Security audit
AxonFlow Governance
Security checks across malware telemetry and agentic risk
Overview
This is a disclosed AxonFlow governance plugin that sends governed agent data to AxonFlow for policy checks and audits, with self-hosting and opt-out controls documented.
Before installing, decide where governed data may go. For real, regulated, personal, or proprietary workloads, configure a self-hosted AxonFlow endpoint and consider setting AXONFLOW_TELEMETRY=off; set AXONFLOW_COMMUNITY_SAAS=0 if you do not want zero-config SaaS registration. Keep client secrets, license tokens, and user tokens out of source control, and avoid onError=allow if you need fail-closed enforcement.
SkillSpector
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
No suspicious patterns detected.