Security audit

DebugBundle

Security checks for vulnerabilities and agentic risk

Overview

This DebugBundle plugin is a disclosed monitoring and incident-response integration, but it includes optional administrative tools that users should allowlist carefully.

Install only if you want OpenClaw agents to access DebugBundle. Keep mutation tools disabled unless needed, especially billing, token, project deletion, member-management, webhook, and alert tools; prefer read-only incident and analytics tools for routine troubleshooting.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dynamic_code_execution, suspicious.env_credential_access, suspicious.exposed_secret_literal (+1 more)

Dynamic code execution detected.

Critical

Code: suspicious.dynamic_code_execution
Location: dist/index.js:28724
Evidence: const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:6535
Evidence: const llhttpWasmData = process.env.JEST_WORKER_ID ? require_llhttp_wasm() : void 0;

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/index.js:81863
Evidence: var BEARER = [REDACTED])\s+[A-Za-z0-9._~+\/-]{6,}/gi;

Sensitive-looking file read is paired with a network send.

Warn

Code: suspicious.potential_exfiltration
Location: dist/index.js:81700
Evidence: rawAuthState = await readFile(authFilePath);