@copilotkit/runtime@1.68.1
<img src="https://github.com/user-attachments/assets/0a6b64d9-e193-4940-a3f6-60334ac34084" alt="banner" style="border-radius: 12px; border: 2px solid #d6d4fa;" />
AI Security Review
scanned 3mo ago · by lpm-firewall-aiStatic signals correspond to an AI runtime's documented telemetry, cloud guardrails, and optional provider integrations. No concrete malicious chain, lifecycle execution, persistence, exfiltration of harvested secrets, or destructive behavior was found.
Decision evidence
public snapshot- Runtime telemetry can send event properties through the CopilotKit shared client.
- Cloud guardrails POST user-request content to the configured CopilotKit cloud endpoint.
- package.json has no preinstall, install, postinstall, or bin hook.
- Telemetry is runtime-triggered, sampled, opt-out capable, and disclosed in source.
- Cloud request is only made when guardrails configuration and a public API key are supplied.
- No child-process execution, eval/vm, filesystem writes, credential-file harvesting, or agent-config mutation was found in inspected code.
Source & flagged code
2 flaggedPackage source references dynamic require/import behavior.
dist/langgraph.cjsView on unpkg · L1Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/v2/runtime/handlers/intelligence/annotate.cjsView on unpkg · L6Findings
Affected versions and remediation
This report applies to @copilotkit/runtime@1.68.1.
See all versions of @copilotkit/runtime for other recorded verdicts.
- Review the evidence and your use of @copilotkit/runtime@1.68.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.