registry / @grovetech/defender / 0.12.0
@grovetech/defender@0.12.0
Active runtime protection for vibe-coded apps — drops in as Express middleware (web + AI layer), blocks prompt injection, PII leaks, and sensitive paths in real time. By Grovetech AI.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiThe flagged primitives implement documented security telemetry and explicit CLI setup, not covert execution or exfiltration. No install-time hook or concrete malicious chain was found by source inspection.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Import and configure Defender, or explicitly run defender init/replay/proxy.
Impact
May send configured Defender API-key-authenticated telemetry and modify the current project only through explicit init.
Mechanism
opt-in security telemetry and user-invoked project integration
AI rationale
The flagged primitives implement documented security telemetry and explicit CLI setup, not covert execution or exfiltration. No install-time hook or concrete malicious chain was found by source inspection.
Evidence
package.jsondist/esm/cli.jsdist/esm/telemetry.jsdist/esm/ai.jsdist/esm/index.jsdist/esm/patcher.jsdist/esm/mcp-pull.jsdist/esm/mesh.jsdist/cjs/index.cjs.env.local.env.exampleREADME.md
Network endpoints3
grovetechai.com/api/defender/ingestgrovetechai.com/api/defender/install-telemetrygrovetechai.com/api/defender
Decision evidence
public snapshotAI called this Clean at 94.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- dist/esm/cli.js: init posts install telemetry and can write project patches after confirmation.
- dist/esm/telemetry.js: configured runtime batches security events to Grovetech.
Evidence against
- package.json has only prepublishOnly; no install-time lifecycle hook.
- dist/esm/cli.js runs only as the explicit defender CLI command.
- CLI project writes and package-manager invocation are limited to explicit defender init, with prompt unless --yes.
- dist/esm/ai.js redacts and truncates replay payloads before telemetry.
- dist/cjs and dist/esm contain text JavaScript only; no hidden binary/native loader found.
- No eval, dynamic code execution, credential harvesting, or foreign AI-agent config mutation found.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedREADME.mdView file
•| AI input | "ignore previous instructions", DAN/jailbreak, token bombs |
High
Ai Reviewer Manipulation
Package text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgdist/esm/cli.jsView file
4// • `defender init [--dry-run] [--yes]` — autodetekuje framework, vloží
L5: // middleware do entry filu, přidá @grovetech/defender do package.json,
L6: // vytvoří/upraví .env.example a README.md, doinstaluje balíček.
...
L9: import { fileURLToPath } from "node:url";
L10: import { spawnSync } from "node:child_process";
L11: import { PII_PATTERNS } from "./patterns.js";
...
L25: const pkgPath = join(here, "..", "..", "package.json");
L26: const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
L27: if (pkg.version && /^\d+\.\d+\.\d+/.test(pkg.version))
...
L36: const MAX_FILE_BYTES = 2 * 1024 * 1024;
L37: const DEFAULT_INGEST = "https://grovetechai.com/api/defender/install-telemetry";
L38: function walk(root) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/esm/cli.jsView on unpkg · L4Findings
2 Critical4 High3 Medium5 Low
CriticalCredential Exfiltrationdist/esm/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/esm/cli.js
HighAi Reviewer ManipulationREADME.md
HighChild Processdist/esm/cli.js
HighShell
HighRuntime Package Installdist/esm/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @grovetech/defender@0.12.0.
See all versions of @grovetech/defender for other recorded verdicts.
- Review the evidence and your use of @grovetech/defender@0.12.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.