Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/cli/executor.js:96
- Evidence
return await this.#spawn(resolved, configDirectory, env, options.signal);
Security audit
Tidebroker
Security checks across malware telemetry and agentic risk
Overview
Tidebroker requests high-impact Google Workspace access, but the artifacts disclose it and implement scoped identity binding, credential custody, and one-time approvals for writes.
Install only if you intend to run Tidebroker as trusted OpenClaw infrastructure. Verify the exact v1.1.4 package/provenance, run the worker under a dedicated OS account with owner-only secrets, enable only needed Google scopes, confirm the approval UI is active for Gmail sends and Calendar mutations, and review any pinned gog binary before enabling the external backend.
SkillSpector
By NVIDIA
SkillSpector was not run because this plugin release contains no bundled skills.
VirusTotal
64/64 vendors flagged this plugin as clean.
Static analysis
Detected: suspicious.dangerous_exec
Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/connectors/gog-executor.js:224
- Evidence
const child = spawn(executableFdPath, argv, { cwd: home, env, shell: false, stdio: [input.stdin === undefined ? "ignore" : "pipe", "pipe", "pipe", executable.fd...