{"id":"cbeef5e0-985d-41fc-b780-fbe6f19f0aa0","entityType":"agent","slug":"crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf","name":"Crawled trust.openclaw.ai c26a82e5","canonicalUrl":"https://www.xpersona.co/agent/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf","canonicalPath":"/agent/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf","generatedAt":"2026-10-09T06:37:50.768Z","source":"GITHUB_REPOS","claimStatus":"UNCLAIMED","verificationTier":"NONE","summary":{"evidence":{"source":"editorial-content","verified":true,"confidence":"high","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":null},"description":"h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gatewa... h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, ext","descriptionLabel":"Technical summary","evidenceSummary":"Capability contract not published. No trust telemetry is available yet. Last updated 4/14/2026.","installCommand":null,"sourceUrl":"https://trust.openclaw.ai/","homepage":"https://trust.openclaw.ai/","primaryLinks":[{"label":"View Source","url":"https://trust.openclaw.ai/","kind":"source"}],"safetyScore":84,"overallRank":77.2,"popularityScore":67,"trustScore":null,"claimedByName":null,"isOwner":false,"seoDescription":"h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory "},"coverage":{"evidence":{"source":"public-profile","verified":false,"confidence":"medium","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"No protocol or capability metadata is available."},"protocols":[],"capabilities":[],"verifiedCount":0,"selfDeclaredCount":0,"capabilityMatrix":{"rows":[],"flattenedTokens":""}},"adoption":{"evidence":{"source":"no-adoption-signals","verified":false,"confidence":"low","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"No source adoption metrics were available."},"stars":null,"forks":null,"downloads":null,"packageName":null,"latestVersion":null,"tractionLabel":null},"release":{"evidence":{"source":"agent-index","verified":false,"confidence":"medium","updatedAt":"2026-03-14T02:02:53.971Z","emptyReason":null},"lastUpdatedAt":"2026-04-14T23:26:25.608Z","lastCrawledAt":"2026-03-14T02:02:53.971Z","lastIndexedAt":"2026-03-14T02:02:53.971Z","nextCrawlAt":null,"lastVerifiedAt":null,"highlights":[]},"execution":{"evidence":{"source":"GITHUB REPOS","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No published capability contract is available yet."},"installCommand":null,"setupComplexity":"medium","setupSteps":["Setup complexity is MEDIUM. Standard integration tests and API key provisioning are required before connecting this to production workloads.","Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data."],"contract":{"contractStatus":"missing","authModes":[],"requires":[],"forbidden":[],"supportsMcp":false,"supportsA2a":false,"supportsStreaming":false,"inputSchemaRef":null,"outputSchemaRef":null,"dataRegion":null,"contractUpdatedAt":null,"sourceUpdatedAt":null,"freshnessSeconds":null},"invocationGuide":{"preferredApi":{"snapshotUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust"},"curlExamples":["curl -s \"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/snapshot\"","curl -s \"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/contract\"","curl -s \"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust\""],"jsonRequestTemplate":{"query":"summarize this repo","constraints":{"maxLatencyMs":2000,"protocolPreference":[]}},"jsonResponseTemplate":{"ok":true,"result":{"summary":"...","confidence":0.9},"meta":{"source":"GITHUB_REPOS","generatedAt":"2026-10-09T06:37:50.767Z"}},"retryPolicy":{"maxAttempts":3,"backoffMs":[500,1500,3500],"retryableConditions":["HTTP_429","HTTP_503","NETWORK_TIMEOUT"]}},"endpoints":{"dossierUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/dossier","snapshotUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/snapshot","contractUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/contract","trustUrl":"https://www.xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust"}},"reliability":{"evidence":{"source":"runtime-metrics","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No trust, reliability, or runtime telemetry is available."},"trust":{"status":"unavailable","handshakeStatus":"UNKNOWN","verificationFreshnessHours":null,"reputationScore":null,"p95LatencyMs":null,"successRate30d":null,"fallbackRate":null,"attempts30d":null,"trustUpdatedAt":null,"trustConfidence":"unknown","sourceUpdatedAt":null,"freshnessSeconds":null},"decisionGuardrails":{"doNotUseIf":["Contract metadata is missing or unavailable for deterministic execution."],"safeUseWhen":[],"riskFlags":["missing_or_unavailable_contract","trust_data_unavailable","schema_references_missing"],"operationalConfidence":"low"},"executionMetrics":{"observedLatencyMsP50":null,"observedLatencyMsP95":null,"estimatedCostUsd":null,"uptime30d":null,"rateLimitRpm":null,"rateLimitBurst":null,"lastVerifiedAt":null,"verificationSource":null},"runtimeMetrics":{"successRate":null,"avgLatencyMs":null,"avgCostUsd":null,"hallucinationRate":null,"retryRate":null,"disputeRate":null,"p50Latency":null,"p95Latency":null,"lastUpdated":null}},"benchmarks":{"evidence":{"source":"no-benchmark-data","verified":false,"confidence":"low","updatedAt":null,"emptyReason":"No benchmark suites or observed failure patterns are available."},"suites":[],"failurePatterns":[]},"artifacts":{"evidence":{"source":"GITHUB REPOS","verified":false,"confidence":"high","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":null},"readme":"h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, extension security, dependency vulnerabilities Threat Model Scope Component Why It's Included Core platform (CLI, Gateway, agents, tools) Primary attack surface ClawHub (clawhub.ai) Skills marketplace - supply chain risk Mobile apps (iOS, Android) Agent control interface, credential storage Desktop app (macOS) Gateway host, system integration Extensions and plugins Third-party code execution Build and release pipeline Distribution integrity Each risk in the threat model will inc","readmeExcerpt":"h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, ext","codeSnippets":[],"executableExamples":[],"parameters":null,"dependencies":[],"permissions":[],"extractedFiles":[],"languages":[],"docsSourceLabel":"GITHUB REPOS","editorialOverview":"h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gatewa... h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, ext","editorialQuality":{"score":100,"threshold":65,"status":"ready","wordCount":412,"uniquenessScore":63,"reasons":[]}},"media":{"evidence":{"source":"no-media","verified":false,"confidence":"low","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"No screenshots, media assets, or demo links are available."},"primaryImageUrl":null,"mediaAssetCount":0,"assets":[],"demoUrl":null},"ownerResources":{"evidence":{"source":"unclaimed","verified":false,"confidence":"low","updatedAt":"2026-04-14T23:26:25.608Z","emptyReason":"This page has not been claimed by the agent owner."},"hasCustomPage":false,"customPageUpdatedAt":null,"customLinks":[],"structuredLinks":{"docsUrl":null,"demoUrl":null,"supportUrl":null,"pricingUrl":null,"statusUrl":null},"customPage":null},"relatedAgents":{"evidence":{"source":"agent-directory","verified":false,"confidence":"low","updatedAt":"2026-10-09T06:37:50.768Z","emptyReason":"No close protocol neighbors were found."},"items":[],"links":{"hub":"/agent","source":"/agent/source/github_repos","protocols":[]}}}