registry / kcgrouter / 0.2.2

kcgrouter@0.2.2

Lightweight AI proxy gateway — route chat completions to upstream providers

AI Security Review

scanned 7d ago · by lpm-firewall-ai

At runtime, the local proxy exposes authenticated administration and provider routing. A default administrator password and predictable fallback session secret can permit unauthorized dashboard access if the service is reachable.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Starting the server via the CLI or src/index.ts.

Impact

An attacker who can reach the service may manage its configuration and API access.

Mechanism

predictable authentication defaults on a credential-managing proxy

Rationale

The static signals are mostly package-aligned proxy and daemon features, but the predictable runtime authentication defaults are a real security risk. No malicious code path was confirmed.

Evidence

package.jsonsrc/index.tssrc/db/seeders/002_seed_default_app_settings.tssrc/server/services/session.service.tssrc/cli/daemon.tssrc/server/services/provider-registry.service.ts~/.kcgrouter/db/data.sqlite~/.kcgrouter/server.pid~/.kcgrouter/server.log

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence with false-positive risk.

kcgrouter@0.2.2

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code