registry / sealclaw / 2026.7.19

sealclaw@2026.7.19

⚠ Under review

Multi-channel AI gateway with extensible messaging integrations

Static Scan Results

scanned 3h ago · by rust-scanner

Static analysis flagged 21 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNativeBindingsNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedObfuscatedProtestwareTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4,441 file(s), 37.5 MB of source, external domains: 127.0.0.1, accounts.feishu.cn, accounts.google.com, accounts.larksuite.com, accounts.openai.com, ai-gateway.vercel.sh, ai.azure.com, aiplatform.googleapis.com, aistudio.google.com, alimama.taobao.com, api-dashboard.search.brave.com, api.anthropic.com, api.arcee.ai, api.cerebras.ai, api.chutes.ai, api.cloudflare.com, api.copilot.example, api.deepgram.com, api.deepinfra.com, api.deepseek.com, api.dev.runwayml.com, api.elevenlabs.io, api.exa.ai, api.example.com, api.firecrawl.dev, api.fireworks.ai, api.github.com, api.gradium.ai, api.groq.com, api.individual.githubcopilot.com, api.inworld.ai, api.kilo.ai, api.kimi.com, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.moonshot.ai, api.moonshot.cn, api.openai.com, api.perplexity.ai, api.plivo.com, api.push.apple.com, api.sandbox.push.apple.com, api.search.brave.com, api.senseaudio.cn, api.stepfun.ai, api.stepfun.com, api.synthetic.new, api.tavily.com, api.telnyx.com

Source & flagged code

10 flagged

package.jsonView file

Lines 1520-1561json

1520 "mac:package": "bash scripts/package-mac-app.sh",

1521 "mac:restart": "bash scripts/restart-mac.sh",

1522 "moltbot:rpc": "node scripts/run-node.mjs agent --mode rpc --json",

1523 "openclaw": "node scripts/run-node.mjs",

1524 "openclaw:rpc": "node scripts/run-node.mjs agent --mode rpc --json",

1525 "perf:kova:summary": "node scripts/kova-ci-summary.mjs",

1526 "perf:source:summary": "node scripts/openclaw-performance-source-summary.mjs",

1527 "plugin-sdk:api:check": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --check",

1528 "plugin-sdk:api:gen": "node --max-old-space-size=8192 --import tsx scripts/generate-plugin-sdk-api-baseline.ts --write",

1529 "plugin-sdk:check-exports": "node scripts/sync-plugin-sdk-exports.mjs --check",

1530 "plugin-sdk:sync-exports": "node scripts/sync-plugin-sdk-exports.mjs",

1531 "plugin-sdk:usage": "node --import tsx scripts/analyze-plugin-sdk-usage.ts",

1532 "plugins:boundary-report": "node --import tsx scripts/plugin-boundary-report.ts",

1533 "plugins:boundary-report:ci": "node --import tsx scripts/plugin-boundary-report.ts --summary --fail-on-cross-owner --fail-on-unclassified-unused-reserved --fail-on-eligible-compat",

1534 "plugins:boundary-report:json": "node --import tsx scripts/plugin-boundary-report.ts --json",

1535 "plugins:boundary-report:summary": "node --import tsx scripts/plugin-boundary-report.ts --summary",

1536 "plugins:inventory:check": "node scripts/generate-plugin-inventory-doc.mjs --check",

1537 "plugins:inventory:gen": "node scripts/generate-plugin-inventory-doc.mjs --write",

1538 "plugins:sync": "node --import tsx scripts/sync-plugin-versions.ts",

1539 "plugins:sync:check": "node --import tsx scripts/sync-plugin-versions.ts --check",

1540 "postinstall": "node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs",

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L1540

1541 "preinstall": "node scripts/preinstall-package-manager-warning.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L1541

1542 "prepush:ci": "bash scripts/prepush-ci.sh",

1543 "probe:anthropic:prompt": "node --import tsx scripts/anthropic-prompt-probe.ts",

1544 "prompt:snapshots:check": "node --import tsx scripts/generate-prompt-snapshots.ts --check",

1545 "prompt:snapshots:gen": "node --import tsx scripts/generate-prompt-snapshots.ts --write",

1546 "prompt:snapshots:sync-codex-model": "node --import tsx scripts/sync-codex-model-prompt-fixture.ts",

1547 "protocol:check": "pnpm protocol:gen && pnpm protocol:gen:swift && git diff --exit-code -- dist/protocol.schema.json apps/macos/Sources/OpenClawProtocol/GatewayModels.swift apps/shared/OpenClawKit/Sources/OpenClawProtocol/GatewayModels.swift",

1548 "protocol:gen": "node --import tsx scripts/protocol-gen.ts",

1549 "protocol:gen:swift": "node --import tsx scripts/protocol-gen-swift.ts",

1550 "proxy:coverage": "node scripts/run-node.mjs proxy coverage",

1551 "proxy:gateway": "node scripts/run-node.mjs proxy run -- node scripts/run-node.mjs gateway",

1552 "proxy:install-ca": "node --import tsx scripts/proxy-install-ca.mjs",

1553 "proxy:run": "node scripts/run-node.mjs proxy run",

1554 "proxy:start": "node scripts/run-node.mjs proxy start",

1555 "qa:e2e": "node --import tsx scripts/qa-e2e.ts",

1556 "qa:lab:build": "vite build --config extensions/qa-lab/web/vite.config.ts",

1557 "qa:lab:ui": "pnpm openclaw qa ui",

1558 "qa:lab:up": "node --import tsx scripts/qa-lab-up.ts",

1559 "qa:lab:up:fast": "node --import tsx scripts/qa-lab-up.ts --use-prebuilt-image --bind-ui-dist --skip-ui-build",

