Security audit

multi-clawd

Security checks for vulnerabilities and agentic risk

Overview

This plugin is a disclosed multi-account Claude failover tool that handles local Claude credentials and optional watchdog persistence in ways aligned with its stated purpose.

Install only if you want OpenClaw to manage multiple Claude accounts. Prefer secret references over plaintext token files, keep any token files chmod 600, review setup with --dry-run, and skip the optional watchdog if you do not want a local timer that can restart the OpenClaw gateway. Enabling the direct route allows the plugin to manage Anthropic auth profile order for configured agents.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/credential-store.js:187
Evidence: const exec = deps.exec ?? ((file, args, options) => execFileSync(file, args, options));

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/openclaw-runner.js:17
Evidence: child = spawn(command, args, { stdio: ["pipe", "pipe", "pipe"], shell: false });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/shim-transport.js:150
Evidence: const spawned = spawn(nodePath, [options.shimPath, ...args], {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/shim.js:122
Evidence: let child = spawn(command, childArgs, {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/watchdog-schedule.js:112
Evidence: const r = spawnSync(process.execPath, [script], { stdio: "inherit" });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/cli.mjs:84
Evidence: const r = spawnSync(process.execPath, [join(__dirname, script), ...args], { stdio: "inherit" });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: scripts/hermes.mjs:181
Evidence: const probe = spawnSync(python, ["-c", probeCode], {

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:391
Evidence: const claude = resolveClaudeExecutable(params.env ?? process.env, params.platform ?? process.platform);

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: scripts/cli.mjs:870
Evidence: const env = { ...process.env };