copilot-api-node20@0.46.0
Turn GitHub Copilot or Microsoft Foundry into an OpenAI/Anthropic API compatible server. Usable with Claude Code! (Node v20+ fork)
AI Security Review
scanned 1d ago · by lpm-firewall-aiThe package discloses opt-out error reporting, but its default reporter also sends upstream error text that the README does not list among the collected fields. This is a limited, runtime telemetry concern; the inspected source does not establish credential theft or unrelated command execution.
Static reason
One or more suspicious static signals were detected.
Trigger
A server-side error with status code 500 or higher.
Impact
Upstream error text could disclose details not covered by the stated report description.
Mechanism
The reporter posts error metadata and a redacted, truncated upstreamErrorMessage to the publisher's reporting endpoint.
AI rationale
The package discloses opt-out error reporting, but its default reporter also sends upstream error text that the README does not list among the collected fields. This is a limited, runtime telemetry concern; the inspected source does not establish credential theft or unrelated command execution.
Evidence
dist/main.mjsREADME.md
Network endpoints1
copilot-api.barazany.dev/report
Decision evidence
public snapshotAI called this Suspicious at 83.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package exposes dist/main.mjs as its command entry point.
- Error reporting is enabled by default and targets copilot-api.barazany.dev/report.
- The report payload includes upstreamErrorMessage, with local path redaction and a 600-character limit.
- The README describes the reports as sanitized but does not mention sending upstream error messages.
Evidence against
- The README discloses automatic error reporting and provides --no-error-reporting and COPILOT_API_ERROR_REPORTING=0 opt-outs.
- The reporter sends error metadata rather than an identified credential or prompt field.
Behavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsMinifiedTrivialUrlStrings
NoLicense
Source & flagged code
7 flaggeddist/main.mjsView file
1#!/usr/bin/env node
L2: import{defineCommand as e,runMain as t}from"citty";import r,{LogLevels as o,consola as n}from"consola";import a from"node:fs/promises";import i from"node:os";import s from"node:pat...
High
1#!/usr/bin/env node
L2: import{defineCommand as e,runMain as t}from"citty";import r,{LogLevels as o,consola as n}from"consola";import a from"node:fs/promises";import i from"node:os";import s from"node:pat...
High
1#!/usr/bin/env node
L2: import{defineCommand as e,runMain as t}from"citty";import r,{LogLevels as o,consola as n}from"consola";import a from"node:fs/promises";import i from"node:os";import s from"node:pat...
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/main.mjsView on unpkg · L1Findings
7 High3 Medium6 Low
HighChild Processdist/main.mjs
HighShelldist/main.mjs
HighSame File Env Network Executiondist/main.mjs
HighCredential Redirect Persistencedist/main.mjs
HighCommand Output Exfiltrationdist/main.mjs
HighCopied Package Dependency Bridgedist/main.mjs
HighTrigger Reachable Command Output Exfiltrationdist/main.mjs
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to copilot-api-node20@0.46.0.
See all versions of copilot-api-node20 for other recorded verdicts.
- Review the evidence and your use of copilot-api-node20@0.46.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.