clawsweeper

    Use for all ClawSweeper work: OpenClaw issue/PR sweep reports, repair jobs, cloud fix PRs, @clawsweeper maintainer mention commands, trusted ClawSweeper-reviewed autofix/automerge, GitHub Actions monitoring, permissions, gates, and manual backfills.

    Rank#3500
    openclawgithubTool use391,537Last updated Oct 3, 2026, 12:41 PMgithub/openclaw/openclaw/.agents/skills/clawsweeper
    Created
    11 months ago
    Last commit
    17 hours ago
    Latest release
    v2026.9.92 days ago

    Security Findings

    Unpinned dependencies

    SuspiciousLineage

    2 unpinned: @openclaw/ai, @openclaw/session-url-contract

    Workflow makes outbound network call

    SuspiciousLineage

    [.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

    pull_request_target with secrets

    MaliciousLineage

    [.github/workflows/auto-response.yml] pull_request_target with secrets

    Versions

    3
    • Scanned Oct 3, 2026, 12:41 PMMedium
    • Scanned Aug 3, 2026, 08:26 PMMedium
    • Scanned Jul 19, 2026, 10:01 AMMedium