registry / @canonry/canonry / 7.77.0
@canonry/canonry@7.77.0
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe flagged credential and network behavior is consistent with provider API use and diagnostic secret redaction. The manifest has no install lifecycle hook, and the reviewed endpoint configuration is surfaced for audit.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Provider requests occur when the user configures and invokes a provider; no install-time trigger was found.
Impact
No unauthorized credential collection, exfiltration, persistence or account action was identified.
Mechanism
Configured provider credentials are sent to the provider endpoint, while diagnostics redact credential-like values.
AI rationale
The flagged credential and network behavior is consistent with provider API use and diagnostic secret redaction. The manifest has no install lifecycle hook, and the reviewed endpoint configuration is surfaced for audit.
Network endpoints2
openrouter.ai/api/v1openrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest declares build, typecheck, test and lint scripts, with no install lifecycle hook.
- The OpenRouter adapter defaults to the official OpenRouter API and sends its configured API key as a bearer token to the configured provider endpoint.
- Custom provider endpoints are surfaced in settings and included in audit diffs, making endpoint changes visible.
- The credential-related patterns flagged in the browser chunk are part of a log-redaction routine that masks secrets.
Evidence against
- Static findings flagged browser credential collection and credential redirection, but the inspected code showed no browser cookie or local-storage reads.
- The reviewed credential flow is for a configured provider integration; no unrelated collector or hidden credential destination was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStrings
Source & flagged code
8 flaggeddist/chunk-GDKMVOZI.jsView file
60526// ../integration-commoncrawl/src/plugin-installer.ts
L60527: import { spawn } from "child_process";
L60528: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-GDKMVOZI.jsView on unpkg · L605261219});
L1220: return `${PREFIX}${salt.toString("base64")}$${derived.toString("base64")}`;
L1221: }
...
L1526: });
L1527: app.post("/auth/login", async (request, reply) => {
L1528: const parsed = loginRequestSchema.safeParse(request.body);
...
L4987: try {
L4988: const parsed = new URL(/^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`);
L4989: return parsed.hostname.toLowerCase().replace(/\.$/, "") || null;
...
L6769: if (first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168) {
L6770: return "which is private space";
L6771: }
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/chunk-GDKMVOZI.jsView on unpkg · L1219•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
Findings
3 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-FCGYYZHL.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-FCGYYZHL.js
HighChild Processdist/chunk-GDKMVOZI.js
HighCredential Redirect Persistencedist/chunk-AWSK2DBU.js
HighCommand Output Exfiltrationdist/chunk-GDKMVOZI.js
HighCross File Remote Execution Contextdist/chunk-4HJO7VFM.js
HighSemantic Analysis Limiteddist/chunk-GDKMVOZI.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to @canonry/canonry@7.77.0.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.77.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.