@runcanary/cli@0.1.15
Canary CLI — authenticate and onboard your repo to Canary from the terminal.
AI Security Review
scanned 5d ago · by lpm-firewall-aiThe package’s behavior fits its documented Canary CLI purpose, and its telemetry is disclosed. Because runtime telemetry includes repository and agent metadata without a documented way to turn it off, classify it as suspicious telemetry rather than clean.
Static reason
One or more suspicious static signals were detected.
Trigger
CLI commands that report outcomes, including verification failures; source uploads occur when the user runs setup or verification.
Impact
This is disclosed runtime telemetry, but it includes repository and session metadata and has no documented opt-out, so users should be warned.
Mechanism
POST requests send outcome codes and optional run IDs to the Canary API. The README also documents command telemetry containing an install ID, hashed checkout path, root commit, branch, and agent session. No telemetry opt-out is documented.
AI rationale
The package’s behavior fits its documented Canary CLI purpose, and its telemetry is disclosed. Because runtime telemetry includes repository and agent metadata without a documented way to turn it off, classify it as suspicious telemetry rather than clean.
Evidence
README.mddist/canary.js~/.canary/config.json~/.canary/update-check.json
Network endpoints2
api.runcanary.airegistry.npmjs.org
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The README discloses runtime command telemetry that includes a random install ID, a salted checkout-path hash, the repository root commit, branch name, and coding-agent session.
- The CLI sends command outcomes and optional run IDs to its API; verification errors reach this path.
- Project source uploads are documented as part of explicitly running setup or verification.
Evidence against
- The telemetry is disclosed in the README, and the checkout path is hashed rather than sent directly.
- The package’s documented purpose is to onboard repositories and run cloud verification; source uploads support those features.
- The manifest’s prepare script builds the CLI; the published package entry is the CLI bundle.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
6 flaggeddist/canary.jsView file
397(Did you mean one of ${r.join(", ")}?)`:r.length===1?`
L398: (Did you mean ${r[0]}?)`:""}Ml.suggestSimilar=$y});var ql=un(Ul=>{y();var Iy=Rr("node:events").EventEmitter,Ni=Rr("node:child_process"),_t=Rr("node:path"),Pi=Rr("node:fs"),de=Rr("n...
L399: - specify the name in Command constructor or using .name()`);return n=n||{},n.isDefault&&(this._defaultCommandName=t._name),(n.noHelp||n.hidden)&&(t._hidden=!0),this._registerComma...
High
400Expecting one of '${r.join("', '")}'`);return this._lifeCycleHooks[t]?this._lifeCycleHooks[t].push(n):this._lifeCycleHooks[t]=[n],this}exitOverride(t){return t?this._exitCallback=t...
L401: - already used by option '${n.flags}'`)}this.options.push(t)}_registerCommand(t){let n=s=>[s.name()].concat(s.aliases()),r=n(t).find(s=>this._findCommand(s));if(r){let s=n(this._f...
L402: - if '${t._name}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
High
397(Did you mean one of ${r.join(", ")}?)`:r.length===1?`
L398: (Did you mean ${r[0]}?)`:""}Ml.suggestSimilar=$y});var ql=un(Ul=>{y();var Iy=Rr("node:events").EventEmitter,Ni=Rr("node:child_process"),_t=Rr("node:path"),Pi=Rr("node:fs"),de=Rr("n...
L399: - specify the name in Command constructor or using .name()`);return n=n||{},n.isDefault&&(this._defaultCommandName=t._name),(n.noHelp||n.hidden)&&(t._hidden=!0),this._registerComma...
...
L409: Expecting one of '${r.join("', '")}'`);let s=`${t}Help`;return this.on(s,o=>{let i;typeof n=="function"?i=n({error:o.error,command:o.command}):i=n,i&&o.write(`${i}
L410: `)}),this}_outputHelpIfRequested(t){let n=this._getHelpOption();n&&t.find(s=>n.is(s))&&(this.outputHelp(),this._exit(0,"commander.helpDisplayed","(outputHelp)"))}};function Hl(e){
Findings
5 High3 Medium6 Low
HighChild Processdist/canary.js
HighShelldist/canary.js
HighSame File Env Network Executiondist/canary.js
HighCommand Output Exfiltrationdist/canary.js
HighTrigger Reachable Command Output Exfiltrationdist/canary.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowWeak Cryptodist/canary.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @runcanary/cli@0.1.15.
See all versions of @runcanary/cli for other recorded verdicts.
- Review the evidence and your use of @runcanary/cli@0.1.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.