# mini-swe-agent

> mini-swe-agent is an officially published AI tool from SWE-agent (community). Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/agent/mini-swe-agent
- **Kind:** AI tool
- **Publisher:** SWE-agent (community)
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Website:** https://mini-swe-agent.com
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/agent/mini-swe-agent

## Description

Minimal bash-only coding agent from the SWE-agent team, run as the mini CLI with any LiteLLM model

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Configuration surface

Files this tool reads on the host. Anything written here changes what the agent does next.

- `mini-swe-agent-env` — Global .env with the model name and provider API keys (presence only - never read)
    - win32: `${LOCALAPPDATA}\mini-swe-agent\mini-swe-agent\.env`
    - darwin: `${HOME}/Library/Application Support/mini-swe-agent/.env`
    - linux: `${HOME}/.config/mini-swe-agent/.env`
- `mini-swe-agent-last-run` — Trajectory of the last mini run (presence only - holds conversation content)
    - win32: `${LOCALAPPDATA}\mini-swe-agent\mini-swe-agent\last_mini_run.traj.json`
    - darwin: `${HOME}/Library/Application Support/mini-swe-agent/last_mini_run.traj.json`
    - linux: `${HOME}/.config/mini-swe-agent/last_mini_run.traj.json`

## Known vulnerabilities

- [CVE-2026-108592](https://catalog.anomity.ai/vuln/cve-2026-108592) — high: VulnCheck Source-Review CVEs Hit Agent Tooling: mini-swe-agent's Bubblewrap Sandbox Inherits Host API Keys (CVE-2026-108592), 9router Writes Shell Hooks Into Hermes Agent's config.yaml (CVE-2026-108593), and mcp-remote's Device-Code Flow Sends Secrets Over HTTP (CVE-2026-108716)

## Related AI tools

- [5ire](https://catalog.anomity.ai/agent/5ire) — risk 10 (low)
- [9Router](https://catalog.anomity.ai/agent/9router) — risk 10 (low)
- [AdaL](https://catalog.anomity.ai/agent/adal) — risk 10 (low)
- [Agent Orchestrator](https://catalog.anomity.ai/agent/agent-orchestrator) — risk 10 (low)
- [Agent Zero](https://catalog.anomity.ai/agent/agent-zero) — risk 10 (low)
- [AIChat](https://catalog.anomity.ai/agent/aichat) — risk 10 (low)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json