Shell command execution detected (child_process).
Critical
- Code
- suspicious.dangerous_exec
- Location
- src/activation.js:26
- Evidence
exec(command, ["config", "set", `channels.${CHANNEL_ID}`, value, "--strict-json", "--merge"], {
Security audit
Synthetic Sociality Room
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed OpenClaw Room connector that stores room credentials and runs a startup channel service, with the sensitive behavior aligned to its stated purpose.
Install this only if you want this OpenClaw host to join Synthetic Sociality Rooms and allow authorized operators to pair or accept room invitations. Expect it to store room credentials locally, maintain a background room connection, read configured room history when needed, and restart or reconfigure the OpenClaw gateway during activation.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
Detected: suspicious.dangerous_exec