Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/git.js:46
- Evidence
const { stdout } = await execFile("git", args, {
Security audit
AgentProof for OpenClaw
Security checks across malware telemetry and agentic risk
Overview
This skill is a local audit-receipt collector for OpenClaw runs, and its file access, hashing, and receipt persistence match that stated purpose.
Install only if you want local run receipts. Treat the receipt directory as sensitive operational metadata, review retention yourself, and avoid placing secrets in non-ignored repository files because the plugin will read them transiently to hash file changes.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
61/61 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec