registry / @vaibot/guard / 2.1.0

@vaibot/guard@2.1.0

VAIBot Guard — local policy enforcement + tamper-evident audit daemon for AI agent tool calls. The universal decision authority the codex/claudecode/openclaw plugins route through.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No unconsented install-time attack behavior was found. An explicit user `install` command can create a VAIBot-owned persistent local policy service that audits guarded actions and may transmit configured receipts.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `vaibot-guard install`, `install-local`, or launches the service

Impact

Persistent first-party agent guard and audit telemetry when deliberately enabled

Mechanism

Local policy daemon, user-service installation, and configured receipt posting

Rationale

This is not malicious by source evidence, but it deliberately provides persistent agent-governance and telemetry capability. Flag as a transparent lifecycle-risk warning rather than block.

Evidence

package.jsonscripts/vaibot-guard.mjsscripts/vaibot-guard-service.mjsscripts/lib/guard-install.mjsscripts/lib/guard-launch.mjsscripts/lib/creds.mjs~/.config/vaibot-guard/vaibot-guard.env~/.config/systemd/user/vaibot-guard.service~/.vaibot/credentials.json~/.vaibot/guard/guard.json<workspace>/.vaibot-guard/

Network endpoints5

@vaibot/guard@2.1.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code