registry / @aarvionai/guard / 0.2.31

@aarvionai/guard@0.2.31

Govern your local OpenClaw with Aarvion

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 5 file(s), 31.4 KB of source, external domains: github.com

Source & flagged code

3 flagged

bin/aarvion-guard.jsView file

Lines 1-29javascript

1#!/usr/bin/env node

2'use strict'

4// Thin launcher for `npx @aarvionai/guard`: downloads the platform binary from

5// GitHub Releases into a cache on first use, then execs it with the given args.

6const fs = require('fs')

7const os = require('os')

8const path = require('path')

9const https = require('https')

10const { spawnSync } = require('child_process')

High

Child Process

Package source references child process execution.

bin/aarvion-guard.jsView on unpkg · L9

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/aarvion-guard.jsView on unpkg · L3

12const REPO = 'Aarvion-AI/aarvion-guard-dist'

13// The release tag the binaries live under, decoupled from the npm package

14// version so shim-only fixes don't require rebuilding binaries.

15const BINARY_TAG = 'v0.2.31'

17function assetName() {

18 const platform = os.platform()

19 const arch = { x64: 'amd64', arm64: 'arm64' }[os.arch()]

20 const osName = { darwin: 'darwin', linux: 'linux', win32: 'windows' }[platform]

21 if (!osName || !arch) {

22 console.error(`unsupported platform: ${platform}/${os.arch()}`)

23 process.exit(1)

24 }

25 // Windows ships amd64 only (the pinned OPA has no windows/arm64 build);

26 // arm64 Windows runs it under the OS's amd64 emulation.

27 if (osName === 'windows') return 'aarvion-guard_windows_amd64.exe'

28 return `aarvion-guard_${osName}_${arch}`

29}

Lines 61-101javascript

61 res.on('error', fail)

62 res.pipe(file)

63 file.on('finish', () =>

64 file.close(() => {

65 if (expected && fs.statSync(dest).size

Source & flagged code

3 flagged · loading source

bin/aarvion-guard.jsView file

9const https = require('https') L10: const { spawnSync } = require('child_process') L11:

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code