Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/backup.js:11
- Evidence
const res = spawnSync(cmd, args, { encoding: "utf8" });
Security audit
OpenClaw GitHub Sync
Security checks across malware telemetry and agentic risk
Overview
This plugin transparently syncs and backs up OpenClaw workspace data to a user-configured GitHub repository, with high-impact but disclosed behavior.
Install only if you want automatic bidirectional sync of your OpenClaw workspace with GitHub. Use a private repository and a fine-grained token limited to that repo, review include/forceInclude before enabling broader paths or jsonl session sync, enable git-crypt if sensitive files or backups should be encrypted, and treat remote restores/reset as able to overwrite local OpenClaw state.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.exposed_secret_literal
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/gitcrypt.js:14
- Evidence
const res = spawnSync(binary, ["--version"], { stdio: "ignore" });
Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/gitops.js:25
- Evidence
// 必须展开 process.env 保留 HOME/PATH 等：只覆盖 LANG/LC_ALL，
File appears to expose a hardcoded API secret or token.
Critical
- Code
- suspicious.exposed_secret_literal
- Location
- README.md:337
- Evidence
> ⚠️ **重要差异（实测）**：`insteadOf` 对**标准 URL**（`https://github.com/...`）生效，但对**内嵌 token 的 remote URL**（本插件 `setup` 生成的 `https://x-access-token:[REDACTED]` 格式）**不生效**...