Security audit

EvolveClaw

Security checks for vulnerabilities and agentic risk

Overview

EvolveClaw is purpose-aligned but high-impact: it records full agent traces, uses model API credentials, starts a background server, and automatically injects persistent learned instructions into the agent’s system prompt.

Install only if you are comfortable with an automatic prompt-evolution system that observes agent traces, uses model API credentials, and persists learned rules. Use a dedicated API key, keep the sidecar bound to localhost, review stored guidelines regularly, and wait for the bundled .env secret issue to be corrected.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.exposed_secret_literal, suspicious.install_untrusted_source

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: plugin/src/index.ts:139
Evidence: execFileSync(explicit, ["--version"], { stdio: "ignore" });

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: plugin/src/index.ts:53
Evidence: api_key: [REDACTED],

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: server/.env:15
Evidence: ANTHROPIC_AUTH_TOKEN=[REDACTED]

Install source points to URL shortener or raw IP.

Warn

Code: suspicious.install_untrusted_source
Location: openclaw.plugin.json:11
Evidence: "default": "http://127.0.0.1:5757"