Security audit

multi-clawd

Security checks across malware telemetry and agentic risk

Overview

This plugin handles sensitive Claude account credentials and optional watchdog persistence, but the behavior is disclosed, user-directed, and aligned with multi-account OpenClaw failover.

Install only if you intend to let this plugin manage multiple Claude accounts for OpenClaw. Review the configured account entries, prefer secret references over plaintext token files, keep any token files private, and skip the optional watchdog if you do not want a user-level timer that can restart the OpenClaw gateway.

SkillSpector

By NVIDIA

SkillSpector was not run because this plugin release contains no bundled skills.

VirusTotal

61/61 vendors flagged this plugin as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/shim.js:90
Evidence: const child = spawn(command, childArgs, {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/watchdog-schedule.js:112
Evidence: const r = spawnSync(process.execPath, [script], { stdio: "inherit" });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/cli.mjs:81
Evidence: const r = spawnSync(process.execPath, [join(__dirname, script), ...args], { stdio: "inherit" });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/hermes.mjs:181
Evidence: const probe = spawnSync(python, ["-c", probeCode], {