Growth Engineer

AdvisoryAudited by Static analysis on May 13, 2026.

Overview

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Findings (16)

critical

suspicious.dangerous_exec

Location: scripts/export-analytics-summary.mjs:77
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: scripts/export-asc-summary.mjs:121
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: scripts/openclaw-growth-preflight.mjs:201
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: scripts/openclaw-growth-runner.mjs:278
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: scripts/openclaw-growth-start.mjs:292
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: scripts/openclaw-growth-status.mjs:107
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: scripts/openclaw-growth-wizard.mjs:1060
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: tests/bootstrap-heartbeat.test.mjs:12
Finding: Shell command execution detected (child_process).

critical

suspicious.dangerous_exec

Location: tests/install-analyticscli-cli.test.mjs:54
Finding: Shell command execution detected (child_process).

critical

suspicious.env_credential_access

Location: scripts/export-revenuecat-summary.mjs:89
Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

Location: scripts/export-sentry-summary.mjs:38
Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

Location: scripts/openclaw-growth-engineer.mjs:1177
Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

Location: scripts/openclaw-growth-preflight.mjs:12
Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

Location: scripts/openclaw-growth-runner.mjs:243
Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

Location: scripts/openclaw-growth-start.mjs:15
Finding: Environment variable access combined with network send.

critical

suspicious.env_credential_access

Location: scripts/openclaw-growth-wizard.mjs:18
Finding: Environment variable access combined with network send.