registry / @canonry/canonry / 7.50.1
@canonry/canonry@7.50.1
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe scanner’s credential and browser-collection flags were not substantiated by the inspected source. The manifest has no install hook, and the flagged skill writer is part of explicit CLI setup; no concrete attack surface remains.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was identified; skill installation requires a CLI request.
Impact
No confirmed attack impact was established.
Mechanism
No harmful mechanism was established. The inspected feature settings disclose their data transfer and require enablement; the browser-related match is credential redaction logic.
AI rationale
The scanner’s credential and browser-collection flags were not substantiated by the inspected source. The manifest has no install hook, and the flagged skill writer is part of explicit CLI setup; no concrete attack surface remains.
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- The manifest exposes command-line entry points and lists build and test scripts, with no install lifecycle hook.
- The agent skill writer places bundled files in a project’s skill directory; its caller installs only skills explicitly requested by name.
- The TypeSafe feature discloses what data it sends, defaults each project to disabled, and requires enablement while the feature is ready.
- Google Search Console requests send access tokens to the Google API URL supplied to the request helper.
- The flagged browser-related code matches secret-like assignments for redaction; inspection found no browser credential collection flow.
Evidence against
- Scanner hints flag credential redirection and browser credential collection, but inspected source did not substantiate either behavior.
- Some large bundled files and ordinary dependencies were reviewed only at bounded locations, so this assessment does not certify every code path or dependency.
Behavioral surface
ChildProcessCryptoEnvironmentVars
Source & flagged code
8 flaggeddist/chunk-7MDPU6T5.jsView file
7597// src/cloudflare-worker-deploy.ts
L7598: import { spawn } from "child_process";
L7599: import { randomUUID } from "crypto";
High
Child Process
Package source references child process execution.
dist/chunk-7MDPU6T5.jsView on unpkg · L7597169Cross-file remote execution chain: dist/chunk-7MDPU6T5.js spawns dist/chunk-WYI6KLC4.js; helper contains network access plus dynamic code execution.
L169: URL_PATH_NORMALIZATION_VERSION,
L170: USER_PASSWORD_MIN_LENGTH,
L171: UserRoles,
...
L562: if (!/^\d+$/.test(rawPort) || !Number.isSafeInteger(port) || port < 1 || port > 65535) {
L563: throw new CliError({ code: "INVALID_PORT", message: "Demo port must be an integer between 1 and 65535.", exitCode: 1 });
L564: }
...
L610: }
L611: const url = `http://${host.includes(":") ? `[${host}]` : host}:${port}`;
L612: const result = { status: "ready", mode: "view-only", sampleData: true, url };
L613: if (isMachineFormat(options.format ?? "text")) console.log(JSON.stringify(result));
...
L1055: try {
L1056: diff = ev.diff ? JSON.parse(ev.diff) : {}
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-7MDPU6T5.jsView on unpkg · L169Findings
3 Critical5 High3 Medium6 Low
CriticalBrowser Credential Phishingdist/chunk-WYI6KLC4.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-WYI6KLC4.js
CriticalPrevious Version Dangerous Deltadist/chunk-4KAZO6PU.js
HighChild Processdist/chunk-7MDPU6T5.js
HighCredential Redirect Persistencedist/chunk-4KAZO6PU.js
HighCommand Output Exfiltrationdist/chunk-4KAZO6PU.js
HighCross File Remote Execution Contextdist/chunk-7MDPU6T5.js
HighSemantic Analysis Limiteddist/chunk-4KAZO6PU.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to @canonry/canonry@7.50.1.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.50.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.