clawdotnet/openclaw.net

Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.

https://github.com/clawdotnet/openclaw.net · scanned 2026-05-15 08:41 UTC (4 weeks, 1 day ago) · 10 languages

81 raw signals (28 security + 53 graph) System graph score 85 (lower by 26)

File as issue Image

UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 weeks, 1 day ago · v1 · 10 actionable findings from 1 signal source. 17 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON

100.0% cov · 0 findings

Score breakdown â 2026-05-17-v4 calibration-aware

Component	Sub-score	Weight	Contribution
`structure_score`	65.0	0.15	9.75
`security_score`	81.4	0.25	20.35
`testing_score`	0.0	0.20	0.00
`documentation_score`	85.0	0.15	12.75
`practices_score`	75.0	0.15	11.25
`code_quality`	48.9	0.10	4.89
Overall		1.00	59.0

Calibrated penalty buckets (security_score): agent: 1.1 Â· docker: 8.9 Â· journey: 8.6

Severity distribution — click a segment to filter

Active filters: excluding tests × Reset all

Severity: Critical 1 High 5 Medium 0 Low 3 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 10 System graph 0 Crowd 0 Layer: Security 1 Cicd 5 Quality 4

Exclude dismissed / FP Exclude test files

All 1185 nodes from the latest scan, grouped by kind. Each node is a unit the engine identified (file, function, endpoint, table…). Most users won't need this view — it's primarily for debugging the engine's graph extraction or for AI agents that want to enumerate the project structure.

