Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- dist/index.js:1092
- Evidence
output = execFileSync(executablePath, ["--probe"], {
Security audit
MXC Sandbox Execution
Security checks for vulnerabilities and agentic risk
Overview
This package coherently provides an opt-in Windows MXC sandbox backend for OpenClaw, with the sensitive execution and filesystem behavior disclosed and scoped to sandbox configuration.
Install only if you intend to use MXC sandboxing on a supported Windows host. Review `workspaceAccess`, `mxcPolicyPaths`, any additional read-write paths, and the `network` setting before enabling it; avoid putting secrets in command arguments or environment values because the README discloses that MXC currently carries the request envelope on process argv.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec