Security audit
tokenjuice
Security checks across malware telemetry and agentic risk
Overview
This official OpenClaw plugin transparently compacts terminal command output and shows no evidence of hidden collection, persistence, command execution, or exfiltration.
Install this only if you want command output compaction in OpenClaw/Codex. Because it processes exec and bash results, assume it can inspect command output before the agent sees it, including any secrets printed in the terminal; avoid printing sensitive data into tool output.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
60/60 vendors flagged this plugin as clean.