registry / @xxclaw-plugin/xxclaw-plugin / 1.1.3

@xxclaw-plugin/xxclaw-plugin@1.1.3

- **通道 ID**：`xxclaw` - **会话类型**：群聊（`group`） - 使用网关 API 与绑定令牌完成代理注册，换取 OpenIM 凭证并维护 WebSocket / HTTP 连接 - 入站消息进入 OpenClaw 流水线，出站回复走同一 IM 通道

Static Scan Results

scanned 14h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 72.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

CryptoEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicenseWildcardDependency

scanned 15 file(s), 121 KB of source, external domains: 127.0.0.1, www.xianxiazhipin.cn

Source & flagged code

3 flagged

dist/certs/server-key.pemView file

Lines 1-21text

1-----BEGIN PRIVATE KEY-----

Critical

Critical Secret

Package contains a critical-looking secret pattern.

dist/certs/server-key.pemView on unpkg · L1

Critical

Secret Pattern

RSA private key in dist/certs/server-key.pem

dist/certs/server-key.pemView on unpkg · L1

2MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDA7qFcBfEi4F24

3r0HfNHWvP/pj0ye/inD04yy/Z/gdMKwWD1mBvNGfiUOlkBOdlDjpvNWRlMPr9QJ/

4lwMvnRHt3qcVMQ30r675NJIdqLGzz9MItlLKuFIBg8D0CScACYz+XMP1hTKdAOWR

57yC5a0NgqZ6SOIrt2m1DZgmeexm0eYlsJKtMXMA5X2rP3H1O+ZdboRO0HkVIOLWW

6VlL3rrJrBk+FJYmoU5LQd8i2rA/BYZEEwOCv1yqhBP/L2Rc1Nnk4MDGIeHgeDnCr

7J0XmN1F9DokEsJivUP2G5/knSh6yJ49sSMvV7EGJLQhNzGtN3HX4QdO9u1gWRROk

8PXR+Wal3bGeYwC8HOfin5rQkmXdQQMUWSdGuASj1CZyPsSB7aBjH87FhKXDmL37G

9Bp5JLEB1DLFrh2CcM2tSK8eRDmtXesj5ikE7kJ/+DRohQau28QNi1elq49qbWD7d

10Xh9EP9aYS/PeS44u4fQoRDPY6vw3F+oVMryhxFuS5odtIQI0oaXQ1vvv7vYwvNom

11CgRg/Yv+YkgY/YS/PvGs0TfNhmrF173pGYeN/XHmKeH+Xj3OEiVHqrOGYW/JZAz/

12YDe4VubjdgtBDq3IofrNgykjdrWwUhNN810hLSp4Y+Avlm0cNoX9XaJufy23eSO9

13iW+7zMiAODayH3D/V03PTO/BAEL/oQIDAQABAoICAANnAe35RdofWk/EOXVp+6xS

14RMRnaCNK2fibnAGpH/lFzzcZYLL2xTyaw1hjXNEx2LoYhCyr0rOxz7A31czMaJFJ

15FKm9Qnl+8qc+69e9jpq07swPyRB9pSaVL/0tvyQTRwsCUEtfZLfbmPDUpn9WmqrU

16+vCpshuFN1mRrlg+5AJohUmksOepGBO68MuHICeZI7fwNIR/5ylhpKQo1BA9orRb

17+WGH+rA+/w8RmbbM/H8kzRWoIB5BvWT3DVrHMo9T7VnWEb2OIFIpX4fJKsSnU5bQ

18v45XXe3zj/EF3ME6X6W1KGSYuQ2F+9bjNisHEJpgKa1t3cHSELjd0X2bPtduldw3

19K4JnS+C3TvPu4oS64JL1dKj68woztVqTvlGE3lONsW4a0U4o+cOqO/UEfCiK8JG7

20JXw1VqHQpqx3cs0HJqdpsR9vrUxbbMamj2ap1xbomnjBZTTntkwYXqMzQZaW8U/6

21yKOiH4843w34rn9fLFx33Wxt+1/FUAQ0askTItVMsYb5oxThqFhVlJLebtUCivys

dist/certs/client-key.pemView file

Lines 1-21text

1-----BEGIN PRIVATE KEY-----

Critical

Secret Pattern

RSA private key in dist/certs/client-key.pem

dist/certs/client-key.pemView on unpkg · L1

2MIIJQQIBADANBgkqhkiG9w0BAQEFAASCCSswggknAgEAAoICAQDQXxooADwPy/2R

3zFCMyDHoKAJpr3XW8X3XnawDXsaIJFgCk2rL9QBrILdJLkAwAMAEcKKX1muVN4pz

4Lhk848+X3CUo9g9sngneY3q7cNyeKuU46B9gtWRWo9jGO6WNwU2s4IROVNtUBf8+

5KAVsVbZhSR42ipEDhVcWCk4uSjgS0yyJHxoaWnhx2gVgHj0Wy8wUHJXRngE0Kre8

6aVN+mBPRG+N+1tg1LkLq8j3yTT/B51nIZZvsK6A4G78yHUmie5epM7EXyMKNWfFD

7C1Qfqg/jjzVmlsqWBeJ+qw7o2uVfhJMazhSj5EyAc+Ls1h5CGSTgFh0YXmXytbUA

8EaW/7HuvfASUErBOhBGI+7xLVCS2aNxzcaTcfw76lPT0arAkKvKtfJP/C1+gcFlY

9qcHtIZTHu5FsirgAgINPC6+kkTE1d73AD2o7Qf4XJ8qYZzxZ2LUL5W+ymA6HRpvH

Source & flagged code

3 flagged · loading source

dist/certs/server-key.pemView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code