aikito

What was checked

Plain notes from the hygiene checks.

• Permissions

  Concern

  requests shell access. No manifest field names shell or command execution. can delete files.

  PERMISSION_SHELL_UNDECLARED PERMISSION_DELETE_FILES

  src/aikito/add.py, line 262

  shutil.rmtree(self.target_dir, ignore_errors=True)

  src/aikito/add.py, line 270

  shutil.rmtree(self.temp_root, ignore_errors=True)

  src/aikito/add.py, line 612

  shutil.rmtree(skill_dir, ignore_errors=True)

  Show more

  src/aikito/add.py, line 778

  shutil.rmtree(skill_dir, ignore_errors=True)

  src/aikito/add.py, line 1756

  shutil.rmtree(backup_dir, ignore_errors=True)

  src/aikito/add.py, line 1771

  shutil.rmtree(backup_dir, ignore_errors=True)

  src/aikito/add.py, line 1797

  shutil.rmtree(backup_dir, ignore_errors=True)

  src/aikito/add.py, line 1821

  shutil.rmtree(backup_dir, ignore_errors=True)

• Install and update

  Pass

  No install-time script found, and dependencies are pinned or absent.

• Network

  Concern

  can reach a host that is not written as a fixed address.

  NETWORK_NO_FIXED_HOST

  src/aikito/update_notifier.py, line 58

  with urllib.request.urlopen(req, timeout=timeout) as resp:

  src/aikito/web/app.js, line 14

  async function get(path) { const response=await fetch(path); if(!response.ok) throw new Error((await response.json()).error || response.statusText); return response.json(); }

  src/aikito/web/resource-access.js, line 38

  const response=await fetch(`/api/access/${request.request_id}/${act

  Show more

  src/aikito/workspace/auto_sync.py, line 446

  payloads = remote_store.fetch(remote_snapshot, [item_id])

  src/aikito/workspace/encrypted_discovery.py, line 89

  payloads = reader.fetch(snapshot, identities)

  src/aikito/workspace/encrypted_sync.py, line 151

  def fetch(self, expected, ids):

  src/aikito/workspace/encrypted_sync.py, line 156

  outer = self.reader.fetch(self.view.snapshot, tuple(opaque))

  src/aikito/workspace/reconcile.py, line 194

  payloads = remote.fetch(center, tuple(resources))

• Secrets

  Concern

  reads a credential or environment file.

  SECRETS_PATH_UNCONFIRMED

  src/aikito/mcp/redact.py, line 132

  re.compile(r"^!!js process\.env\.([A-Za-z_][A-Za-z0-9_]*)$"),

• Agent instructions

  Pass

  No instruction to ignore earlier instructions or to hide a step.

• Obfuscation

  Concern

  contains an encoded blob in a file that should be readable. contains a minified payload.

  OBFUSCATION_ENCODED_BLOB OBFUSCATION_MINIFIED_PAYLOAD

  src/aikito/web/marked.umd.js, line 14

  ]`).replace("lheading",le).replace("|table","").replace("blockquote"," {0,3}>").replace("|fences","").replace("|list","").replace("|html","").replace("|tag","").getRegex()},Ne=/^\\

  src/aikito/web/marked.umd.js, line 18

  `)}var w=class{options;rules;lexer;constructor(e){this.options=e||R}space(e){let t=this.rules.block.newline.exec(e);if(t&&t[0].length>0)return{type:"space",raw:t[0]}}code(e){let t=

  src/aikito/web/marked.umd.js, line 39

  `,e=e.substring(N.length+1),h=q.slice(f)}}r.loose||(i?r.loose=!0:this.rules.other.doubleBlankLine.test(p)&&(i=!0)),r.items.push({type:"list_item",raw:p,task:!!this.options.gfm&&thi

  Show more

  src/aikito/web/marked.umd.js, line 42

  `),header:[],align:[],rows:[]};if(n.length===s.length){for(let i of s)this.rules.other.tableAlignRight.test(i)?o.align.push("right"):this.rules.other.tableAlignCenter.test(i)?o.ali

  src/aikito/web/marked.umd.js, line 44

  `?t[1].slice(0,-1):t[1];return{type:"paragraph",raw:t[0],text:n,tokens:this.lexer.inline(n)}}}text(e){let t=this.rules.block.text.exec(e);if(t)return{type:"text",raw:t[0],text:t[0]

  src/aikito/web/marked.umd.js, line 45

  `),this.blockTokens(e,this.tokens);for(let t=0;t<this.inlineQueue.length;t++){let n=this.inlineQueue[t];this.inlineTokens(n.src,n.tokens)}return this.inlineQueue=[],this.tokens}blo

  src/aikito/web/marked.umd.js, line 49

  `+r.text,this.inlineQueue.at(-1).src=i.text):t.push(r);continue}if(r=this.tokenizer.fences(e)){e=e.substring(r.raw.length),t.push(r);continue}if(r=this.tokenizer.heading(e)){e=e.su

  src/aikito/web/marked.umd.js, line 52

  `+r.raw,this.inlineQueue.at(-1).src=i.text):this.tokens.links[r.tag]||(this.tokens.links[r.tag]={href:r.href,title:r.title},t.push(r));continue}if(r=this.tokenizer.table(e)){e=e.su

  src/aikito/web/assets/logo.svg, line 1

  <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1024 1024" role="img" aria-label="Aikito">

  tests/fixtures/https_claim/README.md, line 1

  Public TLS test fixture only. The key is intentionally public and must never be used outside tests. Certificate trust is scoped to isolated test processes.

• Licence

  Pass

  A licence file is present (LICENSE).

• Maintainer activity

  Pass

  The latest commit is within the last 365 days.

Get the full report on this tool, £49

Note

Hygiene check of commit 1c906ed5739f. requests shell access. No manifest field names shell or command execution. can delete files. can reach a host that is not written as a fixed address. reads a credential or environment file. contains an encoded blob in a file that should be readable. contains a minified payload.

Date and source

Date checked: 20 Oct 2026

Read how this letter is chosen