registry / @canonry/canonry / 7.57.0
@canonry/canonry@7.57.0
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection did not substantiate the scanner’s credential-phishing or malicious-execution labels. The reviewed patterns map to secret redaction and a product plugin installer, and the package has no install lifecycle hook.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
No malicious trigger was identified; skill installation is invoked through the CLI.
Impact
No confirmed attack impact or credential transfer was established.
Mechanism
The inspected code writes skill files and manifests, enforces agent tool-call limits, and records successful assistant usage.
AI rationale
Source inspection did not substantiate the scanner’s credential-phishing or malicious-execution labels. The reviewed patterns map to secret redaction and a product plugin installer, and the package has no install lifecycle hook.
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json lists only build, typecheck, test, and lint scripts; it has no install lifecycle hook.
- The flagged agent integration writes a skill manifest as part of an explicit skill installation path.
- The runtime tool callback enforces call limits, and the usage callback handles successful assistant turns.
- The flagged credential patterns are used to redact secrets from diagnostic text.
Evidence against
- Static hints flagged credential collection and a child process, but inspected source shows secret-redaction logic and a DuckDB plugin installer.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/chunk-FHYOQI26.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @canonry/canonry@7.56.1
matchedIdentity = npm:QGNhbm9ucnkvY2Fub25yeQ:7.56.1
similarity = 0.950
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-FHYOQI26.jsView on unpkg58457// ../integration-commoncrawl/src/plugin-installer.ts
L58458: import { spawn } from "child_process";
L58459: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-FHYOQI26.jsView on unpkg · L58457•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/chunk-FHYOQI26.js:
oauthAuthorizationCodes,
throw forbidden(`This action requires the "${scope}" scope on your API key.`);
var NARROW_KEY_DENIED_MESSAGE = "This API key is narrower than the install, so it cannot use an administrator surface.";
throw forbidden("Internal diagnostics require a host-approved operator API key. Customer accounts and scopes cannot grant operator access.");
function requirePaidReadScope(request, allowedScopes = [ADS_WRITE_SCOPE, ADS_APPROVE_SCOPE, ADS_ACTIVATE_SCOPE], denialMessage = "This API key was not granted access to OpenAI Ads ...
throw forbidden("This API key is limited to one project, and this is
Findings
4 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-TIKT62IV.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-TIKT62IV.js
CriticalPrevious Version Dangerous Deltadist/chunk-FHYOQI26.js
HighChild Processdist/chunk-FHYOQI26.js
HighCredential Redirect Persistencedist/chunk-FHYOQI26.js
HighCommand Output Exfiltrationdist/chunk-FHYOQI26.js
HighCross File Remote Execution Contextdist/chunk-JQS2H65K.js
HighSemantic Analysis Limiteddist/chunk-FHYOQI26.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @canonry/canonry@7.57.0.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.57.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.