Back to plugin

Security audit

Scientify

Security checks for vulnerabilities and agentic risk

Overview

Scientify's code, instructions, and requested accesses are consistent with a continuous research-workflow plugin: it reads/writes OpenClaw workspaces, registers cron jobs, and calls academic APIs (arXiv/OpenAlex).

Scientify appears to be what it claims, but please consider the following before installing: - Runtime requirements and local writes: SKILL.md requires Node >=18, Python 3 (+ uv sandbox), and git; the plugin will create and modify files under ~/.openclaw (workspaces, openclaw.json, cron/jobs.json) and copy template files into new project workspaces. - Cron job and persistent presence: Creating a research project will register a daily metabolism cron job and modify openclaw.json. If you prefer manual control, do not run the project initialization CLI or remove the cron entry afterwards. - File system effects: The plugin can create and (via CLI delete) remove entire workspaces. Deleting a project removes its workspace recursively; ensure you have backups if needed. - Code execution risk: The plugin supports running experiments via a code_executor/uv sandbox. That enables arbitrary experiment code to run in the project workspace — avoid placing sensitive credentials or secrets in the workspace, and only run experiments you trust. - Network access: The plugin will query public academic APIs (arXiv, OpenAlex) and may perform browser automation for paid downloads per the docs; be mindful of paid-content credentials and terms of service. If you trust the plugin source and understand it will manage OpenClaw agents and cron jobs under your home directory, it is coherent and reasonable to install. If you want extra assurance, review the plugin files (openclaw.plugin.json, dist/*, and SKILL.md) locally and back up ~/.openclaw before creating projects.

Static analysis

No suspicious patterns detected.