Canon Guardian

• Risk level: Low
• Analyzed: May 10, 2026, 3:39 PM
• Findings: 0
• Version: 1.0.1
• Hash: 246664e83a28b0ffd177669b563fdea2f5849d63d2ac80d4a6c0dc5d18efe9a8

Overview

Canon Guardian mostly does what it says, but its file-loading boundary is not strict enough and could inject unintended local file contents into the model context.

Review the configured canonFiles carefully before installing. Use only simple, trusted files inside the workspace, avoid symlinks, and do not include secrets. There is no evidence of hidden network exfiltration or credential use, but the path handling should be hardened before using this with untrusted workspaces.