registry / @canonry/canonry / 7.51.2
@canonry/canonry@7.51.2
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 14d ago · by lpm-firewall-aiSource inspection did not substantiate the scanner's credential-theft or exfiltration claims. The inspected network and setup operations are associated with provider, telemetry, and CLI setup workflows, and the package declares no install lifecycle hook.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The CLI runs when invoked; provider requests occur when a provider feature is used.
Impact
No unauthorized credential forwarding, credential harvesting, or uncontrolled execution was established.
Mechanism
The provider sends its API key to its integration endpoint, and telemetry is sent to the package's own service. Setup writes package-owned skills and configuration during CLI workflows.
AI rationale
Source inspection did not substantiate the scanner's credential-theft or exfiltration claims. The inspected network and setup operations are associated with provider, telemetry, and CLI setup workflows, and the package declares no install lifecycle hook.
Network endpoints2
api.typesafe.ai/v1/systemonecanonry.ai/api/telemetry
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json declares build, typecheck, test, and lint scripts, with no npm lifecycle hook.
- Skill installation is exposed as a CLI command; bootstrap installs package-owned skills when run in a project directory.
- The TypeSafe provider sends its API key to the provider endpoint used by that integration.
- Runtime telemetry goes to the package's own endpoint and includes event and runtime metadata; source also checks telemetry settings and environment opt-outs.
- The flagged child-process code installs a DuckDB helper into a plugin directory; the inspected CLI code also contains normal login and provider functionality.
- The browser bundle contains a username-and-password login schema; inspected UI assets and dependency sources show ordinary app and server components.
Evidence against
- The scanner's credential-collection and command-output-exfiltration labels were not substantiated by the inspected source.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEval
Source & flagged code
7 flaggeddist/chunk-JREQHDRK.jsView file
7624// src/cloudflare-worker-deploy.ts
L7625: import { spawn } from "child_process";
L7626: import { randomUUID } from "crypto";
High
Child Process
Package source references child process execution.
dist/chunk-JREQHDRK.jsView on unpkg · L7624169Cross-file remote execution chain: dist/chunk-JREQHDRK.js spawns dist/chunk-YOGHHIGE.js; helper contains network access plus dynamic code execution.
L169: URL_PATH_NORMALIZATION_VERSION,
L170: USER_PASSWORD_MIN_LENGTH,
L171: UserRoles,
...
L562: if (!/^\d+$/.test(rawPort) || !Number.isSafeInteger(port) || port < 1 || port > 65535) {
L563: throw new CliError({ code: "INVALID_PORT", message: "Demo port must be an integer between 1 and 65535.", exitCode: 1 });
L564: }
...
L610: }
L611: const url = `http://${host.includes(":") ? `[${host}]` : host}:${port}`;
L612: const result = { status: "ready", mode: "view-only", sampleData: true, url };
L613: if (isMachineFormat(options.format ?? "text")) console.log(JSON.stringify(result));
...
L1055: try {
L1056: diff = ev.diff ? JSON.parse(ev.diff) : {}
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-JREQHDRK.jsView on unpkg · L169Findings
2 Critical5 High3 Medium6 Low
CriticalBrowser Credential Phishingdist/chunk-YOGHHIGE.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-YOGHHIGE.js
HighChild Processdist/chunk-JREQHDRK.js
HighCredential Redirect Persistencedist/chunk-3YL5TEZQ.js
HighCommand Output Exfiltrationdist/chunk-QQP7OQTW.js
HighCross File Remote Execution Contextdist/chunk-JREQHDRK.js
HighSemantic Analysis Limiteddist/chunk-QQP7OQTW.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
Low
Affected versions and remediation
This report applies to @canonry/canonry@7.51.2.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.51.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.