Openclaw Workspace Governance Installer

• Analyzed: May 16, 2026, 4:18 AM
• Findings: 1
• Version: 0.2.9
• Hash: b9a2d8af3ecf2e2869fad3d42986fb5e0c2ea586edaaef559416bca4434415bf
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle serves as an installer for an external plugin (@adamchanadam/openclaw-workspace-governance) and provides instructions for the agent to perform high-privilege operations, including modifying platform configurations (openclaw.json) and auditing workspace data. While these actions align with the stated purpose of 'Workspace Governance,' the instructions to fetch and execute remote artifacts and the broad system access required for the described commands represent a significant attack surface. Additionally, the _meta.json file contains a future-dated timestamp (2026).