Security audit
Provenance Guard
Security checks for vulnerabilities and agentic risk
Overview
The plugin’s monitoring, approval controls, and local storage fit its security purpose, although its separate core dependency was unavailable for review.
This beta plugin can inspect conversations and tool results, alter replies, block actions, and retain local state. Run /guard doctor and configure owner-only approvals before relying on it. Shadow mode still enforces some protections. The separate core dependency was unavailable, so full protection and privacy claims could not be verified.
SkillSpector was not run because this plugin release contains no bundled skills.
Endor dependency reachability
Checked Nov 8, 2026 · 8:55 PM UTC
No reachable vulnerabilities reported
Endor dependency scan completed.