wormhole-guard 0.1.1 · wormhole-x402 0.1.2

Two packages, one thesis: an agent obeys instructions it did not write, so the places those instructions live need integrity checks.

wormhole-guard (PyPI, Python 3.8+, zero dependencies) — integrity monitoring and hardening for agent instruction files (AGENTS.md, CLAUDE.md, .cursor/rules, and eleven more formats), MCP tool definitions, and agent-to-agent handoffs. Prevention first: harden drops the write bit and pre-creates absent config paths, guard inspects writes before they land, outbound refuses to pass a payload to another agent. Detection rules are triage on top, and every rule ships with a benign twin that must stay clean.

pipx install wormhole-guard
wormhole scan ~ --blast-radius

wormhole-x402 (npm, TypeScript) — refuses to sign a Solana payment that does not match the x402 quote. The quote arrives in the server's HTTP 402 response, on a channel the model never touches, so a compromised agent cannot forge either side of the comparison. Offline, ~1ms, no RPC.

npm install wormhole-x402

Everything runs locally. No account, no network calls, no telemetry — verifiable by grep, and the README shows the command.

Full story: https://agentwormhole.com