Recursant for OpenClaw

• Analyzed: May 15, 2026, 1:47 PM
• Findings: 1
• Version: 0.1.0
• Hash: 7bdbe6916e7fe53bfe61c7d6a2ee1a33cd9084a13376a803b37fd7d3f4091419
• Source: palm
• External report: View on VirusTotal

Findings (1)

Package: openclaw-recursant (npm) Version: 0.1.0 Description: Recursant governance plugin for OpenClaw — registers the instance with a Recursant registry and routes tool/LLM/message traffic through Recursant interceptors. The package functions as a governance and auditing client for the OpenClaw environment, connecting to a user-configured external control plane (Recursant registry). It implements interceptors for authorization, rate limiting, and PII redaction (email, SSN, credit card, phone numbers) on tool calls, LLM inputs, and messages. It collects system fingerprinting data (hostname, OS, username, derived machine ID) upon enrollment and sends detailed operational audit logs (tool calls, LLM calls, message metadata) to the configured remote registry. All external communication endpoints are used for their stated purposes (enrollment, heartbeat, policy fetching, audit batch push). Although the plugin is highly invasive, its behavior is transparent and aligns entirely with its documented purpose as an AI governance agent. It relies on explicit user configuration (registryUrl, enrollmentToken) for network communication.