registry / @canonry/canonry / 7.83.0
@canonry/canonry@7.83.0
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe reviewed findings map to ordinary functionality for this self-hosted AI visibility platform: provider credentials follow configured provider routes, telemetry is disclosed with an opt-out, and package-manager execution is part of a plugin installer. The flagged credential and Unicode patterns did not establish malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
CLI use can emit disclosed telemetry and sync the package’s own previously installed skills; provider requests occur when users invoke provider features.
Impact
No malicious impact identified; observed actions support the package’s stated CLI, provider and agent-skill features.
Mechanism
Telemetry checks the preference setting and goes to Canonry’s telemetry endpoint. Provider keys follow configured provider routing. The flagged subprocess code runs a package-manager install scoped to the plugin directory.
AI rationale
The reviewed findings map to ordinary functionality for this self-hosted AI visibility platform: provider credentials follow configured provider routes, telemetry is disclosed with an opt-out, and package-manager execution is part of a plugin installer. The flagged credential and Unicode patterns did not establish malicious behavior.
Network endpoints3
canonry.ai/api/telemetryopenrouter.ai/api/v1api.ads.openai.com/v1
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest lists build, typecheck, test and lint scripts, with no install lifecycle hook.
- CLI telemetry is disclosed as anonymous and can be disabled; event delivery checks the telemetry preference.
- Provider configuration surfaces custom base URLs for review, consistent with user-configured provider routing.
- The flagged package-manager execution is an installer helper scoped to a plugin directory and a package spec.
- CLI startup syncs only the package’s own skills when matching managed skill installs already exist.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
9 flaggeddist/chunk-OIHR2BDK.jsView file
•matchType = previous_version_dangerous_delta
matchedPackage = @canonry/canonry@7.82.1
matchedIdentity = npm:QGNhbm9ucnkvY2Fub25yeQ:7.82.1
similarity = 0.858
summary = stored previous version shares package body but lacks this dangerous source file
Critical
Previous Version Dangerous Delta
This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.
dist/chunk-OIHR2BDK.jsView on unpkg61129// ../integration-commoncrawl/src/plugin-installer.ts
L61130: import { spawn } from "child_process";
L61131: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-OIHR2BDK.jsView on unpkg · L611291252});
L1253: return `${PREFIX}${salt.toString("base64")}$${derived.toString("base64")}`;
L1254: }
...
L1559: });
L1560: app.post("/auth/login", async (request, reply) => {
L1561: const parsed = loginRequestSchema.safeParse(request.body);
...
L5058: try {
L5059: const parsed = new URL(/^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`);
L5060: return parsed.hostname.toLowerCase().replace(/\.$/, "") || null;
...
L6840: if (first === 10 || first === 172 && second >= 16 && second <= 31 || first === 192 && second === 168) {
L6841: return "which is private space";
L6842: }
Findings
4 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-PHVIMUAQ.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-PHVIMUAQ.js
CriticalPrevious Version Dangerous Deltadist/chunk-OIHR2BDK.js
HighChild Processdist/chunk-OIHR2BDK.js
HighCredential Redirect Persistencedist/chunk-DRZDOL3P.js
HighCommand Output Exfiltrationdist/chunk-OIHR2BDK.js
HighCross File Remote Execution Contextdist/chunk-N3PYCQYT.js
HighSemantic Analysis Limiteddist/chunk-OIHR2BDK.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @canonry/canonry@7.83.0.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.83.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.