Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- bin/cli.js:41
- Evidence
const result = spawnSync(process.execPath, args, { stdio: "inherit" });
Security audit
@psyb0t/predictalot
Security checks for vulnerabilities and agentic risk
Overview
This plugin is a disclosed bridge from OpenClaw to a user-run predictalot server and shows no hidden or unrelated behavior.
Install only if you intend your agent to send forecasting inputs to the predictalot server you configure. Use a server URL you control or trust, and provide PREDICTALOT_AUTH_TOKENS only for that server.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec