registry / @malkovro/openclaw-fizzy-channel / 0.2.0

@malkovro/openclaw-fizzy-channel@0.2.0

OpenClaw channel plugin: chat with the agent from a Fizzy card while it sits in a chosen kanban column.

AI Security Review

scanned 2h ago · by lpm-firewall-ai

A card or comment containing an attacker-controlled absolute image URL can cause an authenticated request to an arbitrary host. The request includes the configured Fizzy API token.

Static reason

No blocking static signals were detected.

Trigger

A processed Fizzy comment or card contains an external <img src> URL while image sending is enabled.

Impact

Credential exfiltration of the Fizzy bot token to the external image host.

Mechanism

Bearer-token forwarding to unvalidated image URLs

Rationale

This is a concrete credential-forwarding vulnerability, not evidence of intentionally malicious behavior. It warrants a warning until authenticated attachment fetches are restricted to trusted Fizzy origins.

Evidence

src/images.tssrc/client.tssrc/inbound.tspackage.json

Network endpoints1

Arbitrary http(s) URL supplied in Fizzy card/comment HTML

Decision evidence

public snapshot

AI called this Suspicious at 94.0% confidence as Critical Vulnerability with low false-positive risk.

Evidence for warning

src/images.ts accepts absolute image URLs from card/comment HTML

@malkovro/openclaw-fizzy-channel@0.2.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code