@pikaa-ai/pikaa@0.3.0

⚠ Under review

PIKAA CLI - AI coding agent that runs locally in your terminal.

Static Scan Results

scanned 2mo ago · by rust-scanner

Static analysis completed at 72.0% confidence. No malicious behavior was detected; 17 low-signal pattern(s) were surfaced and cleared.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 3 file(s), 676 KB of source, external domains: 127.0.0.1, api.github.com, api.groupy-hub.store, api.search.brave.com, api.tavily.com, bun.sh, crates.io, docs.rs, github.com, html.duckduckgo.com, pkg.go.dev, pypi.org, react.dev, registry.npmjs.org

Source & flagged code

8 flagged

bin/pikaa.jsView file

Lines 1-33javascript

1#!/usr/bin/env node

3/**

4 * Universal Native Launcher for Pikaa Agent CLI.

5 *

6 * Automatically detects platform (macOS, Linux, Windows) and architecture (arm64, x64).

7 * If the native binary is already present, runs it with 0ms startup time.

8 * If not present (e.g. postinstall script skipped by npm allow-scripts), automatically

9 * downloads the native binary from GitHub Releases to ~/.pikaa/bin/ and executes it.

10 *

11 * Zero external dependencies required. Does NOT require Bun or compilation tools.

12 */

14import { spawnSync } from "node:child_process";

15import { existsSync, chmodSync, mkdirSync, createWriteStream, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L13

16import { fileURLToPath } from "node:url";

17import { dirname, join } from "node:path";

18import { homedir } from "node:os";

19import { pipeline } from "node:stream/promises";

20import https from "node:https";

22const __filename = fileURLToPath(import.meta.url);

23const __dirname = dirname(__filename);

24const rootDir = join(__dirname, "..");

26const platform = process.platform;

27const arch = process.arch;

29let version = "0.2.3";

30try {

31 const pkg = JSON.parse(readFileSync(join(rootDir, "package.json"), "utf8"));

32 version = pkg.version;

33} catch {}

dist/index.jsView file

Lines 142-182javascript

142 } catch (x) {

143 return "<...>";

144 }

145 }

146 function getOwner() {

147 var dispatcher = ReactSharedInternals.A

bin/groupy.cmdView file

•path = bin/groupy.cmd kind = build_helper sizeBytes = 95 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bin/groupy.cmdView on unpkg

Source & flagged code

8 flagged · loading source

bin/pikaa.jsView file

13L14: import { spawnSync } from "node:child_process"; L15: import { existsSync, chmodSync, mkdirSync, createWriteStream, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/pikaa.jsView on unpkg · L13

dist/index.jsView file

2151const isWindows = process.platform === "win32"; L2152: const baseCmd = isWindows ? ["cmd.exe", "/d", "/s", "/c", command] : ["/bin/sh", "-c", command]; L2153: const sandboxProfile = globalKernelSandbox.buildDefaultProfile(ctx.cwd);

High

Shell

Package source references shell execution.

dist/index.jsView on unpkg · L2151

9117import { randomBytes, createHash } from "crypto"; L9118: import { exec } from "child_process"; L9119: class AuthClient { ... L9124: async directLogin(params) { L9125: const backendUrl = (params.backendUrl || process.env.GROUPY_BACKEND_URL || "https://api.groupy-hub.store").replace(/\/+$/, ""); L9126: const formData = new URLSearchParams({

High

Findings

6 High5 Medium6 Low

HighChild Processbin/pikaa.js

HighShelldist/index.js

HighSame File Env Network Executiondist/index.js

HighCredential Redirect Persistencedist/index.js

HighCloud Metadata Accessdist/index.js

HighRemote Agent Bridgedist/index.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperbin/groupy.cmd

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

LowNon Install Lifecycle Scripts

LowScripts Present

LowEvaldist/index.js

LowFilesystem

Affected versions and remediation

This report applies to @pikaa-ai/pikaa@0.3.0.

See all versions of @pikaa-ai/pikaa for other recorded verdicts.

Review the evidence and your use of @pikaa-ai/pikaa@0.3.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-31 19:41:21.375Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.