Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
OpenClaw channel registration and subsequent IM/agent message handling.
Impact
Potential unintended local-file disclosure or model-request forwarding if the hosting agent/runtime is compromised or misconfigured.
Mechanism
IM bridging, media upload, and optional model-request relay
Rationale
No concrete malicious chain or lifecycle persistence was found. The unbounded file-upload and request-relay capabilities warrant a warning for deployment review.
Evidence
package.jsonindex.jssrc/media.jssrc/outbound.jssrc/gateway-relay.jssrc/control-server.jssrc/oss.js~/.openclaw/media~/.openclaw/<user>/palz-log/palz-<date>.log
Network endpoints2
oss.csaiagent.comtracing-analysis-dc-bj.aliyuncs.com/adapt_cd5l20bzv2@591056c1ce22f09_cd5l20bzv2@53df7ad2afe8301/api/otlp/traces