@aporthq/aport-agent-guardrails
Policy enforcement guardrails for OpenClaw-compatible agent frameworks
7
Versions
Apache-2.0
License
Yes
Install Scripts
Missing
Provenance
Supply chain provenance
Status for the latest visible version.
No SLSA provenance
npm registry signatures
gitHead linked
Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.
Maintainers
uchi4jah
Keywords
openclawironclawaportagentsecurityauthorizationpolicyguardrailspre-actionai-agent
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): env-spread is used to pass process.env to a child process spawn call — standard pattern, not exfiltration. | ai | |
| install-scripts | install-script:install | AI (install-scripts): Makefile-conditional install guard; standard build tooling pattern, no arbitrary remote code execution. | ai | |
| semgrep | semgrep:base64-decode | AI (semgrep): Standard Buffer.from base64 decode in a crypto-utils helper; not obfuscation or payload hiding. | ai |