Security audit

Inline

Security checks for vulnerabilities and agentic risk

Overview

This is a disclosed Inline chat channel plugin for OpenClaw, with broad but purpose-matched messaging and administration capabilities that users should configure carefully.

Install this only if you want OpenClaw reachable from Inline. Review group access defaults, avoid dmPolicy=open unless the bot is public, restrict sensitive action groups such as delete, permissions, participants, and edit where possible, and keep exec approvals scoped to trusted Inline user IDs and preferably delivered by DM.

SkillSpector

SkillSpector was not run because this plugin release contains no bundled skills.

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access, suspicious.exposed_secret_literal

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/channel-plugin-api.js:70231
Evidence: const child = execFile(params.command, params.args, {

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: dist/runtime-register-api.js:66248
Evidence: const child = execFile(params.command, params.args, {

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/channel-plugin-api.js:2777
Evidence: if (!process.env.WS_NO_BUFFER_UTIL) {

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/index.js:46
Evidence: function telemetryDisabled(env = process.env) {

Environment variable access combined with network send.

Critical

Code: suspicious.env_credential_access
Location: dist/runtime-register-api.js:2777
Evidence: if (!process.env.WS_NO_BUFFER_UTIL) {

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/approval-handler.runtime.js.map:61
Evidence: "import { randomBytes } from \"node:crypto\";\nimport { WebSocket } from \"ws\";\nimport { AuthenticatedServerClock, InlineHandshakeClient, MessageIdGenerator, ...

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/channel-plugin-api.js.map:62
Evidence: "import { randomBytes } from \"node:crypto\";\nimport { WebSocket } from \"ws\";\nimport { AuthenticatedServerClock, InlineHandshakeClient, MessageIdGenerator, ...

File appears to expose a hardcoded API secret or token.

Critical

Code: suspicious.exposed_secret_literal
Location: dist/runtime-register-api.js.map:60
Evidence: "import { randomBytes } from \"node:crypto\";\nimport { WebSocket } from \"ws\";\nimport { AuthenticatedServerClock, InlineHandshakeClient, MessageIdGenerator, ...