registry / @canonry/canonry / 7.83.2
@canonry/canonry@7.83.2
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe reviewed findings match the package's self-hosted AI platform functionality. The process execution is tied to optional DuckDB plugin setup, and the examined provider credential flow uses its configured endpoint.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Optional DuckDB setup is available through the backlinks install route; provider requests occur when those integrations are used.
Impact
No malicious impact was identified in the reviewed paths.
Mechanism
The installer adds the DuckDB plugin, and the OpenRouter integration sends its configured key to the configured base URL, defaulting to OpenRouter.
AI rationale
The reviewed findings match the package's self-hosted AI platform functionality. The process execution is tied to optional DuckDB plugin setup, and the examined provider credential flow uses its configured endpoint.
Network endpoints1
openrouter.ai/api/v1
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest describes a self-hosted AI visibility platform and declares CLI and MCP entry points.
- The manifest lists build, typecheck, test, and lint scripts, with no lifecycle hook.
- DuckDB installation is exposed through a dedicated backlinks install route.
- The DuckDB installer runs the package manager to add the DuckDB plugin.
- OpenRouter requests send the configured API key to the configured base URL, with OpenRouter's official API as the default.
- The flagged login schema is for the package's own name-and-password authentication.
Evidence against
- The DuckDB install behavior is scoped to an optional plugin feature rather than running during package installation or import.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsMinifiedPossibleObfuscationUrlStrings
Source & flagged code
8 flaggeddist/chunk-5AGYH5PX.jsView file
61150// ../integration-commoncrawl/src/plugin-installer.ts
L61151: import { spawn } from "child_process";
L61152: import fs4 from "fs/promises";
High
Child Process
Package source references child process execution.
dist/chunk-5AGYH5PX.jsView on unpkg · L61150•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/chunk-5AGYH5PX.js:
oauthAuthorizationCodes,
function isMcpAuthorizationRoute(request) {
throw forbidden(`This action requires the "${scope}" scope on your API key.`);
var NARROW_KEY_DENIED_MESSAGE = "This API key is narrower than the install, so it cannot use an administrator surface.";
throw forbidden("Internal diagnostics require a host-approved operator API key. Customer accounts and scopes cannot grant operator access.");
function requirePaidReadScope(request, allowedScopes = [ADS_WRITE_SCOPE, ADS_APPROVE_SCOPE, ADS_ACTIVATE_SCOPE], denialMessage = "This API key was not granted access to OpenAI Ads ...
throw forbidden("This AP
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/chunk-5AGYH5PX.jsView on unpkgFindings
3 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-PHVIMUAQ.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-PHVIMUAQ.js
HighChild Processdist/chunk-5AGYH5PX.js
HighCredential Redirect Persistencedist/chunk-5AGYH5PX.js
HighCommand Output Exfiltrationdist/chunk-5AGYH5PX.js
HighCross File Remote Execution Contextdist/chunk-V52KSHH7.js
HighSemantic Analysis Limiteddist/chunk-5AGYH5PX.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
Low
Affected versions and remediation
This report applies to @canonry/canonry@7.83.2.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.83.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.