Security audit
Agent Passport System
Security checks across malware telemetry and agentic risk
Overview
This plugin appears to do what it claims: it checks APS trust grades, gates risky tool calls, and optionally uses an APS passport key for signing.
This looks internally coherent for an APS trust-verification plugin. Before installing, be comfortable with it contacting `gateway.aeoess.com` for trust lookups/JWKS and with its ability to use a local APS passport private key for message signing if you have one configured. Also consider reviewing the package.json directly if installing via npm, since the provided artifact excerpt did not include it.
VirusTotal
No VirusTotal findings
Static analysis
No suspicious patterns detected.