@runcanary/cli@0.1.11
Canary CLI — authenticate and onboard your repo to Canary from the terminal.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package performs guarded agent configuration during an explicit user login flow. This warrants a warning for agent capability abuse, but the inspected source does not establish malicious install-time behavior or a concrete attack.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the login command without disabling hooks or agent skills.
Impact
This adds an agent-level pre-tool or push-check capability; it is an explicit-command configuration mutation, not a confirmed covert attack.
Mechanism
The login flow calls the hook installer, which selects detected default agent targets and can enable Codex hooks in its configuration.
AI rationale
The package performs guarded agent configuration during an explicit user login flow. This warrants a warning for agent capability abuse, but the inspected source does not establish malicious install-time behavior or a concrete attack.
Evidence
dist/canary.js
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package exposes a CLI entrypoint and its metadata has no install or postinstall hook.
- A successful login invokes hook setup by default unless the user disables hooks or agent skills.
- Hook setup selects detected default coding-agent targets and calls their install routines.
- The Codex target can modify its configuration to enable hooks.
Evidence against
- The configuration change is reached through an explicit CLI login action, not an npm install lifecycle.
- No confirmed credential export, destructive action, or remote code execution was found in the inspected paths.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetwork
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
5 flaggeddist/canary.jsView file
12(Did you mean one of ${r.join(", ")}?)`:r.length===1?`
L13: (Did you mean ${r[0]}?)`:""}wo.suggestSimilar=ac});var vo=Ne(xo=>{var cc=ft("node:events").EventEmitter,Qn=ft("node:child_process"),we=ft("node:path"),Zn=ft("node:fs"),L=ft("node:p...
L14: - specify the name in Command constructor or using .name()`);return n=n||{},n.isDefault&&(this._defaultCommandName=e._name),(n.noHelp||n.hidden)&&(e._hidden=!0),this._registerComma...
High
12(Did you mean one of ${r.join(", ")}?)`:r.length===1?`
L13: (Did you mean ${r[0]}?)`:""}wo.suggestSimilar=ac});var vo=Ne(xo=>{var cc=ft("node:events").EventEmitter,Qn=ft("node:child_process"),we=ft("node:path"),Zn=ft("node:fs"),L=ft("node:p...
L14: - specify the name in Command constructor or using .name()`);return n=n||{},n.isDefault&&(this._defaultCommandName=e._name),(n.noHelp||n.hidden)&&(e._hidden=!0),this._registerComma...
...
L24: Expecting one of '${r.join("', '")}'`);let o=`${e}Help`;return this.on(o,i=>{let s;typeof n=="function"?s=n({error:i.error,command:i.command}):s=n,s&&i.write(`${s}
L25: `)}),this}_outputHelpIfRequested(e){let n=this._getHelpOption();n&&e.find(o=>n.is(o))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function _o(t){r...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/canary.jsView on unpkg · L12Findings
4 High3 Medium6 Low
HighChild Processdist/canary.js
HighSame File Env Network Executiondist/canary.js
HighCommand Output Exfiltrationdist/canary.js
HighTrigger Reachable Command Output Exfiltrationdist/canary.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/canary.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @runcanary/cli@0.1.11.
See all versions of @runcanary/cli for other recorded verdicts.
- Review the evidence and your use of @runcanary/cli@0.1.11 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.