
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@nicomatt69/nikcli
Advanced tools
// TODO: Consider refactoring for reduced complexity
Transform your development workflow with intelligent AI agents that understand your code, execute commands, and build applications autonomously.
# Unix/macOS - Universal installer auto-detects best package manager
curl -fsSL https://raw.githubusercontent.com/nikomatt69/nikcli-main/main/installer/install.sh | bash
# Windows PowerShell
iwr -useb https://raw.githubusercontent.com/nikomatt69/nikcli-main/main/installer/install.ps1 | iex
Choose your preferred package manager:
# npm
npm install -g @nicomatt69/nikcli
# yarn
yarn global add @nicomatt69/nikcli
# pnpm
pnpm install -g @nicomatt69/nikcli
# bun
bun install -g @nicomatt69/nikcli
# Force specific package manager with installer
curl -fsSL https://raw.githubusercontent.com/nikomatt69/nikcli-main/main/installer/install.sh | bash -s pnpm
# Windows PowerShell with specific manager
iwr -useb https://raw.githubusercontent.com/nikomatt69/nikcli-main/main/installer/install.ps1 | iex -PackageManager yarn
# Clone repository
git clone https://github.com/nikomatt69/nikcli-main
cd nikcli-main
# Install dependencies (development uses pnpm for optimal performance)
pnpm install
# Build and start
pnpm run build
pnpm start
Development Scripts:
pnpm start - Start in development modepnpm run dev - Development with watch modepnpm run build - Compile TypeScriptpnpm test - Run testspnpm run build:binary - Create binary distributionNote: Development uses pnpm for optimal performance, but NikCLI supports installation with any package manager.
nikcli
Complete documentation is available at nikcli.mintlify.app
NikCLI follows a modular, service-oriented architecture with clear separation of concerns:
UI Layer (src/cli/ui/)
Service Layer (src/cli/services/)
Core Layer (src/cli/core/)
Tool Layer (src/cli/tools/)
Agent Layer (src/cli/automation/agents/)
Planning Layer (src/cli/planning/)
Virtualized Agents (src/cli/virtualized-agents/)
src/cli/index.ts - Main system orchestrator and startup (2057 lines)src/cli/nik-cli.ts - Primary CLI interface (21,099 lines)src/cli/main-orchestrator.ts - AI development orchestrator (696 lines)src/cli/register-agents.ts - Agent system initialization (272 lines)All tools include:
/help - Show comprehensive help message/quit, /exit - Exit the chat/clear - Clear current chat session/new [title] - Start a new chat session/default - Switch to default chat mode/config - Show current configuration/debug - Debug API key configuration/stats - Show usage statistics/dashboard - Show real-time dashboard with metrics/system <prompt> - Set system prompt for current session/auth [login|signup|logout|status] - Authentication management/pro [status|activate|help] - Manage Pro plan and NikCLI key/set-key <model> <key> - Set API key for a model/set-key coinbase - Interactive wizard for Coinbase keys/set-key browserbase - Interactive wizard for Browserbase keys/set-key figma - Configure Figma and v0 API credentials/set-key redis - Configure Redis/Upstash cache credentials/set-vector-key - Configure Upstash Vector database credentials/model <name> - Switch to a model/models - List available models/router [status|on|off|verbose|mode <m>] - Adaptive model router controls/temp <0.0-2.0> - Set temperature (creativity)/read <file> - Read file contents/write <file> <content> - Write content to file/edit <file> - Edit file interactively/ls [directory] - List files in directory/search <query> [directory] - Search in files (grep-like)/grep <pattern> - Search text patterns across files/agents - List all available agents/agent <name> <task> - Run specific agent with task/auto <description> - Autonomous multi-agent execution/parallel <agents> <task> - Run multiple agents in parallel/factory - Show agent factory dashboard/create-agent <name> <specialization> - Create new specialized agent/launch-agent <id|name> [task] - Launch agent from blueprint/context <paths> - Select workspace context paths/index <path> - Index files in path for better context/stream - Show live agent stream dashboard/plan - Generate autonomous execution plan/todo - Manage task todos/todos - List all todos/plan-clean - Clean up completed plans/todo-hide - Hide completed todos/todo-show - Show hidden todos/vm - Show VM management help/vm-create <repo-url|os> - Create VM container (supports alpine|debian|ubuntu)/vm-list - List active containers/vm-stop <id> - Stop container/vm-remove <id> - Remove container/vm-connect <id> - Connect to container/vm-create-pr <id> "<title>" "<desc>" - Create PR from container/vm-mode - Enter VM chat mode/vm-switch - Switch to different VM/vm-dashboard - Show VM dashboard with