openclaw - 💡(How to fix) Fix [Security] Dangerous code patterns detected in @openclaw/matrix plugin (v2026.3.22) [10 comments, 6 participants]

Security Issue Summary

OpenClaw v2026.3.31 blocked installation of the @openclaw/matrix plugin (v2026.3.22) due to dangerous code patterns that could enable credential harvesting.

Detection Details

The plugin was identified as verification=source-linked (official plugin), but OpenClaw's security scanner detected three concerning patterns:

1. Environment Variable Access + Network Send (Possible Credential Harvesting)

File: src/channel.setup.test.ts:163

Environment variable access combined with network send — possible credential harvesting

File: src/matrix/client/config.ts:105

Environment variable access combined with network send — possible credential harvesting

2. Shell Command Execution

File: src/matrix/deps.ts:71

Shell command execution detected (child_process)

Why This Is Critical

OpenClaw configurations typically contain sensitive environment variables:

• API keys (Cloudflare, various AI providers)
• Authentication tokens (Telegram, GitHub, etc.)
• Gateway passwords
• Database credentials

A plugin with these patterns could potentially exfiltrate these credentials to external servers.

Error Output

WARNING: Plugin "matrix" contains dangerous code patterns: Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-EszReB/extract/package/src/channel.setup.test.ts:163); Shell command execution detected (child_process) (/tmp/openclaw-plugin-EszReB/extract/package/src/matrix/deps.ts:71); Environment variable access combined with network send — possible credential harvesting (/tmp/openclaw-plugin-EszReB/extract/package/src/matrix/client/config.ts:105)

Plugin "matrix" installation blocked: dangerous code patterns detected

Recommended Actions

1. Audit the flagged files — The team should review:

   • src/channel.setup.test.ts:163
   • src/matrix/deps.ts:71
   • src/matrix/client/config.ts:105

2. Determine if this is intentional or compromised — If legitimate code, consider:

   • Refactoring to avoid env+network patterns
   • Adding explicit API boundaries with user consent
   • Marking as trusted after security review

3. If compromised — Remove the malicious package from ClawHub immediately

4. Publish patched version — Once fixed, release @openclaw/[email protected] or similar

Environment

• OpenClaw version: 2026.3.31 (213a704)
• Plugin: @openclaw/[email protected]
• Channel: official
• Verification: source-linked

Request

Please investigate and provide guidance. Many users rely on the Matrix plugin for multi-room coordination, and the security block prevents installation of the current version.

Note: The security scanner is working correctly — this is a feature, not a bug. The concern is whether the official Matrix plugin has been compromised or if these patterns are legitimate but need redesign.