mrkeyoor.com_
Thu 24 Sept 09:34 UTC
Webevaluationupdated 23 Sept 2026

mimik review

Mimik is a browser extension that records clicks, typing, and navigation, then turns the session into an editable guide with annotated screenshots. It stores guides locally, needs no account, and can replay the steps on the original site or export them as documents, images, or video.

trackingstars / 7d
Verdict

Our Mimik run installed 643 packages, built in 11 seconds, and passed all 1,418 tests, but the audit reported 26 known vulnerabilities, including 3 critical. Mimik is a strong choice for people who want polished browser guides without sending the whole recording to a hosted workspace. Use it only after reviewing the dependency findings, and treat Smart Blur as an editing aid rather than a privacy guarantee.

We ran it

Lab card: what happened when we ran mimikScreenshot of mimik (mimik.westpoint.io)
Install✓ · 13s643 packages · 453 MB
Build✓ · 11s
Tests✓ · 51s1418 passed · 0 failed of 1418 (vitest)
Known vulns263 critical · 11 high · 6 moderate · 6 low (npm audit)
Repo330 files~39,647 lines of source · 2.8 MB · 2 CI workflows

Answers from our run

Does mimik build from source?

Dependencies installed in 13 seconds (643 packages), and the build succeeded in 11 seconds. We cloned commit 0004bb0 into a clean Debian container with 3 CPUs and no project-specific setup.

Do mimik's tests pass?

Yes: 1418 of 1418 passed when we ran the project's own test command (vitest). Some failures need services or credentials a bare container does not have.

Does mimik have known vulnerabilities in its dependencies?

npm audit flagged 26 known advisories in the dependency tree, including 3 critical at the time of our run.

Who should not use mimik?

Regulated workflows that expect automatic redaction to guarantee safety: the README lists gaps for iframes, shadow DOM, canvas text, images, generated CSS content, and later page updates.

What are the alternatives to mimik?

Tango, Playwright. Our Mimik run installed 643 packages, built in 11 seconds, and passed all 1,418 tests, but the audit reported 26 known vulnerabilities, including 3 critical.

Setup5/513-second install, 11-second build, and every test passed
Docs5/5Capture, export, privacy, and blur limits are stated plainly
Community4/51,176 stars, a recent release, and current issue activity
Maturity3/5v1.2.0 works broadly, but audit and capture findings need review

Discussed on

  1. hnShow HN: Mimik – open-source local-first alternative to Scribe and Tango4 points

Who it’s for

Support, operations, and product teams documenting browser-based work without a hosted guide library.
People who need guides in Chrome, Firefox, or Edge and want the source under an MIT license.
Teams prepared to inspect every screenshot before sharing material from sensitive systems.
Developers who want local storage but are comfortable supplying their own AI or transcription key for optional features.

Who it’s NOT for

Regulated workflows that expect automatic redaction to guarantee safety: the README lists gaps for iframes, shadow DOM, canvas text, images, generated CSS content, and later page updates.
Teams that need a central cloud library, account controls, or shared editing: guides live in each browser and collaboration is a .mimik file handoff.
Safari users: the documented store builds cover Chrome, Firefox, and Edge.
Organizations that require zero external requests: site icons go through Google's favicon service, while optional AI and voice features send text or audio to the chosen provider.
Buyers with a zero-advisory dependency policy: our audit found 26 known vulnerabilities, including 3 critical and 11 high.
Anyone documenting checkbox-heavy flows without review: open issue 69 shows screenshots capturing the state before the click takes effect.

Setup reality

Our sandbox installed 643 packages in 13 seconds and used 453 MB on disk. The build succeeded in 11 seconds. Tests passed in 51 seconds: Vitest reported 1,418 passed and 0 failed. Npm audit found 26 known vulnerabilities, split across 3 critical, 11 high, 6 moderate, and 6 low.

End users can install a signed extension without a backend or account. Developers need Node 22 or newer, pnpm 10 or newer, and Chrome or Firefox for extension testing. Optional descriptions require a provider key, and voice narration requires an OpenAI or Groq key.

The repository is a monorepo with workspace packages, 2 CI workflow files, and no Dockerfile or top-level tests directory. Local storage keeps deployment simple, but screenshots and guide data remain tied to the browser unless you export a .mimik bundle.

Six languages and 7 export formats cover real documentation work

Mimik records a browser task and turns each meaningful action into a guide step. Clicks, form input, keyboard shortcuts, clipboard actions, drag events, and navigation can become annotated screenshots with generated descriptions. The interface is available in 6 languages. Finished guides can leave the browser as video, GIF, PDF, DOCX, HTML, Markdown, or a .mimik bundle. That range makes the extension useful for internal procedures, support articles, onboarding, and bug reports without requiring a separate authoring tool for every output.

