APort Agent Guardrail

• Analyzed: May 12, 2026, 4:13 AM
• Findings: 1
• Version: 1.0.0
• Hash: 4f2897b3b4ee876c64e5c1ffb507918837f45e7b826626a4fc0615ab4bf7f2ec
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill's stated purpose is a security guardrail, which is benign. However, the `SKILL.md` instructs the AI agent to install software via `npx @aporthq/agent-guardrails` or by cloning a GitHub repository (`github.com/aporthq/aport-agent-guardrails`). These methods involve executing external code from npm or GitHub, introducing a supply chain vulnerability. While common for software installation, this constitutes a 'meaningful high-risk behavior' due to the reliance on unanalyzed external sources, classifying it as suspicious rather than benign. There is no evidence of intentional malicious behavior within the provided files themselves.