registry / @alfe.ai/openclaw-chat / 0.3.3

@alfe.ai/openclaw-chat@0.3.3

OpenClaw chat plugin for Alfe — web widget and mobile app channels

Static Scan Results

scanned 1d ago · by rust-scanner

Static analysis flagged 8 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 6 file(s), 112 KB of source, external domains: 127.0.0.1

Source & flagged code

1 flagged

dist/plugin2.jsView file

Lines 233-273javascript

233 return false;

234}

235/**

236* Extract the channel mode from a standardized session key or conversationId.

237* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat', 'a2a') or fallback.

238*/

239function extractChannelMode(conversationId, fallback = "chat") {

240 return /^alfe:(\w+):/.exec(conversationId)?.[1] ?? fallback;

241}

242//#endregion

243//#region src/session-store.ts

244/**

245* Session Store — persists chat sessions to the local filesystem.

246*

247* Storage layout:

248* ~/.alfe/sessions/chat/{sessionId}.json

249*

250* Each session file contains metadata and the full message history.

251* Sessions are written on every message to ensure durability.

252* Old sessions are cleaned up automatically (30-day TTL, 1000 max).

253*/

254const SESSIONS_DIR = join(homedir(), ".alfe", "sessions", "chat");

255const MAX_SESSIONS = 1e3;

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/plugin2.jsView on unpkg · L253

256const MAX_AGE_MS = 720 * 60 * 60 * 1e3;

257const CLEANUP_INTERVAL_MS = 36e5;

258let lastCleanupAt = 0;

259async function ensureDir() {

260 if (!existsSync(SESSIONS_DIR)) await mkdir(SESSIONS_DIR, { recursive: true });

261}

262function sessionPath(sessionId) {

263 return join(SESSIONS_DIR, `${sessionId.replace(/[^a-zA-Z0-9_-]/g, "_")}.json`);

264}

265async function cleanupOldSessions() {

266 if (Date.now() - lastCleanupAt < CLEANUP_INTERVAL_MS) return;

267 try {

268 const jsonFiles = (await readdir(SESSIONS_DIR)).filter((f) => f.endsWith(".json"));

269 if (jsonFiles.length <= MAX_SESSIONS) {

270 const now = Date.now();

271 for (const file of jsonFiles) try {

272 const filePath = join(SESSIONS_DIR, file);

273 if (now - (await stat(filePath)).mtimeMs > MAX_AGE_MS) await unlink(filePath);

Source & flagged code

1 flagged · loading source

dist/plugin2.jsView file

253*/ L254: const SESSIONS_DIR = join(homedir(), ".alfe", "sessions", "chat"); L255: const MAX_SESSIONS = 1e3; ... L301: const data = await readFile(sessionPath(sessionId), "utf-8"); L302: return JSON.parse(data); L303: } catch { ... L529: * - `https:` only. L530: * - Userinfo (`https://u:p@host/...`) is rejected. L531: * - IP-literal hosts (v4 or bracketed v6) are rejected outright — only ... L535: * L536: * Operators running an agent in a private network that needs to dereference L537: * additional hosts can extend the list via the

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/plugin2.jsView on unpkg · L253

Findings

1 High2 Medium5 Low

HighCloud Metadata Accessdist/plugin2.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

1 flagged

dist/plugin2.jsView file

Lines 233-273javascript

233 return false;

234}

235/**

236* Extract the channel mode from a standardized session key or conversationId.

237* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat', 'a2a') or fallback.

238*/

239function extractChannelMode(conversationId, fallback = "chat") {

240 return /^alfe:(\w+):/.exec(conversationId)?.[1] ?? fallback;

241}

242//#endregion

243//#region src/session-store.ts

244/**

245* Session Store — persists chat sessions to the local filesystem.

246*

247* Storage layout:

248* ~/.alfe/sessions/chat/{sessionId}.json

249*

250* Each session file contains metadata and the full message history.

251* Sessions are written on every message to ensure durability.

252* Old sessions are cleaned up automatically (30-day TTL, 1000 max).

253*/

254const SESSIONS_DIR = join(homedir(), ".alfe", "sessions", "chat");

255const MAX_SESSIONS = 1e3;

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/plugin2.jsView on unpkg · L253

256const MAX_AGE_MS = 720 * 60 * 60 * 1e3;

257const CLEANUP_INTERVAL_MS = 36e5;

258let lastCleanupAt = 0;

259async function ensureDir() {

260 if (!existsSync(SESSIONS_DIR)) await mkdir(SESSIONS_DIR, { recursive: true });

261}

262function sessionPath(sessionId) {

263 return join(SESSIONS_DIR, `${sessionId.replace(/[^a-zA-Z0-9_-]/g, "_")}.json`);

264}

265async function cleanupOldSessions() {

266 if (Date.now() - lastCleanupAt < CLEANUP_INTERVAL_MS) return;

267 try {

268 const jsonFiles = (await readdir(SESSIONS_DIR)).filter((f) => f.endsWith(".json"));

269 if (jsonFiles.length <= MAX_SESSIONS) {

270 const now = Date.now();

271 for (const file of jsonFiles) try {

272 const filePath = join(SESSIONS_DIR, file);

273 if (now - (await stat(filePath)).mtimeMs > MAX_AGE_MS) await unlink(filePath);