registry / @copilotkit/runtime / 1.69.2
@copilotkit/runtime@1.69.2
<img src="https://github.com/user-attachments/assets/0a6b64d9-e193-4940-a3f6-60334ac34084" alt="banner" style="border-radius: 12px; border: 2px solid #d6d4fa;" />
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package is a runtime library with expected configured AI/network functionality and optional integration loading. Source inspection found no lifecycle hook, shell execution, persistence, destructive behavior, or concrete malicious chain.
Static reason
One or more suspicious static signals were detected.
Trigger
Importing and configuring the runtime, then serving application requests.
Impact
No concrete unauthorized code execution, filesystem mutation, or credential harvesting chain established.
Mechanism
Runtime AI service adapters, optional integrations, and telemetry.
AI rationale
The package is a runtime library with expected configured AI/network functionality and optional integration loading. Source inspection found no lifecycle hook, shell execution, persistence, destructive behavior, or concrete malicious chain.
Evidence
package.jsondist/langgraph.cjsdist/lib/telemetry-client.cjsdist/lib/runtime/copilot-runtime.cjsdist/graphql/resolvers/copilot.resolver.cjsdist/v2/runtime/handlers/intelligence/annotate.cjsdist/v2/runtime/core/channel-manager.cjsdist/index.cjs
Network endpoints2
api.cloud.copilotkit.aiapi.intelligence.copilotkit.ai
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- No preinstall/install/postinstall lifecycle hook is declared.
- Entrypoint imports expose runtime adapters; no import-time shell or payload execution found.
- Dynamic import is limited to optional MCP/channel integrations.
Evidence against
- Runtime telemetry can send configured public API-key metadata and request telemetry unless opted out.
- Cloud and intelligence HTTP calls are runtime features activated by configured requests/services.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
TelemetryUrlStrings
WildcardDependency
Source & flagged code
4 flaggeddist/langgraph.cjsView file
1require("reflect-metadata");
L2: Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/langgraph.cjsView on unpkg · L13const require_runtime = require('./_virtual/_rolldown/runtime.cjs');
const require_consts = require('./lib/runtime/agent-integrations/langgraph/consts.cjs');
const require_agent = require('./lib/runtime/agent-integrations/langgraph/agent.cjs');
let _ag_ui_langgraph = require("@ag-ui/langgraph");
exports.CustomEventNames = require_consts.CustomEventNames;
exports.LangGraphAgent = require_agent.LangGraphAgent;
exports.LangGraphHttpAgent = _ag_ui_langgraph.LangGraphHttpAgent;
Low
Ai Review Evidence
Entrypoint imports expose runtime adapters; no import-time shell or payload execution found.
dist/langgraph.cjsView on unpkg · L3dist/v2/runtime/handlers/intelligence/annotate.cjsView file
Findings
1 High5 Medium6 Low
HighCopied Package Dependency Bridgedist/v2/runtime/handlers/intelligence/annotate.cjs
MediumDynamic Requiredist/langgraph.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowTelemetry
LowUrl Strings
LowAi Review Evidencedist/langgraph.cjs
LowAi Review Evidencedist/v2/runtime/core/channel-manager.cjs
Affected versions and remediation
This report applies to @copilotkit/runtime@1.69.2.
See all versions of @copilotkit/runtime for other recorded verdicts.
- Review the evidence and your use of @copilotkit/runtime@1.69.2 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.