@aiyiran/myclaw@1.1.209
为 OpenClaw 教学环境设计的一站式命令行工具。
AI Security Review
scanned 16d ago · by lpm-firewall-aiSource inspection found user-invoked agent configuration writes but no npm install lifecycle hook or concrete malicious behavior. The configuration capability warrants a warning under the agent integration policy.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
A user runs the agent creation flow and supplies an agent name.
Impact
It changes the local agent setup; no exfiltration or unconsented install-time mutation was established.
Mechanism
The flow creates workspace files and adds an agent entry to the OpenClaw configuration.
AI rationale
Source inspection found user-invoked agent configuration writes but no npm install lifecycle hook or concrete malicious behavior. The configuration capability warrants a warning under the agent integration policy.
Evidence
~/.openclaw/openclaw.json~/.openclaw/workspace-<agentId>/
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest has no preinstall, install or postinstall hook; its only script is a placeholder test command.
- Creating an agent writes a new entry to the OpenClaw agent configuration and creates agent workspace files.
- The agent creation flow prompts for an agent name before creating it, and the wizard registers an agent through a separate step.
Evidence against
- The reviewed agent configuration changes are user-invoked setup behavior; the inspected excerpts show no hidden install-time mutation or data transmission.
Behavioral surface
ChildProcessDynamicRequireEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedUrlStrings
Source & flagged code
21 flagged · loading sourcedelete_agents.jsView file
22const os = require('os');
L23: const { spawnSync, execSync } = require('child_process');
L24:
High
173const psCmd = `Add-Type -AssemblyName Microsoft.VisualBasic; [Microsoft.VisualBasic.FileIO.FileSystem]::${method}(${extraArgs})`;
L174: const ret = spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { timeout: 15000 });
L175: if (ret.status === 0) return { ok: true, method: 'powershell' };
High
19L20: const fs = require('fs');
L21: const path = require('path');
Medium
Dynamic Require
Package source references dynamic require/import behavior.
delete_agents.jsView on unpkg · L19index.jsView file
Findings
3 Critical16 High5 Medium4 Low
CriticalSame File Env Network Executionindex.js
CriticalDownload Executeprepare.js
CriticalTrigger Reachable Dangerous Capabilityindex.js
HighChild Processdelete_agents.js
HighShelldelete_agents.js
HighSandbox Evasion Gated Capabilityindex.js
HighRuntime Package Installindex.js
HighKnown Malware Source Similarityfix.js
HighKnown Malware Source Similarityindex.js
HighKnown Malware Source Similarityprepare.js
HighKnown Malware Source Similaritywsl2.js
HighKnown Malware Source Similaritygateway.js
Affected versions and remediation
This report applies to @aiyiran/myclaw@1.1.209.
See all versions of @aiyiran/myclaw for other recorded verdicts.
- Review the evidence and your use of @aiyiran/myclaw@1.1.209 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.