status/vm-select [id] - Select VM for targeted chat/vm-status [id] - Show detailed VM system status/vm-exec <command> - Execute command in selected VM/vm-ls [directory] - List files in VM directory/vm-broadcast <message> - Send message to all active VMs/vm-health - Run health check on all VMs/vm-backup [id] - Backup VM session state/vm-stats - Show VM session statistics/vm-logs <id> - View VM container logs/bg-agent <task> - Create background job with VM execution + auto PR/bg-jobs [status] - List all background jobs/bg-status <jobId> - Get detailed status of specific job/bg-logs <jobId> [limit] - View job execution logs/remember "fact" - Store information in long-term memory/recall "query" - Search memories for relevant information/memory [stats|config|session|personalization|cleanup] - Memory management/forget <memory-id> - Delete a specific memory/forget-session - Forget all session memories/forget-old <days> - Forget memories older than N days/forget-tag <tag> - Forget memories by tag/snapshot <name> [type] - Create project snapshot (quick/full/dev/config)/snap <name> - Alias for quick snapshot/restore <snapshot-id> - Restore files from snapshot/snapshots [query] - List available snapshots/sessions - List all chat sessions/resume [session-id] - Resume previous work session/work-sessions - List all saved work sessions/save-session [name] - Save current work session/delete-session <id> - Delete a work session/export-session <id> <path> - Export work session to file/export [sessionId] - Export session to markdown/undo [count] - Undo last N file edits (default: 1)/redo [count] - Redo last N undone edits (default: 1)/edit-history - Show edit history and statistics/analyze-image <path> - Analyze image with AI vision models/vision <path> - Alias for analyze-image/images - Discover images and pick one to analyze/analyze-image --provider <claude|openai|google|openrouter> - Choose provider/analyze-image --prompt "custom prompt" - Custom analysis prompt/generate-image "prompt" - Generate image with AI models/create-image "prompt" - Alias for generate-image/generate-image --model <dall-e-3|dall-e-2|gpt-image-1> - Choose model/generate-image --size <1024x1024|1792x1024|1024x1792> - Set size/web3 status - Show Coinbase AgentKit status/web3 init - Initialize AgentKit (CDP keys required)/web3 wallet - Show wallet address and network/web3 balance - Check wallet balance/web3 transfer <amount> <to> [--token ETH|USDC|WETH] - Transfer tokens/web3 chat "message" - Natural language blockchain request/web3 wallets - List known wallets/web3 use-wallet <0x...> - Use specific wallet by address/goat - GOAT SDK operations (Polymarket, ERC20)/polymarket - Polymarket-specific operations/web3-toolchain - Web3 toolchain management/defi-toolchain - DeFi toolchain management/browser [url] - Start interactive browser mode/browser-status - Show current browser session status/browser-screenshot - Take screenshot of current page/browser-exit - Exit browser mode and cleanup/browser-info - Show browser capabilities and diagnostics/browse-session [id] - Create new browsing session/browse-search <sessionId> <query> - Search the web/browse-visit <sessionId> <url> [prompt] - Visit page and extract content/browse-chat <sessionId> <message> - Chat with AI about web content/browse-sessions - List all active browsing sessions/browse-info <sessionId> - Get session information/browse-close <sessionId> - Close browsing session/browse-cleanup - Clean up inactive sessions/browse-quick <query> [prompt] - Quick search, visit, and analyze/figma-config - Show Figma API configuration status/figma-info <file-id> - Get file information from Figma/figma-export <file-id> [format] [output-path] - Export designs (png/svg/pdf)/figma-to-code <file-id> [framework] [library] - Generate code from designs/figma-open <file-url> - Open Figma file in desktop app (macOS)/figma-tokens <file-id> [format] - Extract design tokens (json/css/scss)/figma-create <component-path> [name] - Create Figma design from React component/run <command> - Execute any terminal command/install <packages> - Install npm/yarn packages/npm <args> - Run npm commands/yarn <args> - Run yarn commands/git <args> - Run git commands/docker <args> - Run docker commands/ps - List running processes/kill <pid> - Kill process by PID/build - Build the project/test [pattern] - Run tests/lint - Run linting/create <type> <name> - Create new project/blueprints - List and manage all blueprints/blueprint <id|name> - Show detailed blueprint information/delete-blueprint <id|name> - Delete a blueprint/export-blueprint <id|name> <file> - Export blueprint to file/import-blueprint <file> - Import blueprint from file/search-blueprints <query> - Search blueprints