registry  /  openclaw-code-agent  /  4.6.0

openclaw-code-agent@4.6.0

An OpenClaw plugin that orchestrates coding agent sessions as managed background processes. Launch, monitor, and control coding agents (Claude Code, Codex, experimental OpenCode, and more) directly from your AI gateway.

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 6 low-signal pattern(s) were surfaced and cleared.

Static reason
No blocking static signals were detected.

Decision evidence

public snapshot
Behavioral surface
Source
ChildProcessEnvironmentVarsFilesystem
Supply chain
HighEntropyStringsMinifiedUrlStrings
ManifestNo manifest risk signals triggered.
scanned 1 file(s), 492 KB of source, external domains: 127.0.0.1, github.com

Source & flagged code

1 flagged · loading source
dist/index.jsView file
1var mc=Object.defineProperty;var z=(t,e,n)=>()=>{if(n)throw n[0];try{return t&&(e=t(t=0)),e}catch(r){throw n=[r],r}};var fc=(t,e)=>{for(var n in e)mc(t,n,{get:e[n],enumerable:!0})}... L2: `)}var vc,Tc,xe=z(()=>{vc=new Set(["telegram","discord","slack","system","mattermost","feishu","line","whatsapp","signal","matrix","googlechat","bluebubbles","imessage","msteams"])... L3: `)}function Le(t,e,n){return oa(t,e,n).join(` L4: `)}var pn=z(()=>{});function Tt(t){return{type:"backend_ref",ref:t}}function Ct(t){return{type:"run_started",...t?{runId:t}:{}}}function dt(t){return{type:"text_delta",text:t}}func... L5: `)}}function Nc(t,e,n){let r=xt(n),o=r.length>0?0:void 0,i=o!=null?r[o]:void 0,s=i?.options.map(d=>d.label)??[],a=i?Le(i,o,r.length):Hn(r);return{requestId:`${t||"claude"}-ask-${e}... L6: ${S.text}`:S.text,n.enqueue(dt(S.text));continue}S.type==="tool_use"&&((S.name==="ExitPlanMode"||S.name==="set_permission_mode")&&(i=!0),S.name!=="AskUserQuestion"&&n.enqueue(zn(S.... L7: `)}async handleLine(e){let n=qc(e);n&&await Kc(n,{pending:this.pending,onNotification:this.onNotification,onRequest:this.onRequest,respond:r=>this.write(r)})}flushPending(e){this.p... L8: `).trim();return`$
Low
Weak Crypto

Package source references weak cryptographic algorithms.

dist/index.jsView on unpkg · L1

Findings

1 Medium5 Low
MediumEnvironment Vars
LowScripts Present
LowWeak Cryptodist/index.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings