Security audit
Security checks across malware telemetry and agentic risk
ERPClaw is a coherent local ERP skill, but it grants broad financial and code-execution authority with several under-scoped trust boundaries users should review before installing.
Install only if you are comfortable giving this skill authority over local business books, payroll data, credentials, backups, and GitHub-sourced ERP modules. Use it in a dedicated account or sandbox first, keep backups, review every module before approving installation, avoid absolute-path CSV imports from untrusted prompts, and do not rely on RBAC as a hard security boundary unless you have verified user context and permissions are enforced in your runtime.
args[i + 1] = action_override
break
os.execvp(sys.executable, [sys.executable, script] + args)
def _suggest_module_for_action(action):"rate": bp["grand_total"],
}]),
]
proc = subprocess.run(cmd, capture_output=True, text=True, timeout=30)
if proc.returncode == 0:
inv_result = json.loads(proc.stdout)
if inv_result.get("status") == "ok":env["ERPCLAW_DB_PATH"] = db_path
try:
proc = subprocess.run(
[sys.executable, "-m", "pytest", tests_dir, "-v", "--tb=short", "-q"],
capture_output=True,
text=True,env = os.environ.copy()
lib_path = lib_dir()
env["PYTHONPATH"] = lib_path + os.pathsep + env.get("PYTHONPATH", "")
result = subprocess.run(
[sys.executable, init_db_path],
capture_output=True, text=True, timeout=60,
env=env,init_db_path = os.path.join(install_path, "init_db.py")
if os.path.isfile(init_db_path):
try:
subprocess.run(
[sys.executable, init_db_path],
capture_output=True, text=True, timeout=60
)base = os.environ.get("ERPCLAW_GITHUB_RAW_BASE", GITHUB_RAW_BASE)
url = f"{base}/{rel_path}"
req = urllib.request.Request(url, headers={"User-Agent": "erpclaw"})
with urllib.request.urlopen(req, timeout=15) as resp:
data = resp.read()
actual = hashlib.sha256(data).hexdigest()
if actual != expected_hash:64/64 vendors flagged this skill as clean.
Detected: suspicious.dynamic_code_execution