registry / @inline-openclaw/inline / 0.0.57
@inline-openclaw/inline@0.0.57
OpenClaw channel plugin for interacting with an OpenClaw agent via **Inline**.
Static Scan Results
scanned 3mo ago · by rust-scannerStatic analysis flagged 10 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Oversized source lightweight scan
dist/channel-plugin-api.js2.20 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsHighEntropyStringsUrlStringsapi.inline.chatgithub.cominline.chatopenclaw.ai
Source & flagged code
3 flaggeddist/approval-handler.runtime.jsView file
773}
L774: fork() {
L775: this.stack.push({ chunks: this.chunks, buf: this.buf });
High
Child Process
Package source references child process execution.
dist/approval-handler.runtime.jsView on unpkg · L773dist/runtime-register-api.jsView file
44465}).strict();
L44466: var InlineExecApprovalsSchema = exports_external.object({
L44467: enabled: exports_external.union([exports_external.boolean(), exports_external.literal("auto")]).optional(),
High
dist/channel-plugin-api.jsView file
Findings
3 High3 Medium4 Low
HighChild Processdist/approval-handler.runtime.js
HighShelldist/runtime-register-api.js
HighCross File Remote Execution Contextdist/channel-plugin-api.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @inline-openclaw/inline@0.0.57.
See all versions of @inline-openclaw/inline for other recorded verdicts.
- Review the evidence and your use of @inline-openclaw/inline@0.0.57 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.