registry / @copilotkit/runtime / 1.71.1
@copilotkit/runtime@1.71.1
<img src="https://github.com/user-attachments/assets/0a6b64d9-e193-4940-a3f6-60334ac34084" alt="banner" style="border-radius: 12px; border: 2px solid #d6d4fa;" />
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo malicious install hook, persistence, command execution, or harvesting behavior was found. Because runtime network and telemetry behavior exists and complete semantic coverage was unavailable, this is best downgraded for warning rather than marked clean.
Static reason
One or more suspicious static signals were detected.
Trigger
A consumer imports and configures the runtime, then invokes its handlers or telemetry.
Impact
Application request content, annotation payloads, and telemetry properties may leave the host under consumer configuration.
Mechanism
Configured runtime HTTP, WebSocket, and telemetry requests.
AI rationale
No malicious install hook, persistence, command execution, or harvesting behavior was found. Because runtime network and telemetry behavior exists and complete semantic coverage was unavailable, this is best downgraded for warning rather than marked clean.
Evidence
dist/v2/runtime/handlers/intelligence/annotate.cjsdist/v2/runtime/intelligence-platform/client.cjsdist/graphql/resolvers/copilot.resolver.cjsdist/v2/runtime/telemetry/telemetry-client.cjs
Network endpoints3
api.intelligence.copilotkit.airealtime.intelligence.copilotkit.aiapi.cloud.copilotkit.ai
Decision evidence
public snapshotAI called this Suspicious at 72.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exports executable CommonJS and ES module runtime entry points.
- An invoked annotation handler forwards supplied payload fields to an intelligence runtime.
- The intelligence client defaults to CopilotKit-hosted API and WebSocket endpoints.
- Guardrails code posts user message content and prior messages to a configured cloud endpoint.
- Runtime telemetry can send event properties through a shared transport unless disabled or sampled out.
Evidence against
- The manifest has no preinstall, install, postinstall, or other automatic lifecycle hook.
- Network operations occur in runtime handlers and configured clients, not during installation.
- The annotation handler validates runtime, request body, user resolution, and required identifiers before forwarding data.
- No source evidence found of shell execution, filesystem harvesting, persistence, destructive actions, or reviewer-directed package text.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystem
Source & flagged code
3 flaggeddist/langgraph.cjsView file
1require("reflect-metadata");
L2: Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/langgraph.cjsView on unpkg · L1dist/v2/runtime/handlers/intelligence/annotate.cjsView file
6package = @copilotkit/runtime; repositoryIdentity = copilotkit; dependency = @copilotkit/shared
L6: const require_resolve_intelligence_user = require('../shared/resolve-intelligence-user.cjs');
L7: let _copilotkit_shared = require("@copilotkit/shared");
L8:
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/v2/runtime/handlers/intelligence/annotate.cjsView on unpkg · L6package.json
Findings
2 High5 Medium5 Low
HighCopied Package Dependency Bridgedist/v2/runtime/handlers/intelligence/annotate.cjs
HighSemantic Analysis Limitedpackage.json
MediumDynamic Requiredist/langgraph.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @copilotkit/runtime@1.71.1.
See all versions of @copilotkit/runtime for other recorded verdicts.
- Review the evidence and your use of @copilotkit/runtime@1.71.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.