Label	Layer	Status	Path
`README.md`	software	healthy	`README.md`
`CONTRIBUTING.md`	software	healthy	`CONTRIBUTING.md`
`Dockerfile`	software	healthy	`Dockerfile`
`AUDIT_REPORT.md`	software	healthy	`AUDIT_REPORT.md`
`CODE_OF_CONDUCT.md`	software	healthy	`CODE_OF_CONDUCT.md`
`SECURITY.md`	software	healthy	`SECURITY.md`
`CHANGELOG.md`	software	healthy	`CHANGELOG.md`
`docker-compose.yml`	software	healthy	`docker-compose.yml`
`agent.approval.shell.json`	software	healthy	`tests/agent-scenarios/agent.approval.shell.json`
`agent.tool.basic.json`	software	healthy	`tests/agent-scenarios/agent.tool.basic.json`
`public-smoke.json`	software	healthy	`compat/public-smoke.json`
`mempalace-memory.md`	software	healthy	`docs/mempalace-memory.md`
`CANVAS_A2UI.md`	software	healthy	`docs/CANVAS_A2UI.md`
`PULSE.md`	software	healthy	`docs/PULSE.md`
`architecture-startup-refactor.md`	software	healthy	`docs/architecture-startup-refactor.md`
`sandboxing.md`	software	healthy	`docs/sandboxing.md`
`SESSIONS.md`	software	healthy	`docs/SESSIONS.md`
`README.md`	software	healthy	`docs/README.md`
`MODEL_PROFILES.md`	software	healthy	`docs/MODEL_PROFILES.md`
`GETTING_STARTED.md`	software	healthy	`docs/GETTING_STARTED.md`
`WHATSAPP_SETUP.md`	software	healthy	`docs/WHATSAPP_SETUP.md`
`GLOSSARY.md`	software	healthy	`docs/GLOSSARY.md`
`LOCAL_MODELS.md`	software	healthy	`docs/LOCAL_MODELS.md`
`TEAMS_SETUP.md`	software	healthy	`docs/TEAMS_SETUP.md`
`external-coding-backends-summary.md`	software	healthy	`docs/external-coding-backends-summary.md`
`SEMANTIC_KERNEL.md`	software	healthy	`docs/SEMANTIC_KERNEL.md`
`PRODUCTION_FIXES.md`	software	healthy	`docs/PRODUCTION_FIXES.md`
`USER_GUIDE.md`	software	healthy	`docs/USER_GUIDE.md`
`EXTERNAL_CLI_CONNECTORS.md`	software	healthy	`docs/EXTERNAL_CLI_CONNECTORS.md`
`workflow-backends.md`	software	healthy	`docs/workflow-backends.md`
`RELEASES.md`	software	healthy	`docs/RELEASES.md`
`QUICKSTART.md`	software	healthy	`docs/QUICKSTART.md`
`START_HERE.md`	software	healthy	`docs/START_HERE.md`
`ai-contributor-guide.md`	software	healthy	`docs/ai-contributor-guide.md`
`external-coding-backends.md`	software	healthy	`docs/external-coding-backends.md`
`ROADMAP.md`	software	healthy	`docs/ROADMAP.md`
`COMPATIBILITY.md`	software	healthy	`docs/COMPATIBILITY.md`
`TOOLS_GUIDE.md`	software	healthy	`docs/TOOLS_GUIDE.md`
`DOCKERHUB.md`	software	healthy	`docs/DOCKERHUB.md`
`PROMPT_CACHING.md`	software	healthy	`docs/PROMPT_CACHING.md`
`a2a.md`	software	healthy	`docs/a2a.md`
`SITE_MAP.md`	software	healthy	`docs/SITE_MAP.md`
`sidecar-pattern.md`	software	healthy	`docs/governance/sidecar-pattern.md`
`microsoft-agent-governance.md`	software	healthy	`docs/governance/microsoft-agent-governance.md`
`microsoft-agent-framework.md`	software	healthy	`docs/integrations/microsoft-agent-framework.md`
`payments.md`	software	healthy	`docs/security/payments.md`
`agent-testing-harness.md`	software	healthy	`docs/testing/agent-testing-harness.md`
`ai-assisted-testing-playbook.md`	software	healthy	`docs/testing/ai-assisted-testing-playbook.md`
`payment.md`	software	healthy	`docs/cli/payment.md`
`microsoft-extensions-ai.md`	software	healthy	`docs/providers/microsoft-extensions-ai.md`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`extract_text`	software	healthy	`eng/verify_maf_http_tool_result.py:9`
`fail`	software	healthy	`eng/verify_maf_http_tool_result.py:33`
`load_json`	software	healthy	`eng/verify_maf_http_tool_result.py:37`
`verify_response`	software	healthy	`eng/verify_maf_http_tool_result.py:41`
`verify_provider_log`	software	healthy	`eng/verify_maf_http_tool_result.py:60`
`verify_artifact`	software	healthy	`eng/verify_maf_http_tool_result.py:92`
`verify_summary`	software	healthy	`eng/verify_maf_http_tool_result.py:127`
`verify_plugin_summary`	software	healthy	`eng/verify_maf_http_tool_result.py:177`
`parse_timestamp`	software	healthy	`eng/verify_maf_http_tool_result.py:204`
`verify_events`	software	healthy	`eng/verify_maf_http_tool_result.py:209`
`main`	software	healthy	`eng/verify_maf_http_tool_result.py:284`
`fail`	software	healthy	`eng/verify_response_stream_tool_result.py:9`
`load_json`	software	healthy	`eng/verify_response_stream_tool_result.py:13`
`parse_timestamp`	software	healthy	`eng/verify_response_stream_tool_result.py:17`
