registry / @canonry/canonry / 7.58.5
@canonry/canonry@7.58.5
⚠ Under reviewSelf-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 11d ago · by lpm-firewall-aiStatic inspection confirmed a fixed TypeSafe evaluator endpoint and package-owned skill file writes, but did not resolve the separate flagged credential and browser behavior in large bundles. The available evidence is insufficient to establish either an attack or a clean result.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Unresolved; the package exposes CLI and runtime entrypoints, but the flagged behavior's activation was not traced.
Impact
A credential exposure risk cannot be ruled out from the inspected excerpts.
Mechanism
The inspected evaluator sends a caller-provided key to a fixed endpoint. Other scanner-flagged credential behavior was not resolved from source.
AI rationale
Static inspection confirmed a fixed TypeSafe evaluator endpoint and package-owned skill file writes, but did not resolve the separate flagged credential and browser behavior in large bundles. The available evidence is insufficient to establish either an attack or a clean result.
Evidence
dist/chunk-CYVQW32W.jsdist/chunk-Y7NX6EIK.js
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Manual Review at 58.0% confidence as Unknown with medium false-positive risk.
AI review observations
- The manifest describes a self-hosted AI visibility platform and exposes CLI commands, with no lifecycle scripts in the inspected script section.
- The bundled TypeSafe evaluator sends a supplied API key to a fixed TypeSafe endpoint and rejects redirects; its intended recipient could not be fully verified from the inspected source.
- The skills code writes a manifest and reconciles bundled skills, but the complete command activation and destination scope were not resolved.
Evidence against
- The scanner flags browser credential collection and credential redirection, but those flagged behaviors were not confirmed in the inspected excerpts.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/chunk-QEJBAPDP.jsView file
59123// ../integration-commoncrawl/src/plugin-installer.ts
L59124: import { spawn } from "child_process";
L59125: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-QEJBAPDP.jsView on unpkg · L591231157});
L1158: return `${PREFIX}${salt.toString("base64")}$${derived.toString("base64")}`;
L1159: }
...
L1464: });
L1465: app.post("/auth/login", async (request, reply) => {
L1466: const parsed = loginRequestSchema.safeParse(request.body);
...
L4925: try {
L4926: const parsed = new URL(/^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`);
L4927: return parsed.hostname.toLowerCase().replace(/\.$/, "") || null;
...
L6656: if (first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168) {
L6657: return "which is private space";
L6658: }
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/chunk-QEJBAPDP.jsView on unpkg · L1157•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
Findings
4 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-Y7NX6EIK.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-Y7NX6EIK.js
CriticalPrevious Version Dangerous Deltadist/chunk-CYVQW32W.js
HighChild Processdist/chunk-QEJBAPDP.js
HighCredential Redirect Persistencedist/chunk-CYVQW32W.js
HighCommand Output Exfiltrationdist/chunk-QEJBAPDP.js
HighCross File Remote Execution Contextdist/chunk-AP7YSOFC.js
HighSemantic Analysis Limiteddist/chunk-QEJBAPDP.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @canonry/canonry@7.58.5.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.58.5 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.