Security audit

Iris Chat

Security checks for vulnerabilities and agentic risk

Overview

The package provides the documented private chat connection, with setup and messaging restricted to one approved contact.

Pair your own approved contact and remember that messages can invoke the agent's existing tools. Protect the persistent state folder and logs; transport encryption does not hide messages from your agent or model provider. Optional CLI installation is confirmed and checksum-checked, but this review did not analyze that external executable.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.install_untrusted_source

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: openclaw/client.mjs:15
Evidence: this.child = spawn(this.account.pythonPath ?? 'python3', [fileURLToPath(new URL('../hermes/transport.py', import.meta.url)),

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: openclaw/setup.mjs:12
Evidence: const child = spawn(previous.pythonPath ?? 'python3', [fileURLToPath(new URL('../hermes/transport.py', import.meta.url)),

Install source points to URL shortener or raw IP.

Warn

Code: suspicious.install_untrusted_source
Location: openclaw.plugin.json:46
Evidence: "http://127.0.0.1:8765"