rewolf
· 2w
```
WARNING: Plugin "keychat" contains dangerous code patterns: Shell command execution detected (child_process) (/tmp/openclaw-plugin-tYhCvL/extract/package/index.ts:14); Shell command execution dete...
We've documented these two security warnings in both the original post and on GitHub.During installation, OpenClaw's security scanner may show two warnings. Both are expected:Shell command execution (bridge-client.ts) — The Keychat plugin's core encryption module is written in Rust, while OpenClaw itself is TypeScript. A Rust sidecar process is spawned to handle Signal Protocol and MLS encryption.Shell command execution (keychain.ts) — The Keychat plugin stores seed phrases in the system's secure enclave (macOS Keychain / Linux libsecret) rather than plain files, which requires system command access to the keychain.