Automic Vault

brew package intelligence

rclone

Automic Vault tracks rclone because plain text rclone remote credentials matters when AI agents run command-line tools on macOS.

Read docs Run scanner

overview

What Automic Vault knows about rclone

Rsync for cloud storage

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text rclone Remote Credentials

rclone.conf can contain backend tokens, passwords, client secrets, and obscured password values that rclone can reveal. Our isotope stores that config file in the macOS keychain and exposes it through a temporary RCLONE_CONFIG only while `rclone` runs.

Local README excerpt

rclone Radioisotope

rclone stores remote configuration in rclone.conf. Many backends persist tokens, passwords, client secrets, or obscured password values in that file.

This radioisotope migrates the first default rclone.conf containing credential-like values into the macOS keychain and wraps rclone so it receives the config through a temporary RCLONE_CONFIG while it runs.

Caveats

  • We currently migrate the first default rclone.conf containing credentials.
  • Explicit --config arguments can override the temporary config.
  • Direct execution of the original binary will not receive credentials.

Source: data/radioisotopes/rclone/README.md

Caveats

  • We currently migrate the first default rclone.conf containing credentials.
  • Explicit --config arguments can override the temporary config.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:rclone
Last updated2026-05-08T16:30:08Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest