oauth-coder-bridge

• Analyzed: Apr 8, 2026, 1:36 AM
• Findings: 1
• Version: 1.3.0
• Hash: 91cbfb39b86d98ae953ed9fdbbcd4b4e0d134c8f2fae412597fdba5261e68cc0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The oauth-coder-bridge skill provides a local HTTP server that acts as a proxy between OpenClaw and the oauth-coder CLI tool. The core logic in scripts/oauth-coder-bridge.py translates Anthropic-style API requests into subprocess calls, including features like rate limiting, localhost binding, and basic prompt sanitization to prevent injection. The installation scripts (setup.sh and update-openclaw-config.py) perform standard configuration tasks such as copying files and updating the OpenClaw provider settings, with no evidence of data exfiltration, obfuscation, or malicious intent.