Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- index.js:62
- Evidence
execFile(
Security audit
Reply Push v2
Security checks for vulnerabilities and agentic risk
Overview
This plugin coherently implements disclosed iOS push notifications for completed OpenClaw agent turns without hidden data collection or unrelated authority.
Before installing, confirm you are comfortable enabling the required conversation hook permission and using the hosted OpenClaw iOS push relay. The notification content is generic, but the plugin will auto-detect a paired iOS node and write local cache/dedupe state files.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec