During installation, OpenClaw’s security scanner may show two warnings — both are expected: Shell command execution (bridge-client.ts): launches a Rust sidecar used for Signal Protocol and MLS encryption. Shell command execution (keychain.ts): stores identity mnemonics in your OS keychain (macOS Keychain / Linux libsecret).