opik@2.2.103
Opik TypeScript and JavaScript SDK
AI Security Review
scanned 20d ago · by lpm-firewall-aiSource inspection found no install-time behavior or concrete attack surface. The flagged CLI execution is an invoked uv handoff, and its default telemetry goes to Comet's stats endpoint; the SDK reads Opik credentials and URL from caller configuration.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
A user invokes the Opik CLI.
Impact
No credential disclosure or unrelated account action was identified in the inspected source.
Mechanism
The CLI reports command and runtime metadata; the SDK uses caller-provided Opik configuration for its API key and URL.
AI rationale
Source inspection found no install-time behavior or concrete attack surface. The flagged CLI execution is an invoked uv handoff, and its default telemetry goes to Comet's stats endpoint; the SDK reads Opik credentials and URL from caller configuration.
Evidence
dist/cli.jsdist/index.cjs
Network endpoints1
stats.comet.com/notify/event/
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json exposes the SDK bundles and lists build, lint, typecheck, and test scripts; it has no install lifecycle hook.
- CLI telemetry is enabled by default but can be disabled with OPIK_ANALYTICS_ENABLE.
- The invoked CLI sends command and runtime metadata to the Comet stats endpoint; the endpoint is package-aligned.
- The SDK reads its API key and URL from caller configuration or environment variables.
- The CLI checks for uv and invokes it to run the Opik tool when the CLI is used.
- The published entrypoint bundles the SDK and its type declarations.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
7 flaggeddist/cli.jsView file
1Source sends the broad process environment to a literal external destination.
L1: #!/usr/bin/env node
L2: import {spawnSync}from'child_process';import {chalkStderr}from'chalk';import {randomBytes,createHash}from'crypto';import U,{accessSync,constants}from'fs';import _ from'os';import i...
L3: ${chalkStderr.red("\u2717")} ${chalkStderr.bold("The Opik MCP configuration requires uv, which is not installed on this machine.")}
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cli.jsView on unpkg · L1•matchType = previous_version_dangerous_delta
matchedPackage = opik@2.2.102
matchedIdentity = npm:b3Bpaw:2.2.102
similarity = 0.571
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/cli.jsView on unpkg1#!/usr/bin/env node
L2: import {spawnSync}from'child_process';import {chalkStderr}from'chalk';import {randomBytes,createHash}from'crypto';import U,{accessSync,constants}from'fs';import _ from'os';import i...
L3: ${chalkStderr.red("\u2717")} ${chalkStderr.bold("The Opik MCP configuration requires uv, which is not installed on this machine.")}
Findings
2 Critical5 High3 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/cli.js
CriticalPrevious Version Dangerous Deltadist/cli.js
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to opik@2.2.103.
See all versions of opik for other recorded verdicts.
- Review the evidence and your use of opik@2.2.103 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.