registry / @inline-openclaw/inline / 0.0.60
@inline-openclaw/inline@0.0.60
OpenClaw channel plugin for interacting with an OpenClaw agent via **Inline**.
Static Scan Results
scanned 2mo ago · by rust-scannerStatic analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.
Decision evidence
public snapshotBehavioral surface
ChildProcessEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Oversized source lightweight scan
dist/approval-handler.runtime.js2.48 MB file, sampled 256 KB
ChildProcessEnvironmentVarsHighEntropyStringsUrlStringsgithub.com
dist/channel-plugin-api.js2.85 MB file, sampled 256 KB
FilesystemChildProcessEnvironmentVarsHighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/approval-handler.runtime.jsView file
773}
L774: fork() {
L775: this.stack.push({ chunks: this.chunks, buf: this.buf });
High
Child Process
Package source references child process execution.
dist/approval-handler.runtime.jsView on unpkg · L773dist/runtime-register-api.jsView file
59798}).strict();
L59799: var InlineExecApprovalsSchema = exports_external.object({
L59800: enabled: exports_external.union([exports_external.boolean(), exports_external.literal("auto")]).optional(),
High
dist/channel-plugin-api.jsView file
Findings
4 High3 Medium4 Low
HighChild Processdist/approval-handler.runtime.js
HighShelldist/runtime-register-api.js
HighCross File Remote Execution Contextdist/channel-plugin-api.js
HighSemantic Analysis Limiteddist/channel-plugin-api.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @inline-openclaw/inline@0.0.60.
See all versions of @inline-openclaw/inline for other recorded verdicts.
- Review the evidence and your use of @inline-openclaw/inline@0.0.60 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.