 2026, 4:10 AM
closedAt	Jun 3, 2026, 4:10 AM
mergedAt
branches	`dev` ← `safeskill-scan-1780452483760`
url	https://github.com/neomjs/neo/pull/12410

Closed

OyaAIProd commented on Jun 3, 2026, 4:08 AM

🔴 SafeSkill Security Scan Results

Metric	Value
Overall Score	20/100 (Blocked)
Code Score	50/100
Content Score	38/100
Findings	12736 findings detected (338 critical)
Taint Flows	148
Files Scanned	1556
Scan Duration	89.7s

Note: This package is an MCP server — child_process, filesystem, and environment access are expected capabilities for tool servers and are excluded from scoring and top findings.

Top Findings

🔴 critical: Dynamic bracket notation access on globalThis (obfuscation technique) (src/main/addon/AmCharts.mjs:151)
🔴 critical: Very long single-line expression (12179 chars) — possibly minified or obfuscated code (docs/resources/lib/highlight/highlight.pack.js:2)
🔴 critical: Very long single-line expression (12179 chars) — possibly minified or obfuscated code (examples/component/toast/resources/lib/highlight/highlight.pack.js:2)
🔴 critical: Dynamic bracket notation access on window (obfuscation technique) (src/main/addon/WindowPosition.mjs:93)
🔴 critical: Detected instruction-override attempt: "System :" (buildScripts/build/all.mjs:48:5)

View full report on SafeSkill

About SafeSkill

SafeSkill is a free, open-source security scanner for AI tools, MCP servers, and Claude Code skills. We scan for code exploits, prompt injection, and data exfiltration risks.

False positive? We take accuracy seriously. If any finding above is incorrect, please open an issue and we will fix it immediately.

GitHub | Website | Docs
Built by Oya.ai -- AI Employees Builder

tobiu commented on Jun 3, 2026, 4:10 AM

lol, no thanks.