Security audit

FridayNext — an iOS client for OpenClaw

Security checks for vulnerabilities and agentic risk

Overview

This appears to be a legitimate FridayNext iOS client plugin, but it grants the phone broad OpenClaw control and makes automatic gateway/network configuration changes that deserve review before installing.

Install only if you intend FridayNext to act as a full remote OpenClaw client. Review the gateway token exposure, LAN bind, FridayTunnel/public-access settings, agent tool policy changes, and phone permissions for Calendar, Reminders, Health, and Location. Consider disabling public-access standby or tightening agent/tool settings if you want a local-only or lower-privilege setup.

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/src/public-access/frpc-manager.js:771
Evidence: return execFileSync("powershell", [

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: install-runtime.js:55
Evidence: exec(

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: install.js:59
Evidence: execSync(`${cmd} --version`, { stdio: "ignore" });

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/src/npm-registry.js:64
Evidence: const override = process.env[REGISTRY_ENV_VAR];

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: install.js:16
Evidence: const sudoUser = process.env.SUDO_USER;