registry / Telemetry / @copilotkit/runtime

@copilotkit/runtime

This report shows the evidence for @copilotkit/runtime@1.84.0. 0 of 44 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

The provider-key routing and Minimax host are consistent with explicit model selection. However, legacy runtime telemetry includes a configured cloud base URL and public key in request events, so this is a warning-level telemetry privacy risk.

Static reason

One or more suspicious static signals were detected.

Trigger

A Copilot request handled by the legacy GraphQL resolver.

Impact

The telemetry receiver may learn the configured service hostname and public key; this is a privacy concern, not evidence of secret-provider-key theft.

Mechanism

The resolver passes the key and base URL as telemetry event properties. The package discloses runtime telemetry and provides an opt-out.

AI rationale

Evidence

dist/graphql/resolvers/copilot.resolver.mjsdist/lib/telemetry-client.mjsdist/lib/telemetry-disclosure.mjs

Decision evidence

public snapshot

AI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The legacy GraphQL resolver sends a telemetry event for each Copilot request and includes the x-copilotcloud-public-api-key value when present.
The legacy telemetry helper also includes a configured cloud.base_url in its event properties.
Runtime telemetry is disclosed at startup and can be disabled with COPILOTKIT_TELEMETRY_DISABLED or DO_NOT_TRACK.
The model provider code uses provider-matched keys and base URLs; Minimax has its own key and endpoint.

Evidence against

The telemetry key is explicitly named a public API key, not a private provider credential.
The Minimax endpoint is used only in the explicit Minimax model branch.
Intelligence API credentials are supplied through CopilotKitIntelligence configuration and sent as bearer authorization to its configured or default service.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStrings

Source & flagged code

3 flagged

dist/langgraph.cjsView file

1require("reflect-metadata"); L2: Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/langgraph.cjsView on unpkg · L1

dist/v2/runtime/handlers/intelligence/annotate.cjsView file

6package = @copilotkit/runtime; repositoryIdentity = copilotkit; dependency = @copilotkit/shared L6: const require_runtime$1 = require('../../core/runtime.cjs'); L7: let _copilotkit_shared = require("@copilotkit/shared"); L8:

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/v2/runtime/handlers/intelligence/annotate.cjsView on unpkg · L6

dist/graphql/resolvers/copilot.resolver.mjs

Findings

1 High6 Medium5 Low

HighCopied Package Dependency Bridgedist/v2/runtime/handlers/intelligence/annotate.cjs

MediumDynamic Requiredist/langgraph.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

MediumAi Review Evidencedist/graphql/resolvers/copilot.resolver.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @copilotkit/runtime@1.84.0.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @copilotkit/runtime@1.84.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 03:49:50.441Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

44 known versions

1.84.0latestshownSuspiciousTelemetryWarnPublishedNov 3, 2026, 3:44 AM 1.83.0SuspiciousCredential ExfiltrationWarnPublishedOct 28, 2026, 10:24 AM 1.82.0Clean—AllowPublishedOct 27, 2026, 10:01 PM 1.81.0Scan Failed—AllowUnder ReviewOct 27, 2026, 1:51 PM

registry / Telemetry / @copilotkit/runtime

@copilotkit/runtime

This report shows the evidence for @copilotkit/runtime@1.84.0. 0 of 44 known versions are blocked or flagged. See all versions.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.

Trigger

A Copilot request handled by the legacy GraphQL resolver.

Impact

The telemetry receiver may learn the configured service hostname and public key; this is a privacy concern, not evidence of secret-provider-key theft.

Mechanism

The resolver passes the key and base URL as telemetry event properties. The package discloses runtime telemetry and provides an opt-out.

AI rationale

Evidence

dist/graphql/resolvers/copilot.resolver.mjsdist/lib/telemetry-client.mjsdist/lib/telemetry-disclosure.mjs

Decision evidence

public snapshot

AI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The legacy GraphQL resolver sends a telemetry event for each Copilot request and includes the x-copilotcloud-public-api-key value when present.
The legacy telemetry helper also includes a configured cloud.base_url in its event properties.
Runtime telemetry is disclosed at startup and can be disabled with COPILOTKIT_TELEMETRY_DISABLED or DO_NOT_TRACK.
The model provider code uses provider-matched keys and base URLs; Minimax has its own key and endpoint.

Evidence against

The telemetry key is explicitly named a public API key, not a private provider credential.
The Minimax endpoint is used only in the explicit Minimax model branch.
Intelligence API credentials are supplied through CopilotKitIntelligence configuration and sent as bearer authorization to its configured or default service.

Behavioral surface

Source

CryptoDynamicRequireEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStrings

Source & flagged code

3 flagged

dist/langgraph.cjsView file

1require("reflect-metadata"); L2: Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/langgraph.cjsView on unpkg · L1

dist/v2/runtime/handlers/intelligence/annotate.cjsView file

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

dist/v2/runtime/handlers/intelligence/annotate.cjsView on unpkg · L6

dist/graphql/resolvers/copilot.resolver.mjs

Findings

1 High6 Medium5 Low

HighCopied Package Dependency Bridgedist/v2/runtime/handlers/intelligence/annotate.cjs

MediumDynamic Requiredist/langgraph.cjs

MediumNetwork

MediumEnvironment Vars

MediumStructural Risk Force Deep Review

MediumWildcard Dependency

MediumAi Review Evidencedist/graphql/resolvers/copilot.resolver.mjs

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

Affected versions and remediation

This report applies to @copilotkit/runtime@1.84.0.

The versions list below shows the verdict for each recorded version.

Review the evidence and your use of @copilotkit/runtime@1.84.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-11-03 03:49:50.441Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

Versions

44 known versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

AI Security Review

Decision evidence

Source & flagged code

Findings

Affected versions and remediation

Versions

Runtime surface

Behavioral surface