registry / @canonry/canonry / 7.78.2
@canonry/canonry@7.78.2
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package has no install hooks, and its CLI runs only when invoked. Runtime telemetry is disclosed, sent to Canonry’s own endpoint, and can be disabled; the reviewed credential flows serve configured providers.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Telemetry and other CLI behavior run when a user invokes the CLI; provider requests follow configured operations.
Impact
No unauthorized credential collection, account actions, install-time data transfer, or other attack behavior was found.
Mechanism
Telemetry is sent to Canonry’s telemetry endpoint with anonymous identifiers and runtime metadata. Provider API keys are used in requests to configured provider endpoints.
AI rationale
The package has no install hooks, and its CLI runs only when invoked. Runtime telemetry is disclosed, sent to Canonry’s own endpoint, and can be disabled; the reviewed credential flows serve configured providers.
Network endpoints1
canonry.ai/api/telemetry
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package has no install lifecycle hooks; its declared binaries and library entry point are explicit.
- The CLI runs its command handler only when invoked as the entry point.
- The CLI discloses anonymous telemetry and tells users how to disable it.
- Telemetry goes to Canonry’s own endpoint and carries anonymous or generated identifiers plus runtime metadata.
- The password and login references are schemas for the application’s own user accounts.
- OpenRouter credentials are sent as bearer authorization to the configured provider endpoint.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggeddist/chunk-PRCBHOVR.jsView file
60653// ../integration-commoncrawl/src/plugin-installer.ts
L60654: import { spawn } from "child_process";
L60655: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-PRCBHOVR.jsView on unpkg · L606531230});
L1231: return `${PREFIX}${salt.toString("base64")}$${derived.toString("base64")}`;
L1232: }
...
L1537: });
L1538: app.post("/auth/login", async (request, reply) => {
L1539: const parsed = loginRequestSchema.safeParse(request.body);
...
L4998: try {
L4999: const parsed = new URL(/^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`);
L5000: return parsed.hostname.toLowerCase().replace(/\.$/, "") || null;
...
L6780: if (first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168) {
L6781: return "which is private space";
L6782: }
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/chunk-PRCBHOVR.jsView on unpkg · L1230•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
Findings
3 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-PM2DB3HE.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-PM2DB3HE.js
HighChild Processdist/chunk-PRCBHOVR.js
HighCredential Redirect Persistencedist/chunk-COUM462G.js
HighCommand Output Exfiltrationdist/chunk-PRCBHOVR.js
HighCross File Remote Execution Contextdist/chunk-UHCOJCT3.js
HighSemantic Analysis Limiteddist/chunk-PRCBHOVR.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to @canonry/canonry@7.78.2.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.78.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.