registry / @clawling/clawchat-plugin-openclaw / 2026.10.9-4
@clawling/clawchat-plugin-openclaw@2026.10.9-4
OpenClaw ClawChat channel plugin
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe package has no install-time execution hook, and its runtime downloads support the documented Liveware demo feature. The sample assets are hash-checked, and the inspected credential use is part of that feature’s Liveware CLI login flow.
Static reason
No blocking static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Channel runtime startup; the demo flow requires a connection store and the livewareSample setting to be enabled, which defaults to true.
Impact
Creates and runs the advertised sample app for the configured account. The inspected behavior matches the package’s stated channel and Liveware integration purpose.
Mechanism
The integration downloads its CLI and demo assets from vendor-associated hosts, verifies demo file hashes, then uses the account token to log in to the Liveware CLI and run the sample app and tunnel.
AI rationale
The package has no install-time execution hook, and its runtime downloads support the documented Liveware demo feature. The sample assets are hash-checked, and the inspected credential use is part of that feature’s Liveware CLI login flow.
Evidence
<stateDir>/clawchat/liveware<stateDir>/clawchat/liveware-sample/app
Network endpoints2
media.clawling.chatraw.githubusercontent.com
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest has no preinstall, install, or postinstall hook; its prepublishOnly script runs typechecking.
- The optional Liveware CLI is downloaded from the vendor host media.clawling.chat.
- Downloaded sample files are SHA-256 checked against the manifest before being written.
- The sample supervisor starts only when a connection store exists and the livewareSample setting is enabled.
- The package’s skill documentation describes the Liveware Sample as an auto-installed app feature.
Evidence against
- The sample is enabled by default and, when it starts, passes the ClawChat account token to the Liveware CLI login command.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/src/plugin-report.jsView file
17try {
L18: const require = createRequire(import.meta.url);
L19: let dir = dirname(fileURLToPath(import.meta.url));
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/src/plugin-report.jsView on unpkg · L17dist/src/dm-recall-default.js#virtual:normalized:round1View file
•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 4
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/src/dm-recall-default.js#virtual:normalized:round1View on unpkgpackage.json
Findings
1 Critical2 High4 Medium5 Low
CriticalManifest Confusionpackage.json
HighSemantic Analysis Limiteddist/src/dm-recall-default.js#virtual:normalized:round1
HighPrevious Version Dangerous Deltadist/src/liveware-sample.js
MediumDynamic Requiredist/src/plugin-report.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @clawling/clawchat-plugin-openclaw@2026.10.9-4.
See all versions of @clawling/clawchat-plugin-openclaw for other recorded verdicts.
- Review the evidence and your use of @clawling/clawchat-plugin-openclaw@2026.10.9-4 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.