registry / @aspectlylabs/mikka / 0.0.401
@aspectlylabs/mikka@0.0.401
Local Mikka daemon: runs agents through the user's own CLIs
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe flagged credential path is a local broker that forwards supported requests to the configured HTTPS provider or the standard Anthropic/OpenAI API. The reviewed runner filters credential-like environment variables and avoids publishing CLI stderr; no malicious behavior was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
A user starts a daemon or agent run; credential forwarding occurs for a model request during a credential-backed run.
Impact
No malicious impact identified in the reviewed paths.
Mechanism
A local broker forwards supported model API requests to the configured HTTPS provider or the standard Anthropic/OpenAI endpoint. The native runner filters credential-like environment variable names and discards CLI stderr.
AI rationale
The flagged credential path is a local broker that forwards supported requests to the configured HTTPS provider or the standard Anthropic/OpenAI API. The reviewed runner filters credential-like environment variables and avoids publishing CLI stderr; no malicious behavior was identified.
Network endpoints3
api.anthropic.comapi.openai.com/v1user-configured HTTPS provider base URL
Decision evidence
public snapshotAI called this Clean at 92.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The API-key broker accepts a configured provider or the standard Anthropic/OpenAI endpoint, and requires HTTPS.
- The broker forwards credentials with requests to the selected model endpoint; it does not redirect requests to a separate collector.
- The native runner rejects environment entries named like cloud, model, or other secret credentials.
- The native runner discards CLI stderr because diagnostics can contain model data.
Evidence against
- The package runs agent CLIs and therefore supports process execution and model network requests as part of its stated purpose.
- The package exposes a CLI and library entry points, but its manifest declares no install lifecycle scripts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
6 flaggedgithub-credentials.mjsView file
7import { randomUUID } from 'node:crypto'
L8: import { spawn } from 'node:child_process'
L9: import { pathToFileURL } from 'node:url'
High
Child Process
Package source references child process execution.
github-credentials.mjsView on unpkg · L7mikka.jsView file
4637ai: "7.0.142",
L4638: execa: "10.1.1",
L4639: pino: "10.4.0",
High
6566assertSafeId("run id", runId);
L6567: const common = resolve4(await worktreeGitDir(repoPath, worktree), "..", "..");
L6568: if (basename(common) !== ".git") throw new Error(`${repoPath} is not a standard clone`);
...
L6577: }
L6578: async function pinnedGit(repoPath, worktree, env = process.env) {
L6579: const gitDir = await worktreeGitDir(repoPath, worktree);
L6580: const workTree = realpathSync4(worktree);
L6581: return (args, extra, options) => execa3("git", [...SAFE_GIT, ...args], {
L6582: cwd: workTree,
Findings
5 High2 Medium5 Low
HighChild Processgithub-credentials.mjs
HighShellmikka.js
HighSame File Env Network Executionmikka.js
HighCredential Redirect Persistencemain.js
HighCommand Output Exfiltrationagents/native-container.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
LowAi Review Evidencemain.js
Affected versions and remediation
This report applies to @aspectlylabs/mikka@0.0.401.
See all versions of @aspectlylabs/mikka for other recorded verdicts.
- Review the evidence and your use of @aspectlylabs/mikka@0.0.401 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.