Openclaw Interaction Bridge

• Verdict: Pass
• Analyzed: May 11, 2026, 1:56 AM
• Findings: 0
• Version: 1.6.3
• Hash: 35dc8ccb56a20ab7b67ac617f461b58e9b2dea502f736203011362238b1da120
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: openclaw-interaction-bridge Version: 1.6.3 The OpenClaw Interaction Bridge plugin is designed to connect agent activity to an external hardware display and physical buttons (Snarling). It implements a human-in-the-loop approval system using OpenClaw's TaskFlow API and registers HTTP callback routes (/approval-callback, /notification-callback) to resume agent execution upon user input. The plugin uses a shared secret (OPENCLAW_APPROVAL_SECRET) to authenticate these callbacks and communicates only with local endpoints (localhost:5000). No evidence of malicious intent, data exfiltration, or unauthorized command execution was found in index.ts or approval_tool.ts.