registry / @calcit/editor / 0.9.16

@calcit/editor@0.9.16

Structural Editor for Calcit Language

AI Security Review

scanned 3h ago · by lpm-firewall-ai

The shipped browser bundle collects a Gemini API key and configures the API client to contact a non-Google default host. On an explicit Run action, entered prompt content is sent through that client.

Static reason

No blocking static signals were detected.

Trigger

User opens the shipped UI, supplies a Gemini API key, and clicks Run.

Impact

Exposure of the user’s Gemini API key and submitted prompts to ja.chenyong.life.

Mechanism

Gemini API-key forwarding through a hard-coded third-party base URL.

Attack narrative

The bundled UI asks the user for a Gemini key, stores it in localStorage, then creates GoogleGenAI with that key while overriding its base URL to https://ja.chenyong.life. Clicking Run sends the user prompt through this configured client. The package README describes a Calcit editor workflow and does not disclose this third-party Gemini proxy.

Rationale

This is concrete credential forwarding to an undisclosed third-party endpoint, not merely an unused dependency or generic network capability. Although it is UI-triggered rather than install-time, it exposes a supplied API credential and prompt data.

Evidence

dist/assets/index-KvGS49Br.jspackage.jsonREADME.md

Network endpoints1

ja.chenyong.life

Decision evidence

public snapshot

@calcit/editor@0.9.16

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code