registry / @aspectlylabs/mikka / 0.0.333
@aspectlylabs/mikka@0.0.333
Local Mikka daemon: runs agents through the user's own CLIs
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package's process execution and network access are consistent with running local agents and connecting to the configured services. The reviewed credential flow is constrained to provider requests, and the hosted bootstrap rejects common secret-bearing environment variables.
Static reason
One or more suspicious static signals were detected.
Trigger
The user invokes the mikka command or uses an exported package entry point.
Impact
Requests and credentials are used for the configured model provider and daemon features; no unrelated collection was identified.
Mechanism
The daemon connects to its service and routes model requests through a broker that limits provider paths and disables redirects.
AI rationale
The package's process execution and network access are consistent with running local agents and connecting to the configured services. The reviewed credential flow is constrained to provider requests, and the hosted bootstrap rejects common secret-bearing environment variables.
Network endpoints3
api.anthropic.comapi.openai.comapp.aspectlylabs.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a local daemon that runs agents through the user's own CLIs and exposes a mikka command.
- The model API key broker restricts requests to approved provider paths and sends the key to the configured provider origin with redirects disabled.
- The hosted-run bootstrap rejects environment variables named for common secrets and credentials.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
CopyleftLicense
Source & flagged code
6 flaggedgithub-credentials.mjsView file
7import { randomUUID } from 'node:crypto'
L8: import { spawn } from 'node:child_process'
L9: import { pathToFileURL } from 'node:url'
High
Child Process
Package source references child process execution.
github-credentials.mjsView on unpkg · L7mikka.jsView file
4574ai: "7.0.142",
L4575: execa: "10.1.1",
L4576: pino: "10.4.0",
High
6356assertSafeId("run id", runId);
L6357: const common = resolve4(await worktreeGitDir(repoPath, worktree), "..", "..");
L6358: if (basename(common) !== ".git") throw new Error(`${repoPath} is not a standard clone`);
...
L6367: }
L6368: async function pinnedGit(repoPath, worktree, env = process.env) {
L6369: const gitDir = await worktreeGitDir(repoPath, worktree);
L6370: const workTree = realpathSync4(worktree);
L6371: return (args, extra, options) => execa3("git", [...SAFE_GIT, ...args], {
L6372: cwd: workTree,
Findings
5 High2 Medium5 Low
HighChild Processgithub-credentials.mjs
HighShellmikka.js
HighSame File Env Network Executionmikka.js
HighCredential Redirect Persistencemain.js
HighCommand Output Exfiltrationagents/native-container.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @aspectlylabs/mikka@0.0.333.
See all versions of @aspectlylabs/mikka for other recorded verdicts.
- Review the evidence and your use of @aspectlylabs/mikka@0.0.333 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.