1560 "qa:lab:watch": "vite build --watch --config extensions/qa-lab/web/vite.config.ts",

1561 "qa:otel:smoke": "node --import tsx scripts/qa-otel-smoke.ts",

dist/proxy-cli.runtime-DKH7sHq8.jsView file

Lines 744-784javascript

744 env: childEnv,

745 cwd: process$1.cwd()

746 });

747 child.once("error", reject);

748 child.once("exit", (code, signal) => {

749 process$1.exitCode = signal ?

dist/dist-Bc5XAGjM.jsView file

Lines 477-517javascript

477 return {

478 api,

479 models,

480 getModel,

481 state,

482 setResponses(responses) {

483 pendingResponses = [...responses];

484 },

485 appendResponses(responses) {

dist/control-ui/assets/index-8eXzbQ2W.jsView file

5751contains invisible/control Unicode U+200C (zero width non-joiner) `}var fX=re(E(((e,t)=>{(function(n,r){typeof e==`object`&&t!==void 0?t.exports=r():typeof define==`function`&&define.amd?define(r):n.JSON5=r()})(e,(function(){function e(e,t){return t={exports:{}},e(t,t.exports),t.exports}var t=e(function

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-8eXzbQ2W.jsView on unpkg · L5751

skills/model-usage/scripts/test_model_usage.pyView file

•path = skills/model-usage/scripts/test_model_usage.py kind = build_helper sizeBytes = 1310 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/test_model_usage.pyView on unpkg

docs/help/faq.mdView file

Lines 1359-1399markdown

1359

1360 </Accordion>

1361

1362 <Accordion title='What does "another gateway instance is already listening" mean?'>

1363 OpenClaw enforces a runtime lock by binding the WebSocket listener immediately on startup (default `ws://127.0.0.1:18789`). If the bind fails with `EADDRINUSE`, it throws `GatewayLockError` indicating another instance is already listening.

1364

1365 Fix: stop the other instance, free the port, or run with `openclaw gateway --port <port>`.

1366

1367 </Accordion>

1368

1369

docs/gateway/tailscale.mdView file

Lines 79-119markdown

79 },

80}

81```

83Connect from another Tailnet device:

85- Control UI: `http://<tailscale-ip>:18789/`

86- WebSocket: `ws://<tailscale-ip>:18789`

88<Note>

89Loopback (`http://127.0.0.1:18789`) will **not** work in this mode.

90</Note>

92### Public internet (Funnel + shared password)

docs/gateway/configuration-reference.mdView file

Lines 345-385markdown

345 },

346}

347```

348

349- `seamColor`: accent color for native app UI chrome (Talk Mode bubble tint, etc.).

350- `assistant`: Control UI identity override. Falls back to active agent identity.

351

352---

353

354## Gateway

355

356```json5

357{

358

Source & flagged code

10 flagged · loading source

package.jsonView file

•scripts.preinstall = node scripts/preinstall-package-manager-warning.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall-bundled-plugins.mjs && node scripts/postinstall-patch-pi-ai.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/proxy-cli.runtime-DKH7sHq8.jsView file

764patternName = generic_password severity = medium line = 764 matchedText = url.pass...ed";

Medium

Secret Pattern

Package contains a possible secret pattern.

dist/proxy-cli.runtime-DKH7sHq8.jsView on unpkg · L764

dist/dist-Bc5XAGjM.jsView file

497//#region node_modules/@mariozechner/pi-ai/dist/providers/register-builtins.js L498: const importNodeOnlyProvider = (specifier) => import(specifier); L499: let anthropicProviderModulePromise;

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/dist-Bc5XAGjM.jsView on unpkg · L497

dist/control-ui/assets/index-8eXzbQ2W.jsView file

Critical

Trojan Source Unicode

Source contains bidi control or invisible Unicode characters associated with Trojan Source attacks.

dist/control-ui/assets/index-8eXzbQ2W.jsView on unpkg · L5751

skills/model-usage/scripts/test_model_usage.pyView file

•path = skills/model-usage/scripts/test_model_usage.py kind = build_helper sizeBytes = 1310 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

skills/model-usage/scripts/test_model_usage.pyView on unpkg

docs/help/faq.mdView file

1379patternName = generic_password severity = medium line = 1379 matchedText = password...rd",

Medium

Secret Pattern

Hardcoded password in docs/help/faq.md

docs/help/faq.mdView on unpkg · L1379

docs/gateway/tailscale.mdView file

99patternName = generic_password severity = medium line = 99 matchedText = auth: { ..." },

Medium

Secret Pattern

Hardcoded password in docs/gateway/tailscale.md

docs/gateway/tailscale.mdView on unpkg · L99

docs/gateway/configuration-reference.mdView file

365patternName = generic_password severity = medium line = 365 matchedText = // passw...WORD

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L365

395patternName = generic_password severity = medium line = 395 matchedText = // passw...rd",

Medium

Secret Pattern

Hardcoded password in docs/gateway/configuration-reference.md

docs/gateway/configuration-reference.mdView on unpkg · L395

Findings

1 Critical1 High12 Medium7 Low

CriticalTrojan Source Unicodedist/control-ui/assets/index-8eXzbQ2W.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumSecret Patterndist/proxy-cli.runtime-DKH7sHq8.js

MediumDynamic Requiredist/dist-Bc5XAGjM.js

MediumNetwork

MediumEnvironment Vars

MediumProtestware

MediumShips Build Helperskills/model-usage/scripts/test_model_usage.py

MediumStructural Risk Force Deep Review

MediumSecret Patterndocs/help/faq.md

MediumSecret Patterndocs/gateway/tailscale.md

MediumSecret Patterndocs/gateway/configuration-reference.md

LowScripts Present

LowEval

LowFilesystem

LowObfuscated

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings