@txlemetry/warlock

Security scanner for Txlemetry agentic workflows.

Warlock scans untrusted content using bundled YARA-X rules and returns the matches for the caller to handle. It detects prompt injection, secret exfiltration, destructive operations, supply-chain risks, and unsafe analytics integration changes.

Install

npm install @txlemetry/warlock

Use

import { scan } from '@txlemetry/warlock'

const result = await scan(content)

if (result.matched) {
  for (const match of result.matches) {
    console.log(match.rule, match.metadata.severity)
  }
}

The package is a detection engine, not an enforcement engine: callers decide whether a finding should block, warn, or be logged.

License

MIT