Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- scripts/postinstall-generate-near-account.mjs:48
- Evidence
const result = spawnSync(process.execPath, [script, defaultDir], {
Security audit
IdentyClaw Tools
Security checks across malware telemetry and agentic risk
Overview
The plugin is an identity/API integration that does handle credentials and can create local NEAR keys, but the behavior is disclosed, purpose-aligned, and bounded rather than deceptive.
Install only if you expect this plugin to manage IdentyClaw Passport credentials and make authenticated API calls. Review whether automatic NEAR credential generation is acceptable in your environment, disable generateNearAccountOnInstall if you want explicit setup only, restrict optional tools such as identyclaw_request and identyclaw_generate_near_account, and use a patched OpenClaw runtime.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec, suspicious.env_credential_access
Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/index.js:190
- Evidence
const envBase = process.env.IDENTYCLAW_BASE_URL || "https://api.identyclaw.com";