Dangerous exec
Critical
- Finding
- Shell command execution detected (child_process).
- Skill content
const proc = spawn("tailscale", args, { stdio: [
Openclaw Voice Call 2026.5.20.Tgz
Security checks across static analysis, malware telemetry, and agentic risk
Overview
No risk analysis has been recorded yet.
SkillSpector
By NVIDIA
SkillSpector findings are pending for this release.
Static analysis
Exposed secret literal
Critical
- Finding
- File appears to expose a hardcoded API secret or token.
- Skill content
authToken: [REDACTED]()
Exposed secret literal
Critical
- Finding
- File appears to expose a hardcoded API secret or token.
- Skill content
if ([REDACTED]) legacyStreamingOpenAICompat.apiKey = [REDACTED];
Exposed secret literal
Critical
- Finding
- File appears to expose a hardcoded API secret or token.
- Skill content
this.authToken = [REDACTED];
Exposed secret literal
Critical
- Finding
- File appears to expose a hardcoded API secret or token.
- Skill content
authToken: [REDACTED],
Exposed secret literal
Critical
- Finding
- File appears to expose a hardcoded API secret or token.
- Skill content
this.authToken = [REDACTED];
VirusTotal
61/61 vendors flagged this plugin as clean.
Risk analysis
No visible risk-analysis findings were reported for this release.