@copilotkit/runtime@1.84.0
<img src="https://github.com/user-attachments/assets/0a6b64d9-e193-4940-a3f6-60334ac34084" alt="banner" style="border-radius: 12px; border: 2px solid #d6d4fa;" />
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe provider-key routing and Minimax host are consistent with explicit model selection. However, legacy runtime telemetry includes a configured cloud base URL and public key in request events, so this is a warning-level telemetry privacy risk.
Static reason
One or more suspicious static signals were detected.
Trigger
A Copilot request handled by the legacy GraphQL resolver.
Impact
The telemetry receiver may learn the configured service hostname and public key; this is a privacy concern, not evidence of secret-provider-key theft.
Mechanism
The resolver passes the key and base URL as telemetry event properties. The package discloses runtime telemetry and provides an opt-out.
AI rationale
The provider-key routing and Minimax host are consistent with explicit model selection. However, legacy runtime telemetry includes a configured cloud base URL and public key in request events, so this is a warning-level telemetry privacy risk.
Evidence
dist/graphql/resolvers/copilot.resolver.mjsdist/lib/telemetry-client.mjsdist/lib/telemetry-disclosure.mjs
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The legacy GraphQL resolver sends a telemetry event for each Copilot request and includes the x-copilotcloud-public-api-key value when present.
- The legacy telemetry helper also includes a configured cloud.base_url in its event properties.
- Runtime telemetry is disclosed at startup and can be disabled with COPILOTKIT_TELEMETRY_DISABLED or DO_NOT_TRACK.
- The model provider code uses provider-matched keys and base URLs; Minimax has its own key and endpoint.
Evidence against
- The telemetry key is explicitly named a public API key, not a private provider credential.
- The Minimax endpoint is used only in the explicit Minimax model branch.
- Intelligence API credentials are supplied through CopilotKitIntelligence configuration and sent as bearer authorization to its configured or default service.
Behavioral surface
CryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStrings
Source & flagged code
3 flaggeddist/langgraph.cjsView file
1require("reflect-metadata");
L2: Object.defineProperty(exports, Symbol.toStringTag, { value: 'Module' });
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/langgraph.cjsView on unpkg · L1dist/v2/runtime/handlers/intelligence/annotate.cjsView file
6package = @copilotkit/runtime; repositoryIdentity = copilotkit; dependency = @copilotkit/shared
L6: const require_runtime$1 = require('../../core/runtime.cjs');
L7: let _copilotkit_shared = require("@copilotkit/shared");
L8:
High
Copied Package Dependency Bridge
Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.
dist/v2/runtime/handlers/intelligence/annotate.cjsView on unpkg · L6dist/graphql/resolvers/copilot.resolver.mjs
Findings
1 High6 Medium5 Low
HighCopied Package Dependency Bridgedist/v2/runtime/handlers/intelligence/annotate.cjs
MediumDynamic Requiredist/langgraph.cjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
MediumWildcard Dependency
MediumAi Review Evidencedist/graphql/resolvers/copilot.resolver.mjs
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @copilotkit/runtime@1.84.0.
See all versions of @copilotkit/runtime for other recorded verdicts.
- Review the evidence and your use of @copilotkit/runtime@1.84.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.