@pikaa-ai/pikaa@0.2.3

PIKAA CLI - AI coding agent that runs locally in your terminal.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis flagged 15 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 3 file(s), 348 KB of source, external domains: api.groupy-hub.store, bun.sh, github.com

Source & flagged code

6 flagged

bin/pikaa.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

3/**

4 * Universal Native Launcher for Pikaa Agent CLI.

5 *

6 * Automatically detects platform (macOS, Linux, Windows) and architecture (arm64, x64).

7 * If the native binary is already present, runs it with 0ms startup time.

8 * If not present (e.g. postinstall script skipped by npm allow-scripts), automatically

9 * downloads the native binary from GitHub Releases to ~/.pikaa/bin/ and executes it.

10 *

11 * Zero external dependencies required. Does NOT require Bun or compilation tools.

12 */

14import { spawnSync } from "node:child_process";

15import { existsSync, chmodSync, mkdirSync, createWriteStream, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L13

16import { fileURLToPath } from "node:url";

17import { dirname, join } from "node:path";

18import { homedir } from "node:os";

19import { pipeline } from "node:stream/promises";

20import https from "node:https";

22const __filename = fileURLToPath(import.meta.url);

23const __dirname = dirname(__filename);

24const rootDir = join(__dirname, "..");

26const platform = process.platform;

27const arch = process.arch;

29let version = "0.2.3";

30try {

31 const pkg = JSON.parse(readFileSync(join(rootDir, "package.json"), "utf8"));

32 version = pkg.version;

33} catch {}

dist/index.jsView file

Lines 27-67javascript

28class ExecutionPolicyError extends GroupyError {

29 constructor(message) {

30 super(message, "EXEC_POLICY_DENIED", false);

31 this.name

bin/groupy.cmdView file

•path = bin/groupy.cmd kind = build_helper sizeBytes = 95 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/groupy.cmdView on unpkg

Source & flagged code

6 flagged · loading source

bin/pikaa.jsView file

13L14: import { spawnSync } from "node:child_process"; L15: import { existsSync, chmodSync, mkdirSync, createWriteStream, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L13

dist/index.jsView file

524const isWindows = process.platform === "win32"; L525: const shellCmd = isWindows ? ["powershell.exe", "-NoProfile", "-Command", command] : ["/bin/sh", "-c", command]; L526: try {

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L524

3938import { randomBytes, createHash } from "crypto"; L3939: import { exec } from "child_process"; L3940: class AuthClient { ... L3945: async directLogin(params) { L3946: const backendUrl = (params.backendUrl || process.env.GROUPY_BACKEND_URL || "https://api.groupy-hub.store").replace(/\/+$/, ""); L3947: const formData = new URLSearchParams({

High

Same File Env Network Execution

Findings

5 High5 Medium5 Low

HighChild Processbin/pikaa.js

HighShelldist/index.js

HighSame File Env Network Executiondist/index.js

HighCredential Redirect Persistencedist/index.js

HighRemote Agent Bridgedist/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperbin/groupy.cmd

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @pikaa-ai/pikaa@0.2.3.

See all versions of @pikaa-ai/pikaa for other recorded verdicts.

Review the evidence and your use of @pikaa-ai/pikaa@0.2.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-30 02:44:43.618Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.