Security audit
OpenShell Sandbox
Security checks for vulnerabilities and agentic risk
Overview
This package is a disclosed OpenShell sandbox backend that runs and synchronizes agent workspaces through the OpenShell CLI, with sensitive behavior aligned to that purpose.
Install this only if you intend OpenClaw agents to execute inside OpenShell sandboxes and to synchronize workspace files through OpenShell. Review the configured OpenShell workspace, gateway, policy file, providers, and mirror versus remote mode, because the plugin can create/delete sandboxes and upload/download workspace contents as part of normal operation.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.