registry / @aspectlylabs/mikka / 0.0.438
@aspectlylabs/mikka@0.0.438
Local Mikka daemon: runs agents through the user's own CLIs
AI Security Review
scanned 6h ago · by lpm-firewall-aiThe reviewed credential flow forwards model requests through a broker to the configured HTTPS provider, and the flagged process execution runs the configured agent CLI. I found no evidence of unrelated collection or unauthorized actions.
Static reason
One or more suspicious static signals were detected.
Trigger
The daemon starts when explicitly invoked; agent processes start as part of user-authorized runs.
Impact
No malicious credential collection, unrelated data transfer, or unauthorized account action was identified.
Mechanism
The broker forwards model requests to a validated HTTPS provider URL, while the native container routes model traffic through the local broker socket.
AI rationale
The reviewed credential flow forwards model requests through a broker to the configured HTTPS provider, and the flagged process execution runs the configured agent CLI. I found no evidence of unrelated collection or unauthorized actions.
Network endpoints3
app.aspectlylabs.comapi.anthropic.comapi.openai.com
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a daemon CLI and library entry points, consistent with the package’s stated purpose of running agents through users’ CLIs.
- The CLI’s default production service is https://app.aspectlylabs.com/mikka.
- Provider credentials require an HTTPS base URL without embedded username or password.
- The API-key broker sends the credential to that configured provider URL, or the protocol’s default provider endpoint, and rejects redirects.
- The native container proxies model requests through a mounted broker socket; the flagged child process runs the configured CLI and connects its standard streams to the user’s process.
Evidence against
- The flagged shell and process execution support the package’s agent-running function.
- Network requests carry device or run traffic to the configured Mikka service and model provider endpoints.
- No install lifecycle scripts are declared in the package manifest.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystem
Source & flagged code
6 flaggedgithub-credentials.mjsView file
7import { randomUUID } from 'node:crypto'
L8: import { spawn } from 'node:child_process'
L9: import { pathToFileURL } from 'node:url'
High
Child Process
Package source references child process execution.
github-credentials.mjsView on unpkg · L7mikka.jsView file
4751ai: "7.0.142",
L4752: execa: "10.1.1",
L4753: pino: "10.4.0",
High
6760assertSafeId("run id", runId);
L6761: const common = resolve4(await worktreeGitDir(repoPath, worktree), "..", "..");
L6762: if (basename(common) !== ".git") throw new Error(`${repoPath} is not a standard clone`);
...
L6771: }
L6772: async function pinnedGit(repoPath, worktree, env = process.env) {
L6773: const gitDir = await worktreeGitDir(repoPath, worktree);
L6774: const workTree = realpathSync4(worktree);
L6775: return (args, extra, options) => execa3("git", [...SAFE_GIT, ...args], {
L6776: cwd: workTree,
Findings
5 High2 Medium5 Low
HighChild Processgithub-credentials.mjs
HighShellmikka.js
HighSame File Env Network Executionmikka.js
HighCredential Redirect Persistencemain.js
HighCommand Output Exfiltrationagents/native-container.mjs
MediumNetwork
MediumEnvironment Vars
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowCopyleft License
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @aspectlylabs/mikka@0.0.438.
See all versions of @aspectlylabs/mikka for other recorded verdicts.
- Review the evidence and your use of @aspectlylabs/mikka@0.0.438 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.