registry / @canonry/canonry / 7.78.0
@canonry/canonry@7.78.0
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe credential flow reviewed belongs to the configured sentiment classifier and targets its named API endpoint with redirects disabled. The browser-credential and Unicode scanner hints were not supported by the inspected source.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Provider requests occur when the configured classifier is used; the package declares no install lifecycle hooks.
Impact
No unauthorized collection, credential redirection, or other attack impact was identified in the reviewed paths.
Mechanism
The TypeSafe classifier sends its configured credential to its fixed API endpoint and rejects redirects.
AI rationale
The credential flow reviewed belongs to the configured sentiment classifier and targets its named API endpoint with redirects disabled. The browser-credential and Unicode scanner hints were not supported by the inspected source.
Evidence
package.jsonREADME.mddist/chunk-EFMZSYRD.jsdist/chunk-PM2DB3HE.js
Network endpoints2
api.typesafe.ai/v1/systemoneopenrouter.ai/api/v1/systemone
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the library and two Canonry CLI commands; it declares no lifecycle scripts.
- The README describes configuring providers with the user's own API keys.
- The TypeSafe classifier sends its configured key to api.typesafe.ai, with redirects disabled.
- The flagged password code defines local account password validation, consistent with the dashboard's user authentication.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/chunk-WCFANFR2.jsView file
6584// src/commands/daemon.ts
L6585: import { spawn } from "child_process";
L6586: import fs from "fs";
High
Child Process
Package source references child process execution.
dist/chunk-WCFANFR2.jsView on unpkg · L6584394Cross-file remote execution chain: dist/chunk-WCFANFR2.js spawns dist/chunk-PM2DB3HE.js; helper contains network access plus dynamic code execution.
L394: try {
L395: value = JSON.parse(readFileSync(source === "-" ? 0 : source, "utf8"));
L396: } catch {
...
L416: if (printSeoJson(value, format)) return;
L417: console.log(`SEO data: ${value.available ? "available" : "unavailable"}`);
L418: if (value.reason) console.log(value.reason);
...
L652: access: "stored",
L653: help: "Host operator only. Read private upstream receipts and cost for reconciliation.",
L654: run: (input) => showSeoOperatorTask(requirePositional(input, 0, { command: "seo.operator.task", usage: "canonry seo operator task <task-id>", message: "task ID is required" }), inp...
...
L3140: message: `Unknown --from value "${opts.
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-WCFANFR2.jsView on unpkg · L394Findings
4 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-PM2DB3HE.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-PM2DB3HE.js
CriticalPrevious Version Dangerous Deltadist/chunk-M3BUP6XD.js
HighChild Processdist/chunk-WCFANFR2.js
HighCredential Redirect Persistencedist/chunk-EFMZSYRD.js
HighCommand Output Exfiltrationdist/chunk-M3BUP6XD.js
HighCross File Remote Execution Contextdist/chunk-WCFANFR2.js
HighSemantic Analysis Limiteddist/chunk-M3BUP6XD.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @canonry/canonry@7.78.0.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.78.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.