registry  /  openclaw-code-agent  /  4.5.7

openclaw-code-agent@4.5.7

An OpenClaw plugin that orchestrates coding agent sessions as managed background processes. Launch, monitor, and control coding agents (Claude Code, Codex, experimental OpenCode, and more) directly from your AI gateway.

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystem
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 481 KB of source, external domains: 127.0.0.1, github.com

Source & flagged code

1 flagged · loading source
dist/index.jsView file
1var Yu=Object.defineProperty;var H=(t,e,n)=>()=>{if(n)throw n[0];try{return t&&(e=t(t=0)),e}catch(r){throw n=[r],r}};var Zu=(t,e)=>{for(var n in e)Yu(t,n,{get:e[n],enumerable:!0})}... L2: `)}var oc,pc,Ie=H(()=>{oc=new Set(["telegram","discord","slack","system","mattermost","feishu","line","whatsapp","signal","matrix","googlechat","bluebubbles","imessage","msteams"])... L3: `)}function De(t,e,n){return Qs(t,e,n).join(` L4: `)}var on=H(()=>{});function Pt(t){return{type:"backend_ref",ref:t}}function bt(t){return{type:"run_started",...t?{runId:t}:{}}}function nt(t){return{type:"text_delta",text:t}}func... L5: `)}}function wc(t,e,n){let r=wt(n),o=r.length>0?0:void 0,i=o!=null?r[o]:void 0,s=i?.options.map(l=>l.label)??[],a=i?De(i,o,r.length):Un(r);return{requestId:`${t||"claude"}-ask-${e}... L6: ${S.text}`:S.text,n.enqueue(nt(S.text));continue}S.type==="tool_use"&&((S.name==="ExitPlanMode"||S.name==="set_permission_mode")&&(i=!0),S.name!=="AskUserQuestion"&&n.enqueue(Vn(S.... L7: `)}async handleLine(e){let n=Ac(e);n&&await Ic(n,{pending:this.pending,onNotification:this.onNotification,onRequest:this.onRequest,respond:r=>this.write(r)})}flushPending(e){this.p... L8: `).trim();return`$
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

Findings

1 Medium5 Low
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings