registry / @aspectlylabs/mikka / 0.0.313
@aspectlylabs/mikka@0.0.313
Local Mikka daemon: runs agents through the user's own CLIs
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged execution and network behavior fits a daemon that runs agents through local CLIs. The inspected credential flow uses official default endpoints or a configured HTTPS provider and showed no fixed unofficial gateway, persistence of a redirection, or install-time behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
A model run starts with a credential and provider configuration.
Impact
No malicious impact identified in the inspected source.
Mechanism
The broker sends requests to the default Anthropic or OpenAI endpoint, or the configured HTTPS provider URL; redirects are disabled.
AI rationale
The flagged execution and network behavior fits a daemon that runs agents through local CLIs. The inspected credential flow uses official default endpoints or a configured HTTPS provider and showed no fixed unofficial gateway, persistence of a redirection, or install-time behavior.
Network endpoints2
api.anthropic.comapi.openai.com
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a local daemon that runs agents through the user’s CLIs and declares no lifecycle scripts.
- Provider credentials are checked for an HTTPS URL without embedded username or password.
- The API broker defaults to Anthropic and OpenAI endpoints, or uses the configured provider URL, and forwards the key to that endpoint with redirects disabled.
- Credential forwarding is part of starting a model run; no fixed unofficial gateway or automatic credential redirection was identified.
Evidence against
- The daemon uses child processes, network access, and filesystem operations as part of running agents and managing run state.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
CopyleftLicense
Source & flagged code
6 flaggedgithub-credentials.mjsView file
4import { randomUUID } from 'node:crypto'
L5: import { spawn } from 'node:child_process'
L6: import { pathToFileURL } from 'node:url'
High
Child Process
Package source references child process execution.
github-credentials.mjsView on unpkg · L4mikka.jsView file
4563ai: "7.0.142",
L4564: execa: "10.1.1",
L4565: pino: "10.4.0",
High
6343assertSafeId("run id", runId);
L6344: const common = resolve4(await worktreeGitDir(repoPath, worktree), "..", "..");
L6345: if (basename(common) !== ".git") throw new Error(`${repoPath} is not a standard clone`);
...
L6354: }
L6355: async function pinnedGit(repoPath, worktree, env = process.env) {
L6356: const gitDir = await worktreeGitDir(repoPath, worktree);
L6357: const workTree = realpathSync4(worktree);
L6358: return (args, extra, options) => execa3("git", [...SAFE_GIT, ...args], {
L6359: cwd: workTree,
Findings
5 High2 Medium5 Low
HighChild Processgithub-credentials.mjs
HighShellmikka.js
HighSame File Env Network Executionmikka.js
HighCredential Redirect Persistencemain.js
HighCommand Output Exfiltrationagents/native-container.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @aspectlylabs/mikka@0.0.313.
See all versions of @aspectlylabs/mikka for other recorded verdicts.
- Review the evidence and your use of @aspectlylabs/mikka@0.0.313 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.