Security audit
AxonFlow Governance
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed AxonFlow governance plugin that sends governed agent activity to AxonFlow for policy checks and audit, with no hidden install-time behavior found.
Before installing, decide where governed data should go. For sensitive or production use, configure a self-hosted AxonFlow endpoint before first load, or set AXONFLOW_COMMUNITY_SAAS=0 and AXONFLOW_TELEMETRY=off where appropriate. Review the documented fail-open behavior for before_tool_call network outages and restrict governedTools, excludedTools, highRiskTools, user tokens, and override permissions to match your deployment.
SkillSpector
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
62/62 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.