The editor is more capable than a simple screenshot list. You can crop, annotate, redact, reorder, add headings, remove steps, and roll back through version history. Guide Me replays the guide on the real page, highlighting each target and advancing as the user acts. A .mimik file is a zip containing a manifest, screenshots, and a README, so the recipient can import and continue editing it. The tradeoff is clear: there is no shared server where several people edit the same library.

Smart Blur documents 9 places it cannot reach

The README lists 9 structural gaps in Smart Blur, including iframes, shadow roots, canvas or image text, CSS-generated content, select options, attributes, other frames or tabs, and content that appears after the scan ends. Blur mode pauses capture and scans visible text nodes plus input values in the top frame. Manual selection can mask a chosen DOM element across screenshots, but screenshots taken before blur mode are unchanged. For sensitive work, that is a review workflow, not automatic proof that personal data is gone.

Mimik is unusually specific about what a shared bundle removes. Redactions are burned into exported pixels, typed field values are removed from step text and links, and query strings are trimmed from links by default. Screenshots still show whatever was visible when captured. The privacy policy documents 2 kinds of external traffic: Google receives the site domain when Mimik fetches a favicon, and optional AI or voice providers receive the text or audio needed for their feature.

What happened when we ran it

Our sandbox installed commit 0004bb0 in 13 seconds, adding 643 packages and using 453 MB on disk. The build completed in 11 seconds. The checkout itself contained 330 files, about 39,647 lines of source, and occupied 2.8 MB before dependencies. This is a sizeable development tree for a browser extension, though the short install and build times made it easy to inspect in a fresh Node 22 container.

Vitest finished in 51 seconds with 1,418 passing tests and 0 failures. That is the cleanest test result in this batch, and it covers far more than a smoke check. Our scan found no top-level tests directory because tests are organized within the workspace rather than collected in that conventional location. The repository had 2 CI workflow files, including pull-request checks for lint, tests, and both Chrome and Firefox builds. There was no Dockerfile, which fits a browser extension distributed through stores.

The dependency audit is the uncomfortable part. Npm audit found 26 known vulnerabilities: 3 critical, 11 high, 6 moderate, and 6 low. The lab output does not identify which packages or runtime paths are involved, so it would be wrong to call any one browser feature exposed. It is still too large a result to ignore. Before company-wide deployment, inspect the advisory tree, determine whether affected code ships in the extension, and repeat the browser tests after any dependency changes.

Local storage avoids an account, while sharing stays manual

Guides, steps, screenshots, settings, and provider keys live in the browser's local storage. Mimik has no backend, account, or product telemetry. Optional AI descriptions send roughly 50 to 100 tokens of DOM context rather than a screenshot, according to the README. Voice narration sends audio to OpenAI or Groq using the user's own key. Local operation limits what the Mimik service itself sees, but it does not make those optional calls offline.

Seven export choices reduce the friction of leaving that local library. PDF and DOCX suit policies, Markdown and HTML fit documentation systems, while video and GIF work in support threads. The .mimik format is the only one that imports back as an editable guide. A team that wants search, access controls, simultaneous editing, or retention policy across every guide must provide those around the exported files or choose a hosted product such as Tango. Local ownership shifts administration to the user.

Version 1.2.0 is active, with one capture error still open

GitHub recorded version 1.2.0 on September 17, 2026, followed by another push on September 23. The repository had 1,176 stars, 8 open issues, and 5 open pull requests when checked. The release added GIF export, Simplified Chinese, provider choices, password handling changes, and Smart Blur corrections. That recent security and privacy work is welcome, though it also shows that capture and redaction behavior is still changing quickly.

Open issue 69 reproduces a checkbox capture error in Firefox 154 with Mimik 1.1.1: the screenshot shows the state before the click and places the click marker incorrectly. Version 1.2.0 is newer, but the issue remained open on September 23, so do not assume the release fixed it. Mimik earns a trial because its 1,418 tests passed and its documentation names the privacy limits. The final check still belongs to a human looking at the exported guide.

Alternatives

ProjectWhat it isPick it when
TangoA hosted workflow recorder with shared workspaces and live in-browser guidance.pick this instead when accounts, a central workspace, and managed sharing matter more than local-only storage.
Playwright gh↗Browser automation with a recorder that turns interactions into executable test code.pick this instead when repeatable automation and regression checks matter more than a guide for people.

What people are saying

  1. [github-trending] westpoint-io/mimik

Sources

  1. Mimik repository and README
  2. Mimik v1.2.0 release
  3. Mimik privacy policy
  4. Checkbox capture issue 69
  5. Lab-tested commit 0004bb0
  6. Mimik contributor setup

More web reviews

cloudflare-turnstile-examples · react-spring · You-Dont-Need-jQuery · vapor · univer · MovieBox-Tui · the whole board →