by capabilities/security [status|set|help] - Manage security settings/dev-mode [enable|status|help] - Developer mode controls/safe-mode - Enable safe mode (maximum security)/clear-approvals - Clear session approvals/approval [on|off|status] - Manage approval system/compact [on|off] - Toggle compact output mode/super-compact [on|off] - Toggle super compact mode/history <on|off> - Enable/disable chat history/tokens - Show token usage and optimization/cache [stats|clear|settings] - Manage token cache system/redis-enable - Enable Redis caching/redis-disable - Disable Redis caching/redis-status - Show Redis cache status/diagnostic [status|start|stop|scan] - IDE diagnostic integration/monitor - Start diagnostic monitoring/diag-status - Show diagnostic status/env <path> - Import .env file and persist variablesThe Universal Agent is an all-in-one enterprise agent with 50+ capabilities:
Core Capabilities:
Frontend Capabilities:
Backend Capabilities:
DevOps Capabilities:
Autonomous Capabilities:
NikCLI includes a sophisticated planning system that:
Planning Components:
autonomous-planner.ts - AI-powered task breakdown (786 lines)plan-executor.ts - Step-by-step execution (932 lines)planning-manager.ts - Plan lifecycle management (576 lines)enhanced-planning.ts - Advanced planning features (1,450 lines)NikCLI provides isolated development environments through containerized VMs:
Features:
VM Components:
vm-orchestrator.ts - Container lifecycle management (990 lines)container-manager.ts - Docker operations (471 lines)secure-vm-agent.ts - Secure VM agent implementation (1,061 lines)vm-session-manager.ts - Session state management (452 lines)vm-websocket-server.ts - Real-time communication (411 lines)Configuration File: ~/.nikcli/config.json
Supported Providers:
NikCLI includes seamless Vim integration for developers who prefer modal editing:
/vim setup, /vim open <file>, /vim diff <file1> <file2>, /vim quick-edit~/.vim/sessions, tracks active editsNikCLI features an advanced, interactive CLI interface:
# Start interactive session
nikcli
# Create React component with Universal Agent
/agent universal-agent "create a login form with validation"
# Run autonomous mode
/auto "optimize this codebase for performance"
# Generate execution plan
/plan "add user authentication system"
# Create and manage VM container
/vm-create https://github.com/user/repo.git --os ubuntu
/vm-connect <container-id>
/vm-status
# Analyze image with AI vision
/analyze-image screenshot.png --provider claude
# Generate image from text
/generate-image "a futuristic cityscape at sunset" --model dall-e-3
# Web3 operations
/web3 init
/web3 balance
/web3 transfer 0.1 0x123... --token ETH
# Browser automation
/browser https://example.com
/browser-screenshot
# Figma integration
/figma-info <file-id>
/figma-to-code <file-id> --framework react
# Memory management
/remember "User prefers TypeScript over JavaScript"
/recall "TypeScript preferences"
# Create snapshot
/snapshot before-refactor
/restore <snapshot-id>
# Background agent job
/bg-agent "implement feature X and create PR"
# Setup and use Vim integration
/vim setup
/vim open src/main.ts
# Help and commands
/help
Our universal installers include security features:
Installer Files:
installer/install.sh - Unix/macOS universal installerinstaller/install.ps1 - Windows PowerShell installerPackage Manager Support:
pnpm for faster builds and reduced disk usageKey Files:
package.json - Main package configuration with universal engine supportpnpm-workspace.yaml - pnpm workspace configuration.npmrc - npm/pnpm configuration for optimal development experienceMIT License - see LICENSE for details.
Visit nikcli.mintlify.app for complete documentation, tutorials, and examples.
NIKCLI_COMPACT=1 enables compact output (fewer banners/panels).NIKCLI_CLEAN_CHAT=1 hides ephemeral toolchain logs (Recent Updates) and suppresses auxiliary router debug logs so only assistant/user stream remains.For optimal performance with OpenAI text-embedding-3-small:
EMBED_BATCH_SIZE (default: 300) - Batch size for embedding generationEMBED_MAX_CONCURRENCY (default: 6) - Maximum concurrent embedding batchesEMBED_INTER_BATCH_DELAY_MS (default: 25) - Delay between batch groups (ms)INDEXING_BATCH_SIZE (default: 300) - Batch size for vector store indexingEMBED_ADAPTIVE_BATCHING (default: true) - Enable adaptive batch sizing based on contentNIKCLI_MINIMAL_STREAM=1 alias for clean chat; same behavior as NIKCLI_CLEAN_CHAT=1.NIKCLI_LIVE_UPDATES_EPHEMERAL=1 clears live updates automatically when the system becomes idle or interactive mode stops.FAQs
NikCLI - Context-Aware AI Development Assistant
We found that @nicomatt69/nikcli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.