Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/src/backup-keystore.js:152
- Evidence
const run = (args, input) => ask(kind, "secret-tool", () => spawn("secret-tool", args, input));
Security audit
Octopus Prime
Security checks for vulnerabilities and agentic risk
Overview
The plugin’s remote messaging, project tools, and optional encrypted backups match its documented purpose and provide controls for sensitive actions.
Trust Octopus Prime and carefully choose who can use each agent: shared agents retain their local file and tool access. Use separate workspaces for unrelated organizations, review audit settings, and disable machine statistics if unwanted. Optional backups cover the Gateway’s workspaces; keep the recovery key safe. SkillSpector was inapplicable because this package bundles no skills; this assessment used the plugin artifacts.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec, suspicious.env_credential_access
Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/src/backup-cli.js:388
- Evidence
keystore: () => computerKeystore(resolveStateDir(process.env)),
Environment variable access combined with network send.
Critical
- Code
- suspicious.env_credential_access
- Location
- dist/src/backup-gateway.js:8
- Evidence
export function placeFromConfig(cfg, env = process.env, resolvers = {}) {