registry  /  openclaw-code-agent  /  4.5.8

openclaw-code-agent@4.5.8

An OpenClaw plugin that orchestrates coding agent sessions as managed background processes. Launch, monitor, and control coding agents (Claude Code, Codex, experimental OpenCode, and more) directly from your AI gateway.

Static Scan Results

scanned 14d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystem
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 484 KB of source, external domains: 127.0.0.1, github.com

Source & flagged code

1 flagged · loading source
dist/index.jsView file
1var tc=Object.defineProperty;var H=(t,e,n)=>()=>{if(n)throw n[0];try{return t&&(e=t(t=0)),e}catch(r){throw n=[r],r}};var nc=(t,e)=>{for(var n in e)tc(t,n,{get:e[n],enumerable:!0})}... L2: `)}var dc,hc,xe=H(()=>{dc=new Set(["telegram","discord","slack","system","mattermost","feishu","line","whatsapp","signal","matrix","googlechat","bluebubbles","imessage","msteams"])... L3: `)}function Oe(t,e,n){return Ys(t,e,n).join(` L4: `)}var dn=H(()=>{});function At(t){return{type:"backend_ref",ref:t}}function It(t){return{type:"run_started",...t?{runId:t}:{}}}function it(t){return{type:"text_delta",text:t}}func... L5: `)}}function Ac(t,e,n){let r=Rt(n),o=r.length>0?0:void 0,i=o!=null?r[o]:void 0,s=i?.options.map(d=>d.label)??[],a=i?Oe(i,o,r.length):Gn(r);return{requestId:`${t||"claude"}-ask-${e}... L6: ${S.text}`:S.text,n.enqueue(it(S.text));continue}S.type==="tool_use"&&((S.name==="ExitPlanMode"||S.name==="set_permission_mode")&&(i=!0),S.name!=="AskUserQuestion"&&n.enqueue(jn(S.... L7: `)}async handleLine(e){let n=Cc(e);n&&await Mc(n,{pending:this.pending,onNotification:this.onNotification,onRequest:this.onRequest,respond:r=>this.write(r)})}flushPending(e){this.p... L8: `).trim();return`$
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

Findings

1 Medium5 Low
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings