registry / @inline-openclaw/inline / 0.0.68
@inline-openclaw/inline@0.0.68
OpenClaw channel plugin for interacting with an OpenClaw agent via **Inline**.
AI Security Review
scanned 4d ago · by lpm-firewall-aiThe package implements the advertised OpenClaw channel integration. Its error-reporting path requires a user-configured Sentry DSN, and the inspected source showed no malicious credential flow or unauthorized account action.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
Plugin registration and callback errors; reporting requires a valid user-configured Sentry DSN.
Impact
No unauthorized credential transfer or other attack behavior was identified. Configured error reporting may include exception messages and stack paths.
Mechanism
The plugin communicates with Inline's API and can send redacted exception details to the endpoint specified by INLINE_OPENCLAW_SENTRY_DSN.
AI rationale
The package implements the advertised OpenClaw channel integration. Its error-reporting path requires a user-configured Sentry DSN, and the inspected source showed no malicious credential flow or unauthorized account action.
Evidence
dist/index.jsdist/runtime-register-api.jsdist/channel-plugin-api.js
Network endpoints2
api.inline.chatEndpoint configured by INLINE_OPENCLAW_SENTRY_DSN
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package entry point is a channel plugin for OpenClaw.
- Error reporting requires an INLINE_OPENCLAW_SENTRY_DSN; without a valid configured DSN, the sender returns without sending.
- Reporting is triggered by errors in wrapped plugin callbacks and registration, not by collecting credentials for another service.
- Telemetry text redacts common authorization values, tokens, passwords, and secrets before sending.
Evidence against
- When configured, error reports can include exception messages and stack frames, which may contain local paths.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Oversized source lightweight scan
Source & flagged code
5 flaggeddist/approval-handler.runtime.jsView file
773}
L774: fork() {
L775: this.stack.push({ chunks: this.chunks, buf: this.buf });
High
Child Process
Package source references child process execution.
dist/approval-handler.runtime.jsView on unpkg · L773•stage = ast_semantic_analysis; reason = ast_path_work_budget_exceeded; limitedFiles = 2
High
Semantic Analysis Limited
A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
dist/approval-handler.runtime.jsView on unpkgdist/runtime-register-api.jsView file
63177}).strict();
L63178: var InlineExecApprovalsSchema = exports_external.object({
L63179: enabled: exports_external.union([exports_external.boolean(), exports_external.literal("auto")]).optional(),
Findings
1 Critical4 High3 Medium4 Low
CriticalPrevious Version Dangerous Deltadist/index.js
HighChild Processdist/approval-handler.runtime.js
HighShelldist/runtime-register-api.js
HighCross File Remote Execution Contextdist/channel-plugin-api.js
HighSemantic Analysis Limiteddist/approval-handler.runtime.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @inline-openclaw/inline@0.0.68.
See all versions of @inline-openclaw/inline for other recorded verdicts.
- Review the evidence and your use of @inline-openclaw/inline@0.0.68 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.