registry / @grovetech/defender / 0.14.0
@grovetech/defender@0.14.0
Active runtime protection for vibe-coded apps — drops in as Express middleware (web + AI layer), blocks prompt injection, PII leaks, and sensitive paths in real time. By Grovetech AI.
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection found no install-time execution, credential harvesting, stealth persistence, or unconsented exfiltration. Network and child-process behavior is confined to documented, user-invoked security-service and setup functionality.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Explicit defender init/replay/proxy command or application integration with an API key
Impact
Can modify a project during confirmed init and send configured telemetry or replay traffic; no unconsented installation-time action was found.
Mechanism
security middleware, opt-in telemetry, and user-directed CLI operations
AI rationale
Source inspection found no install-time execution, credential harvesting, stealth persistence, or unconsented exfiltration. Network and child-process behavior is confined to documented, user-invoked security-service and setup functionality.
Evidence
package.jsondist/esm/cli.jsdist/esm/telemetry.jsdist/esm/index.jsdist/esm/mesh-signature.jsdist/esm/patcher.js.env.local.env.exampleREADME.md
Network endpoints3
grovetechai.com/api/defender/ingestgrovetechai.com/api/defender/install-telemetrygrovetechai.com/api/defender
Decision evidence
public snapshotAI called this Clean at 90.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
Evidence against
- package.json has only prepublishOnly; no install-time hook.
- dist/esm/cli.js mutates projects only through explicit defender init, with dry-run and confirmation unless --yes.
- CLI telemetry sends install status only; it does not upload scanned file or environment contents.
- dist/esm/telemetry.js sends configured security-event telemetry with the configured service API key.
- dist/esm/mesh-signature.js redacts PII and replaces URLs/long tokens before optional mesh contribution.
- Replay, proxy, mesh, and MCP polling are explicit runtime/CLI features, not import-time execution.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedREADME.mdView file
•| AI input | "ignore previous instructions", DAN/jailbreak, token bombs |
High
Ai Reviewer Manipulation
Package text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgdist/esm/cli.jsView file
4// • `defender init [--dry-run] [--yes]` — autodetekuje framework, vloží
L5: // middleware do entry filu, přidá @grovetech/defender do package.json,
L6: // vytvoří/upraví .env.example a README.md, doinstaluje balíček.
...
L9: import { fileURLToPath } from "node:url";
L10: import { spawnSync } from "node:child_process";
L11: import { PII_PATTERNS } from "./patterns.js";
...
L25: const pkgPath = join(here, "..", "..", "package.json");
L26: const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
L27: if (pkg.version && /^\d+\.\d+\.\d+/.test(pkg.version))
...
L36: const MAX_FILE_BYTES = 2 * 1024 * 1024;
L37: const DEFAULT_INGEST = "https://grovetechai.com/api/defender/install-telemetry";
L38: function walk(root) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/esm/cli.jsView on unpkg · L4Findings
2 Critical4 High3 Medium5 Low
CriticalCredential Exfiltrationdist/esm/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/esm/cli.js
HighAi Reviewer ManipulationREADME.md
HighChild Processdist/esm/cli.js
HighShell
HighRuntime Package Installdist/esm/cli.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @grovetech/defender@0.14.0.
See all versions of @grovetech/defender for other recorded verdicts.
- Review the evidence and your use of @grovetech/defender@0.14.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.