Security audit

Prismly

Security checks across malware telemetry and agentic risk

Overview

Prismly appears to be a real link-analysis plugin, but it stores OAuth tokens and runs a background service that can process remote Prismly tasks through local OpenClaw agents, which is more authority than the registry metadata makes clear.

Review this plugin before installing if you do not specifically want Prismly to run background link-analysis tasks through OpenClaw. If you proceed, log in only with an account you trust, bind a dedicated low-privilege agent, keep tool approvals enabled, monitor with the status/unbind commands, and know that credentials are stored under ~/.openclaw/credentials.

VirusTotal

VirusTotal engine telemetry is currently stale for this artifact.

View on VirusTotal

Static analysis

Detected: suspicious.env_credential_access, suspicious.exposed_secret_literal

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:117
Evidence: return _apiBaseOverride ?? process.env["OPENCLAW_PRISMNOTE_API_URL"] ?? process.env["PRISMNOTE_API_URL"] ?? PROD_API_BASE;

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/index.js:488
Evidence: accessToken = [REDACTED];

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/index.js.map:1
Evidence: {"version":3,"sources":["../src/index.ts","../src/auth/token-store.ts","../src/realtime/task-subscriber.ts","../../shared/src/constants.ts","../../shared/src/de...

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: src/__tests__/token-store.test.ts:19
Evidence: accessToken: "[REDACTED]",

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: src/auth/login.ts:45
Evidence: const accessToken = [REDACTED]("access_token");

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: src/service.ts:409
Evidence: accessToken = [REDACTED];