@opentrust/guards 7.3.13 → 7.3.16

package/agent/command-executor.ts

@@ -1,4 +1,4 @@
-import { execSync } from "node:child_process";
+import { execSync, type ExecSyncOptions } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
@@ -11,6 +11,18 @@ export interface CommandResult {
   error?: string;
 }
 
+const OPENCLAW_HOME = process.env.OPENCLAW_HOME || path.join(os.homedir(), ".openclaw");
+
+function execOpts(timeoutMs = 120_000): ExecSyncOptions {
+  return {
+    encoding: "utf-8" as const,
+    timeout: timeoutMs,
+    stdio: ["pipe", "pipe", "pipe"] as const,
+    cwd: os.homedir(),
+    env: { ...process.env, HOME: os.homedir(), OPENCLAW_HOME },
+  };
+}
+
 export function executeCommand(cmd: RemoteCommand, log: Logger): CommandResult {
   switch (cmd.type) {
     case "install_skill":
@@ -32,11 +44,7 @@ function executeSkillInstall(payload: Record<string, unknown> | null, log: Logge
 
   try {
     log.info(`Command: installing skill "${skillName}"...`);
-    const output = execSync(`clawhub install ${skillName}`, {
-      encoding: "utf-8",
-      timeout: 120_000,
-      stdio: ["pipe", "pipe", "pipe"],
-    });
+    const output = execSync(`clawhub install ${skillName}`, execOpts()) as string;
     log.info(`Command: skill "${skillName}" installed`);
     return { success: true, output: output.trim() };
   } catch (err: any) {
@@ -54,10 +62,7 @@ function executeCustomSkillInstall(payload: Record<string, unknown> | null, log:
   }
 
   try {
-    const skillsDir = path.join(
-      process.env.OPENCLAW_HOME || path.join(os.homedir(), ".openclaw"),
-      "skills",
-    );
+    const skillsDir = path.join(OPENCLAW_HOME, "skills");
     const skillDir = path.join(skillsDir, skillName);
 
     fs.mkdirSync(skillDir, { recursive: true });
@@ -68,11 +73,7 @@ function executeCustomSkillInstall(payload: Record<string, unknown> | null, log:
     log.info(`Command: custom skill "${skillName}" written to ${skillDir}/${fileName}`);
 
     try {
-      const output = execSync(`clawhub install ${skillDir}`, {
-        encoding: "utf-8",
-        timeout: 120_000,
-        stdio: ["pipe", "pipe", "pipe"],
-      });
+      const output = execSync(`clawhub install ${skillDir}`, execOpts()) as string;
       return { success: true, output: output.trim() };
     } catch {
       return { success: true, output: `Custom skill "${skillName}" saved to ${skillDir}/${fileName}` };
@@ -90,11 +91,7 @@ function executeSkillUninstall(payload: Record<string, unknown> | null, log: Log
 
   try {
     log.info(`Command: uninstalling skill "${skillName}"...`);
-    const output = execSync(`clawhub uninstall ${skillName}`, {
-      encoding: "utf-8",
-      timeout: 60_000,
-      stdio: ["pipe", "pipe", "pipe"],
-    });
+    const output = execSync(`clawhub uninstall ${skillName}`, execOpts(60_000)) as string;
     log.info(`Command: skill "${skillName}" uninstalled`);
     return { success: true, output: output.trim() };
   } catch (err: any) {
@@ -110,7 +107,7 @@ function executeUpdateConfig(payload: Record<string, unknown> | null, log: Logge
   }
 
   try {
-    const configDir = process.env.OPENCLAW_HOME || path.join(os.homedir(), ".openclaw");
+    const configDir = OPENCLAW_HOME;
     const configFile = path.join(configDir, "openclaw.json");
 
     if (!fs.existsSync(configFile)) {

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "opentrust-guard",
   "name": "OpenTrust Guard",
   "description": "AI security guard for OpenClaw agents: prompt injection detection, credential scanning, and behavioral monitoring.",
-  "version": "7.3.13",
+  "version": "7.3.16",
   "configSchema": {
     "type": "object",
     "additionalProperties": false,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@opentrust/guards",
-  "version": "7.3.13",
+  "version": "7.3.16",
   "description": "AI agent security plugin for OpenClaw: prompt injection detection, PII sanitization, and monitoring",
   "type": "module",
   "main": "index.ts",