openclaw/src/security
Abdel Sy Fane bc88e58fcf
security: add skill/plugin code safety scanner (#9806)
* security: add skill/plugin code safety scanner module

* security: integrate skill scanner into security audit

* security: add pre-install code safety scan for plugins

* style: fix curly brace lint errors in skill-scanner.ts

* docs: add changelog entry for skill code safety scanner

* style: append ellipsis to truncated evidence strings

* fix(security): harden plugin code safety scanning

* fix: scan skills on install and report code-safety details

* fix: dedupe audit-extra import

* fix(security): make code safety scan failures observable

* fix(test): stabilize smoke + gateway timeouts (#9806) (thanks @abdelsfane)

---------

Co-authored-by: Darshil <ddhameliya@mail.sfsu.edu>
Co-authored-by: Darshil <81693876+dvrshil@users.noreply.github.com>
Co-authored-by: George Pickett <gpickett00@gmail.com>
2026-02-05 16:06:11 -08:00
..
audit-extra.ts security: add skill/plugin code safety scanner (#9806) 2026-02-05 16:06:11 -08:00
audit-fs.ts chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts. 2026-02-01 10:03:47 +09:00
audit.test.ts security: add skill/plugin code safety scanner (#9806) 2026-02-05 16:06:11 -08:00
audit.ts security: add skill/plugin code safety scanner (#9806) 2026-02-05 16:06:11 -08:00
channel-metadata.ts fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin) 2026-02-03 23:02:45 -08:00
external-content.test.ts Security: harden web tools and file parsing (#4058) 2026-02-01 15:23:25 -08:00
external-content.ts fix(security): separate untrusted channel metadata from system prompt (thanks @KonstantinMirin) 2026-02-03 23:02:45 -08:00
fix.test.ts chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts. 2026-02-01 10:03:47 +09:00
fix.ts chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts. 2026-02-01 10:03:47 +09:00
skill-scanner.test.ts security: add skill/plugin code safety scanner (#9806) 2026-02-05 16:06:11 -08:00
skill-scanner.ts security: add skill/plugin code safety scanner (#9806) 2026-02-05 16:06:11 -08:00
windows-acl.test.ts fix: stabilize windows acl tests and command auth registry (#9335) (thanks @M00N7682) 2026-02-05 00:38:35 -08:00
windows-acl.ts chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts. 2026-02-01 10:03:47 +09:00