Skip to content

Security: FluxKnight/ScoutShield-AI

Security

SECURITY.md

Security Notes

ScoutShield AI is built for defensive scanning and student safety.

Data handling

  • Message and screenshot text are analyzed in the browser.
  • Link live checks send only the submitted URL to the Netlify function.
  • The included function queries DNS-over-HTTPS, RDAP, and URLHaus for reputation context.
  • No database, account system, or persistent logging is included in this package.

Safe-use boundaries

Allowed use:

  • checking suspicious links and messages
  • student safety education
  • defensive phishing awareness
  • safe training cases using example domains

Not supported:

  • creating phishing pages
  • collecting credentials
  • bypassing security controls
  • automating spam, impersonation, or abuse

Reporting model

ScoutShield provides risk scoring, not certainty. A low score does not guarantee a link is safe. Users should still avoid sharing passwords, 2FA codes, recovery phrases, private keys, or sensitive personal information.

There aren't any published security advisories