No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by apache · Agent Tool · ★ 5.4k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is maka safe to install? View the security audit →
Maka A local-first Agent workspace built for real work. Maka does more than answer questions. With controlled permissions, it can inspect projects, execute tools, produce artifacts, and preserve model messages and tool calls as recoverable execution facts. Desktop, the terminal TUI, the non-interactive CLI, and Maka evaluation subjects all execute through Runtime Host. [!IMPORTANT] Maka is under active development. The macOS Apple Silicon desktop build is an early public release; data formats, CLI commands, and experimental capabilities may still change. Why Maka Local-first instead of hosted-first: sessions, settings, and run records stay on your machine by default. You choose the model connection: cloud API, local model, or compatible gateway. Log is the Runtime: model messages, Tool Calls, Tool Results, and termination facts enter Runtime Event Log. Sessions, UI, model context, and recovery are projections over that log. Context is not history: Tool Result pruning and LLM Compaction change what the next inference sees
| Stars | 5,386 |
| Forks | 499 |
| Language | TypeScript |
| Category | Agent Tool |
| License | Apache-2.0 |
| Quality Score | 67.6213294221524/100 |
| Open Issues | 488 |
| Last Updated | 2026-09-14 |
| Created | 2026-05-27 |
| Platforms | cli, node |
| Est. Tokens | ~17k |
These tools work well together with maka for enhanced workflows:
Looking for a maka alternative? If you're comparing maka with other agent tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
程序员鱼皮的 AI 资源大全 + Vibe Coding 零基础教程，分享 OpenClaw 保姆级教程、大模型玩法（DeepSeek / GPT / Gemini / Claude / GLM）、最新 AI 资讯、Pr
Bytebot is a self-hosted AI desktop agent that automates computer tasks through natural language commands, ope
A Local-first chat analysis tool: Relive your social memories powered by SQL and AI Agents. 本地化的聊天记录分析工具，通过 SQ
AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Effici
AI conversations that actually remember. Never re-explain your project to your AI again. Join our Discord: htt
A framework helps you quickly build AI Native IDE products. MCP Client, supports Model Context Protocol (MCP)
Explore other popular agent tool tools:
maka is Apache Maka (Incubating) is a high-performance agent workspace that keeps a complete record of everything it did.. It is categorized as a Agent Tool with 5.4k GitHub stars.
maka is primarily written in TypeScript. It covers topics such as agent-runtime, ai, ai-agent.
You can find installation instructions and usage details in the maka GitHub repository at github.com/apache/maka. The project has 5.4k stars and 499 forks, indicating an active community.
maka is released under the Apache-2.0 license, making it free to use and modify according to the license terms.
The top alternatives to maka on Agent Skills Hub include ai-guide, bytebot, ChatLab. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: