@grovetech/defender@0.33.0
Active runtime protection for vibe-coded apps — drops in as Express middleware (web + AI layer), blocks prompt injection, PII leaks, and sensitive paths in real time. By Grovetech AI.
AI Security Review
scanned 3d ago · by lpm-firewall-aiThe default runtime telemetry includes the machine hostname, an identifying detail, in POSTs to the vendor endpoint. The API-key flow flagged in the CLI is scoped to an explicit replay command and targets Grovetech’s own service, so the evidence supports a telemetry warning rather than malicious credential exfiltration.
Static reason
High-risk behavior combination matched malicious policy.; previous stored version diff introduced dangerous source
Trigger
An application creates a Defender instance; its telemetry client starts a periodic flush timer and flushes when events or requests are recorded.
Impact
Grovetech receives a machine-identifying hostname alongside usage and security events without an explicit telemetry opt-in.
Mechanism
The SDK reads the OS hostname and includes it with version, request count, and events in a POST to the configured endpoint. Event text is sanitized for secrets.
AI rationale
The default runtime telemetry includes the machine hostname, an identifying detail, in POSTs to the vendor endpoint. The API-key flow flagged in the CLI is scoped to an explicit replay command and targets Grovetech’s own service, so the evidence supports a telemetry warning rather than malicious credential exfiltration.
Evidence
dist/esm/index.jsdist/esm/telemetry.jsdist/esm/telemetry-mask.js
Network endpoints2
grovetechai.com/api/defender/ingestgrovetechai.com/api/defender/install-telemetry
Decision evidence
public snapshotAI called this Suspicious at 92.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Creating a Defender instance reads the machine hostname and passes it into the telemetry client.
- Runtime telemetry posts the hostname, version, request count, and events to its configured endpoint; the instance starts a periodic flush timer by default.
Evidence against
- The replay command sends the Defender API key to Grovetech’s own API and runs only when the user invokes `defender replay`.
- Telemetry sanitizes event excerpts and payload text, including masking detected secrets.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsPossibleObfuscationUrlStrings
Source & flagged code
8 flaggedREADME.mdView file
•| AI input | "ignore previous instructions", DAN/jailbreak, token bombs |
High
Ai Reviewer Manipulation
Package text addresses the security reviewer or scanner and tries to influence the review outcome.
README.mdView on unpkgdist/esm/cli.jsView file
4// • `defender init [--dry-run] [--yes]` — autodetekuje framework, vloží
L5: // middleware do entry filu, přidá @grovetech/defender do package.json,
L6: // vytvoří/upraví .env.example a README.md, doinstaluje balíček.
...
L9: import { fileURLToPath } from "node:url";
L10: import { spawnSync } from "node:child_process";
L11: import { PII_PATTERNS } from "./patterns.js";
...
L26: const pkgPath = join(here, "..", "..", "package.json");
L27: const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
L28: if (pkg.version && /^\d+\.\d+\.\d+/.test(pkg.version))
...
L37: const MAX_FILE_BYTES = 2 * 1024 * 1024;
L38: const DEFAULT_INGEST = "https://grovetechai.com/api/defender/install-telemetry";
L39: function walk(root) {
Critical
Credential Exfiltration
Source appears to send environment or credential material to an external endpoint.
dist/esm/cli.jsView on unpkg · L4Findings
3 Critical5 High3 Medium5 Low
CriticalCredential Exfiltrationdist/esm/cli.js
CriticalTrigger Reachable Dangerous Capabilitydist/esm/cli.js
CriticalPrevious Version Dangerous Deltadist/esm/cli.js
HighAi Reviewer ManipulationREADME.md
HighChild Processdist/esm/cli.js
HighTrigger Reachable Credential Exfiltrationdist/esm/cli.js
HighRuntime Package Installdist/esm/cli.js
HighSemantic Analysis Limiteddist/cjs/agent-identity.cjs#virtual:normalized:round1
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
Affected versions and remediation
This report applies to @grovetech/defender@0.33.0.
See all versions of @grovetech/defender for other recorded verdicts.
- Review the evidence and your use of @grovetech/defender@0.33.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.