registry / @canonry/canonry / 7.87.2
@canonry/canonry@7.87.2
Self-hosted AI visibility (AEO) platform: track how ChatGPT, Claude, Gemini, and Perplexity cite your domain, join it with Search Console, GA4, server-side traffic, and paid media, and fix what you find through agent tools (CLI, REST, MCP). Local SQLite.
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe flagged code is consistent with the package’s provider integrations, daemon management and secret-redacting diagnostics. The additional sentiment data transfer is disclosed and gated by explicit configuration.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
Provider calls occur when the configured service feature is used; sentiment analysis requires install and project enablement.
Impact
No unauthorized credential transfer or harmful automatic action was found.
Mechanism
Configured provider requests use the provider’s endpoint and key; the diagnostic code redacts secret-like values.
AI rationale
The flagged code is consistent with the package’s provider integrations, daemon management and secret-redacting diagnostics. The additional sentiment data transfer is disclosed and gated by explicit configuration.
Network endpoints1
openrouter.ai/api/v1
Decision evidence
public snapshotAI called this Clean at 95.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes a library and CLI and lists build, typecheck, test and lint scripts; it has no install lifecycle script.
- Sentiment analysis discloses that enabling it sends stored answer text and related project data to TypeSafe; project-level enablement defaults to false and is gated by install configuration.
- The OpenRouter adapter sends its API key to the configured base URL or the documented OpenRouter API endpoint as part of provider requests.
- The flagged diagnostic code redacts values associated with passwords, tokens, credentials, cookies and API keys.
Evidence against
- The CLI includes ordinary daemon management that spawns a local process and checks its health endpoint.
- The reviewed source shows no browser credential collection or automatic credential forwarding to an unrelated host.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
Source & flagged code
9 flaggeddist/chunk-LYTBHEID.jsView file
6647// src/commands/daemon.ts
L6648: import { spawn } from "child_process";
L6649: import fs from "fs";
High
Child Process
Package source references child process execution.
dist/chunk-LYTBHEID.jsView on unpkg · L6647395Cross-file remote execution chain: dist/chunk-LYTBHEID.js spawns dist/chunk-F643WELJ.js; helper contains network access plus dynamic code execution.
L395: try {
L396: value = JSON.parse(readFileSync(source === "-" ? 0 : source, "utf8"));
L397: } catch {
...
L417: if (printSeoJson(value, format)) return;
L418: console.log(`SEO data: ${value.available ? "available" : "unavailable"}`);
L419: if (value.reason) console.log(value.reason);
...
L653: access: "stored",
L654: help: "Host operator only. Read private upstream receipts and cost for reconciliation.",
L655: run: (input) => showSeoOperatorTask(requirePositional(input, 0, { command: "seo.operator.task", usage: "canonry seo operator task <task-id>", message: "task ID is required" }), inp...
...
L3141: message: `Unknown --from value "${opts.
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
dist/chunk-LYTBHEID.jsView on unpkg · L395Findings
4 Critical5 High3 Medium5 Low
CriticalBrowser Credential Phishingdist/chunk-F643WELJ.js
CriticalTrojan Source Unicodeassets/assets/vendor-yaml-Y43rmNgW.js
CriticalTrigger Reachable Dangerous Capabilitydist/chunk-F643WELJ.js
CriticalPrevious Version Dangerous Deltadist/chunk-AI75KS7G.js
HighChild Processdist/chunk-LYTBHEID.js
HighCredential Redirect Persistencedist/chunk-AI75KS7G.js
HighCommand Output Exfiltrationdist/chunk-AI75KS7G.js
HighCross File Remote Execution Contextdist/chunk-LYTBHEID.js
HighSemantic Analysis Limiteddist/chunk-AI75KS7G.js
MediumNetwork
MediumEnvironment Vars
Medium
Affected versions and remediation
This report applies to @canonry/canonry@7.87.2.
See all versions of @canonry/canonry for other recorded verdicts.
- Review the evidence and your use of @canonry/canonry@7.87.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.