registry / @alfe.ai/openclaw-chat / 0.6.0

@alfe.ai/openclaw-chat@0.6.0

OpenClaw chat plugin for Alfe — web widget and mobile app channels

Static Scan Results

scanned 2h ago · by rust-scanner

Static analysis flagged 9 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 6 file(s), 160 KB of source, external domains: 127.0.0.1

Source & flagged code

2 flagged

dist/plugin2.jsView file

Lines 233-273javascript

233 return false;

234}

235/**

236* Extract the channel mode from a standardized session key or conversationId.

237* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat', 'a2a') or fallback.

238*/

239function extractChannelMode(conversationId, fallback = "chat") {

240 return /^alfe:(\w+):/.exec(conversationId)?.[1] ?? fallback;

241}

242//#endregion

243//#region src/session-store.ts

244/**

245* Session Store — persists chat sessions to the local filesystem.

246*

247* Storage layout:

248* ~/.alfe/sessions/chat/{sessionId}.json

249*

250* Each session file contains metadata and the full message history.

251* Sessions are written on every message to ensure durability.

252* Old sessions are cleaned up automatically (30-day TTL, 1000 max).

253*/

254const SESSIONS_DIR = join(homedir(), ".alfe", "sessions", "chat");

255const MAX_SESSIONS = 1e3;

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/plugin2.jsView on unpkg · L253

256const MAX_AGE_MS = 720 * 60 * 60 * 1e3;

257const CLEANUP_INTERVAL_MS = 36e5;

258let lastCleanupAt = 0;

259async function ensureDir() {

260 if (!existsSync(SESSIONS_DIR)) await mkdir(SESSIONS_DIR, { recursive: true });

261}

262function sessionPath(sessionId) {

263 return join(SESSIONS_DIR, `${sessionId.replace(/[^a-zA-Z0-9_-]/g, "_")}.json`);

264}

265async function cleanupOldSessions() {

266 if (Date.now() - lastCleanupAt < CLEANUP_INTERVAL_MS) return;

267 try {

268 const jsonFiles = (await readdir(SESSIONS_DIR)).filter((f) => f.endsWith(".json"));

269 if (jsonFiles.length <= MAX_SESSIONS) {

270 const now = Date.now();

271 for (const file of jsonFiles) try {

272 const filePath = join(SESSIONS_DIR, file);

273 if (now - (await stat(filePath)).mtimeMs > MAX_AGE_MS) await unlink(filePath);

dist/plugin2.cjsView file

•matchType = previous_version_dangerous_delta matchedPackage = @alfe.ai/openclaw-chat@0.5.1 matchedIdentity = npm:QGFsZmUuYWkvb3BlbmNsYXctY2hhdA:0.5.1 similarity = 0.667 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/plugin2.cjsView on unpkg

Source & flagged code

2 flagged · loading source

dist/plugin2.jsView file

253*/ L254: const SESSIONS_DIR = join(homedir(), ".alfe", "sessions", "chat"); L255: const MAX_SESSIONS = 1e3; ... L301: const data = await readFile(sessionPath(sessionId), "utf-8"); L302: return JSON.parse(data); L303: } catch { ... L441: * 1. Daemon WS frames are `maxPayload`-bounded — an uncapped multi-MB tool L442: * stdout would drop the WHOLE frame (losing the status transition too), L443: * so the cap has to live on the emit side, not the client. ... L452: * and (b) `args` is NOT sanitized at all and can carry base64 (an inline L453: * image arg, a `data:` URI in a write). So we reimplement a defensive L454: * strip+cap here and apply it to every field, regardless of upstream

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/plugin2.jsView on unpkg · L253

dist/plugin2.cjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/plugin2.cjsView on unpkg

Findings

2 High2 Medium5 Low

HighCloud Metadata Accessdist/plugin2.js

HighPrevious Version Dangerous Deltadist/plugin2.cjs

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License

Source & flagged code

2 flagged

dist/plugin2.jsView file

Lines 233-273javascript

233 return false;

234}

235/**

236* Extract the channel mode from a standardized session key or conversationId.

237* Returns the mode segment (e.g. 'sms', 'whatsapp', 'chat', 'a2a') or fallback.

238*/

239function extractChannelMode(conversationId, fallback = "chat") {

240 return /^alfe:(\w+):/.exec(conversationId)?.[1] ?? fallback;

241}

242//#endregion

243//#region src/session-store.ts

244/**

245* Session Store — persists chat sessions to the local filesystem.

246*

247* Storage layout:

248* ~/.alfe/sessions/chat/{sessionId}.json

249*

250* Each session file contains metadata and the full message history.

251* Sessions are written on every message to ensure durability.

252* Old sessions are cleaned up automatically (30-day TTL, 1000 max).

253*/

254const SESSIONS_DIR = join(homedir(), ".alfe", "sessions", "chat");

255const MAX_SESSIONS = 1e3;

High

Cloud Metadata Access

Source reaches cloud instance metadata or link-local credential endpoints.

dist/plugin2.jsView on unpkg · L253

256const MAX_AGE_MS = 720 * 60 * 60 * 1e3;

257const CLEANUP_INTERVAL_MS = 36e5;

258let lastCleanupAt = 0;

259async function ensureDir() {

260 if (!existsSync(SESSIONS_DIR)) await mkdir(SESSIONS_DIR, { recursive: true });

261}

262function sessionPath(sessionId) {

263 return join(SESSIONS_DIR, `${sessionId.replace(/[^a-zA-Z0-9_-]/g, "_")}.json`);

264}

265async function cleanupOldSessions() {

266 if (Date.now() - lastCleanupAt < CLEANUP_INTERVAL_MS) return;

267 try {

268 const jsonFiles = (await readdir(SESSIONS_DIR)).filter((f) => f.endsWith(".json"));

269 if (jsonFiles.length <= MAX_SESSIONS) {

270 const now = Date.now();

271 for (const file of jsonFiles) try {

272 const filePath = join(SESSIONS_DIR, file);

273 if (now - (await stat(filePath)).mtimeMs > MAX_AGE_MS) await unlink(filePath);

dist/plugin2.cjsView file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

dist/plugin2.cjsView on unpkg