@inline-openclaw/inline@0.0.67
OpenClaw channel plugin for interacting with an OpenClaw agent via **Inline**.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package documents that reporting is disabled unless an operator configures a Sentry DSN, and it provides opt-out controls. When enabled, reports can include absolute local stack paths and exception text, so this is a telemetry warning rather than a clean result or a block-level attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A wrapped plugin callback or registration operation fails while reporting is enabled by INLINE_OPENCLAW_SENTRY_DSN.
Impact
The configured collector can receive absolute local paths and exception text, which may expose identifying or sensitive details despite redaction of common secret patterns.
Mechanism
The plugin builds an error event containing exception details and stack frames, then posts it to the Sentry endpoint derived from the configured DSN.
AI rationale
The package documents that reporting is disabled unless an operator configures a Sentry DSN, and it provides opt-out controls. When enabled, reports can include absolute local stack paths and exception text, so this is a telemetry warning rather than a clean result or a block-level attack.
Evidence
dist/index.jsdocs/openclaw-setup.mdpackage.json
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- Stack parsing stores each matched filename as both `filename` and `abs_path`, so absolute local paths can enter reports.
- Reports include exception details and are posted to an endpoint derived from the configured Sentry DSN.
- The setup guide discloses the reported fields and says reporting is disabled unless the operator sets the DSN.
Evidence against
- Reporting requires an operator-provided collector and can be disabled with documented environment settings.
- The reporter redacts common token and secret patterns before sending.
- The manifest declares no install, preinstall, or postinstall lifecycle script.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/approval-handler.runtime.jsView file
773}
L774: fork() {
L775: this.stack.push({ chunks: this.chunks, buf: this.buf });
High
Child Process
Package source references child process execution.
dist/approval-handler.runtime.jsView on unpkg · L773dist/runtime-register-api.jsView file
62130}).strict();
L62131: var InlineExecApprovalsSchema = exports_external.object({
L62132: enabled: exports_external.union([exports_external.boolean(), exports_external.literal("auto")]).optional(),
High
dist/channel-plugin-api.jsView file
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/approval-handler.runtime.js
HighShelldist/runtime-register-api.js
HighCross File Remote Execution Contextdist/channel-plugin-api.js
HighSemantic Analysis Limiteddist/channel-plugin-api.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @inline-openclaw/inline@0.0.67.
See all versions of @inline-openclaw/inline for other recorded verdicts.
- Review the evidence and your use of @inline-openclaw/inline@0.0.67 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.