registry / @canonry/canonry / 7.62.1
@canonry/canonry@7.62.1
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 11d ago · by lpm-firewall-aiSource inspection found no install-time attack, credential theft, or browser credential collection. The automatic skill refresh is a scoped first-party update path, and the other high-severity matches resolve to expected provider, UI, dependency, and parser behavior.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The package runs when its CLI, MCP server, or application runtime is invoked; package installation has no lifecycle hook.
Impact
No confirmed malicious effect was found; runtime skill refresh is scoped to previously managed files and preserves edited files as conflicts.
Mechanism
The inspected provider code sends a configured key to its named service. Skill refresh targets only package-managed Canonry/Aero skill folders.
AI rationale
Source inspection found no install-time attack, credential theft, or browser credential collection. The automatic skill refresh is a scoped first-party update path, and the other high-severity matches resolve to expected provider, UI, dependency, and parser behavior.
Network endpoints1
api.typesafe.ai/v1/systemone
Decision evidence
public snapshotAI called this Clean at 97.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has no preinstall, install, or postinstall hook; its scripts are build and development tasks.
- Skill installation runs through the CLI or init flow. Automatic refresh is runtime behavior, limited to Canonry/Aero skill folders with this package’s manifest; edited files are reported as conflicts.
- TypeSafe sentiment requests send the configured provider key to the named TypeSafe endpoint, with redirects rejected.
- Credential-related matches include a local login schema and diagnostic code that redacts secret values.
- The YAML bundle recognizes the standard byte-order mark token. Inspected dependency snapshots show no install lifecycle hooks; the flagged remaining paths include UI, vendor, and API declaration bundles.
Evidence against
- CLI and MCP startup can automatically refresh previously installed skills, but target discovery requires this package’s manifest in a Canonry or Aero skill folder.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEval
Source & flagged code
8 flaggeddist/chunk-2HNTNKFC.jsView file
59661// ../integration-commoncrawl/src/plugin-installer.ts
L59662: import { spawn } from "child_process";
L59663: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-2HNTNKFC.jsView on unpkg · L59661•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/chunk-2HNTNKFC.js:
oauthAuthorizationCodes,
throw forbidden(`This action requires the "${scope}" scope on your API key.`);
var NARROW_KEY_DENIED_MESSAGE = "This API key is narrower than the install, so it cannot use an administrator surface.";
throw forbidden("Internal diagnostics require a host-approved operator API key. Customer accounts and scopes cannot grant operator access.");
function requirePaidReadScope(request, allowedScopes = [ADS_WRITE_SCOPE, ADS_APPROVE_SCOPE, ADS_ACTIVATE_SCOPE], denialMessage = "This API key was not granted access to OpenAI Ads ...
throw forbidden("This API key is limited to one project, and this is
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/chunk-2HNTNKFC.jsView on unpkgFindings
3 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-U6CNJC2Y.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-U6CNJC2Y.js
HighChild Processdist/chunk-2HNTNKFC.js
HighCredential Redirect Persistencedist/chunk-2HNTNKFC.js
HighCommand Output Exfiltrationdist/chunk-2HNTNKFC.js
HighCross File Remote Execution Contextdist/chunk-LFXKB5FZ.js
HighSemantic Analysis Limiteddist/chunk-2HNTNKFC.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to @canonry/canonry@7.62.1.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.62.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.