opik@2.2.124
Opik TypeScript and JavaScript SDK
AI Security Review
scanned 8d ago · by lpm-firewall-aiThe scanner’s execution and network indicators resolve to the user-invoked CLI, which checks for uv and hands off to the Opik tool while sending package analytics. The SDK uses configured Opik credentials and service URLs; the inspected source does not establish a malicious attack surface.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
A user runs the Opik CLI or uses the SDK API.
Impact
The CLI analytics includes a hashed host and user identifier and command or platform metadata. No unrelated credential transfer or command-output collection was identified.
Mechanism
The CLI posts event metadata to Comet analytics by default; the SDK reads its API key and URL from Opik configuration.
AI rationale
The scanner’s execution and network indicators resolve to the user-invoked CLI, which checks for uv and hands off to the Opik tool while sending package analytics. The SDK uses configured Opik credentials and service URLs; the inspected source does not establish a malicious attack surface.
Evidence
dist/cli.jsdist/index.cjsdist/chunk-A3M7EUJF.js
Network endpoints1
stats.comet.com/notify/event/
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest maps the package to SDK entrypoints and a CLI. Its listed scripts are build, lint, typecheck, formatting, and test tasks; there is no install lifecycle hook.
- The SDK bundles read OPIK_API_KEY and OPIK_URL_OVERRIDE as client configuration, consistent with sending authenticated requests to the configured Opik service.
- The CLI sends Comet analytics when invoked. Its events contain a hashed host and user identifier plus command and platform metadata; analytics can be disabled, and the source shows no command output in the event fields.
- The inspected dependency manifests and entry files map to terminal styling, INI parsing, and an Anthropic provider; no attack behavior was identified in those excerpts.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/cli.jsView file
1Source sends the broad process environment to a literal external destination.
L1: #!/usr/bin/env node
L2: import {spawnSync}from'child_process';import {chalkStderr}from'chalk';import {randomBytes,createHash}from'crypto';import U,{accessSync,constants}from'fs';import _ from'os';import i...
L3: ${chalkStderr.red("\u2717")} ${chalkStderr.bold("The Opik MCP configuration requires uv, which is not installed on this machine.")}
Critical
Hardcoded Runtime Data Exfiltration
Source sends credentials or rich application records to a package-controlled external receiver enabled by default.
dist/cli.jsView on unpkg · L11#!/usr/bin/env node
L2: import {spawnSync}from'child_process';import {chalkStderr}from'chalk';import {randomBytes,createHash}from'crypto';import U,{accessSync,constants}from'fs';import _ from'os';import i...
L3: ${chalkStderr.red("\u2717")} ${chalkStderr.bold("The Opik MCP configuration requires uv, which is not installed on this machine.")}
High
1#!/usr/bin/env node
L2: import {spawnSync}from'child_process';import {chalkStderr}from'chalk';import {randomBytes,createHash}from'crypto';import U,{accessSync,constants}from'fs';import _ from'os';import i...
L3: ${chalkStderr.red("\u2717")} ${chalkStderr.bold("The Opik MCP configuration requires uv, which is not installed on this machine.")}
Findings
1 Critical5 High3 Medium4 Low
CriticalHardcoded Runtime Data Exfiltrationdist/cli.js
HighChild Processdist/cli.js
HighSame File Env Network Executiondist/cli.js
HighCommand Output Exfiltrationdist/cli.js
HighSandbox Evasion Gated Capabilitydist/cli.js
HighTrigger Reachable Command Output Exfiltrationdist/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to opik@2.2.124.
See all versions of opik for other recorded verdicts.
- Review the evidence and your use of opik@2.2.124 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.