Caveat verdict
openclaw-admin-main
Administrative dashboard for OpenClaw deployment management; no capabilities, content describes standard admin functionality with no evidence of malicious behavior.
⚠ Flagged for review — coarse, uncorroborated signal, not a confirmed exploit. Review the config yourself before installing.
Automated static analysis — not a human review. Caveat flags capabilities, not confirmed intent, and can produce false positives. Disagree with this verdict? Use Dispute below.
Findings (13)
<script> tag in markdown — potential code injection
AGENTS.md · prose · downgraded · <script
Possible hardcoded credential
src/i18n/messages/zh-CN.ts · prose · downgraded · secret: '输入新值(留空不变更)
Opens WebSocket connection
DYNAMIC_AGENTS_FIX_SUMMARY.md · code · WebSocket
Accesses OpenClaw config/secrets directly
DYNAMIC_AGENTS_USER_GUIDE.md · prose · downgraded · ~/.openclaw/openclaw.json
Uses exec() — may execute shell commands
server/database.js · prose · downgraded · exec(
Base64 decode (atob) — may hide malicious payloads
src/api/device-identity.ts · prose · downgraded · atob(
References sudo — requests elevated privileges
src/i18n/messages/zh-CN.ts · prose · downgraded · sudo
Dynamic import() — loads module at runtime
src/router/routes.ts · prose · downgraded · import('
Base64 encode (btoa) — may obfuscate data exfiltration
src/api/device-identity.ts · prose · downgraded · btoa(
String.fromCharCode — can build strings to evade detection
src/api/device-identity.ts · prose · downgraded · String.fromCharCode
queueMicrotask — defers execution via microtask queue
src/api/http-client.ts · prose · downgraded · queueMicrotask(
References agent configuration files
src/api/types/config.ts · prose · downgraded · AgentConfig
References agent memory files
src/stores/memory.ts · prose · downgraded · MEMORY.md
Permissions & capabilities
No declared permissions — minimal attack surface.
Is this flag fair?
Thanks — recorded.