Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/git.js:46
- Evidence
const { stdout } = await execFile("git", args, {
Security audit
AgentProof for OpenClaw
Security checks for vulnerabilities and agentic risk
Overview
This skill is a local audit-receipt collector for OpenClaw runs, and its file access, hashing, and receipt persistence match that stated purpose.
Install only if you want local run receipts. Treat the receipt directory as sensitive operational metadata, review retention yourself, and avoid placing secrets in non-ignored repository files because the plugin will read them transiently to hash file changes.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec