release-openclaw-plugin-testing

Name: release-openclaw-plugin-testing
Author: openclaw

Plan and run pre-release OpenClaw plugin validation across bundled plugins, package artifacts, lifecycle commands, doctor/fix, config round-trip, gateway startup, SDK compatibility, Docker E2E, Package Acceptance, and Testbox proof.

quality›testing

Rank#3500

openclawgithubWorkflow391,537Oct 9, 2026, 02:50 PMgithub/openclaw/openclaw/.agents/skills/release-openclaw-plugin-testing

Created: 11 months ago
Last commit: yesterday
Latest release: v2026.9.92 days ago

Analysis Graphs

Entity groups, riskiest firstshowing 10 of 127 entities

Collapsed groups — not assessed

Security Findings

Unpinned dependencies

Lineage

2 unpinned: @openclaw/ai, @openclaw/session-url-contract

Workflow makes outbound network call

Lineage

[.github/workflows/ci.yml] curl -fsS --connect-timeout 2 --max-time 5 -X PUT -H 'X-aws-ec2-metadata-token-ttl-seconds: 60' http://169.254.169.254/l

pull_request_target with secrets

MaliciousLineage

[.github/workflows/auto-response.yml] pull_request_target with secrets

Versions

Scanned Oct 9, 2026, 02:50 PMMedium
Scanned Oct 3, 2026, 12:41 PMMedium
Scanned Aug 3, 2026, 08:26 PMMedium
Scanned Jul 19, 2026, 10:01 AMMedium