Security audit
Nodemon Config Validator
Security checks for vulnerabilities and agentic risk
Overview
This is a straightforward local nodemon configuration checker that reads selected config files and reports validation findings without network, credential, persistence, or mutation behavior.
Install only if you are comfortable running the included Python validator locally. Run it against nodemon config files you intend to inspect, and avoid sharing its output publicly if your config includes sensitive paths, commands, or environment variable names.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.