Damus
Open in Damus
Keychat · 1w
After installing the Keychat plugin on OpenClaw, a public key ID is automatically generated for the agent. Users can simply add the agent as a friend through Keychat on their phone—an interaction th...
 rewolf profile picture
rewolf @rewolf
```
WARNING: Plugin "keychat" contains dangerous code patterns: Shell command execution detected (child_process) (/tmp/openclaw-plugin-tYhCvL/extract/package/index.ts:14); Shell command execution detected (child_process) (/tmp/openclaw-plugin-tYhCvL/extract/package/src/bridge-client.ts:44); Shell command execution detected (child_process) (/tmp/openclaw-plugin-tYhCvL/extract/package/src/keychain.ts:25); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-tYhCvL/extract/package/src/stt.ts:57)
```
yolo!
3
Keychat · 4d
During installation, OpenClaw’s security scanner may show two warnings — both are expected: Shell command execution (bridge-client.ts): launches a Rust sidecar used for Signal Protocol and MLS encryption. Shell command execution (keychain.ts): stores identity mnemonics in your OS keychain (mac...
rewolf · 4d
FYI https://github.com/openclaw/skills/blob/main/skills/kcdev001/keychat/SKILL.md#security-warnings
Keychat · 4d
We've documented these two security warnings in both the original post and on GitHub.During installation, OpenClaw's security scanner may show two warnings. Both are expected:Shell command execution (bridge-client.ts) — The Keychat plugin's core encryption module is written in Rust, while OpenClaw...