@vpxa/aikit is an MCP server distributed on npm, maintained by anvpx, tracked here since May 2026. It has shipped 471 releases (currently 0.1.474). Its composite risk grade is C — an inferred review prompt computed from observed signals, not a verdict.
Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.
Its 0 tools appear to reach filesystem, shell / exec, network, secrets and database, inferred from tool names, descriptions and input schemas rather than from observed behaviour.