`parse_stream`	software	healthy	`eng/verify_response_stream_tool_result.py:22`
`process_sse_message`	software	healthy	`eng/verify_response_stream_tool_result.py:40`
`verify_stream`	software	healthy	`eng/verify_response_stream_tool_result.py:184`
`verify_provider_log`	software	healthy	`eng/verify_response_stream_tool_result.py:298`
`verify_summary`	software	healthy	`eng/verify_response_stream_tool_result.py:331`
`verify_events`	software	healthy	`eng/verify_response_stream_tool_result.py:377`
`main`	software	healthy	`eng/verify_response_stream_tool_result.py:447`
`load_report`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:12`
`sort_reports`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:16`
`format_ms`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:26`
`format_actions`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:30`
`build_comparison_line`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:34`
`build_markdown`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:73`
`main`	software	healthy	`eng/generate_maf_aot_jit_responses_failed_findings.py:127`
`fail`	software	healthy	`eng/verify_response_stream_failure_result.py:9`
`load_json`	software	healthy	`eng/verify_response_stream_failure_result.py:13`
`parse_timestamp`	software	healthy	`eng/verify_response_stream_failure_result.py:17`
`parse_stream`	software	healthy	`eng/verify_response_stream_failure_result.py:22`
`process_sse_message`	software	healthy	`eng/verify_response_stream_failure_result.py:35`
`verify_stream`	software	healthy	`eng/verify_response_stream_failure_result.py:125`
`verify_provider_log`	software	healthy	`eng/verify_response_stream_failure_result.py:199`
`verify_summary`	software	healthy	`eng/verify_response_stream_failure_result.py:246`
`verify_events`	software	healthy	`eng/verify_response_stream_failure_result.py:292`
`main`	software	healthy	`eng/verify_response_stream_failure_result.py:349`
`fail`	software	healthy	`eng/verify_ws_approval_result.py:9`
`load_json`	software	healthy	`eng/verify_ws_approval_result.py:13`
`parse_timestamp`	software	healthy	`eng/verify_ws_approval_result.py:17`
`extract_text`	software	healthy	`eng/verify_ws_approval_result.py:22`
`verify_transcript`	software	healthy	`eng/verify_ws_approval_result.py:46`
`verify_provider_log`	software	healthy	`eng/verify_ws_approval_result.py:73`
`verify_notes`	software	healthy	`eng/verify_ws_approval_result.py:101`
`verify_summary`	software	healthy	`eng/verify_ws_approval_result.py:114`
`verify_approval_history`	software	healthy	`eng/verify_ws_approval_result.py:154`
`verify_approval_events`	software	healthy	`eng/verify_ws_approval_result.py:175`
`verify_llm_events`	software	healthy	`eng/verify_ws_approval_result.py:196`
`main`	software	healthy	`eng/verify_ws_approval_result.py:253`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`tests`	software	healthy	`tests`
`agent-scenarios`	software	healthy	`tests/agent-scenarios`
`compat`	software	healthy	`compat`
`docs`	software	healthy	`docs`
`governance`	software	healthy	`docs/governance`
`integrations`	software	healthy	`docs/integrations`
`security`	software	healthy	`docs/security`
`testing`	software	healthy	`docs/testing`
`cli`	software	healthy	`docs/cli`
`providers`	software	healthy	`docs/providers`
`experiments`	software	healthy	`docs/experiments`
`plugins`	software	healthy	`docs/plugins`
`scripts`	software	healthy	`scripts`
`deploy`	software	healthy	`deploy`
`kubernetes`	software	healthy	`deploy/kubernetes`
`governance-sidecar`	software	healthy	`deploy/kubernetes/governance-sidecar`
`eng`	software	healthy	`eng`
`samples`	software	healthy	`samples`
`OpenClaw.HelloAgent`	software	healthy	`samples/OpenClaw.HelloAgent`
`OpenClaw.SemanticKernelInteropHost`	software	healthy	`samples/OpenClaw.SemanticKernelInteropHost`
`OpenClaw.DurableAgentReview`	software	healthy	`samples/OpenClaw.DurableAgentReview`
`OpenClaw.MicrosoftExtensionsAIProvider`	software	healthy	`samples/OpenClaw.MicrosoftExtensionsAIProvider`
`.github`	software	healthy	`.github`
`ISSUE_TEMPLATE`	software	healthy	`.github/ISSUE_TEMPLATE`
`scripts`	software	healthy	`.github/scripts`
`workflows`	software	healthy	`.github/workflows`
`skills`	software	healthy	`.github/skills`
`docs-governance`	software	healthy	`.github/skills/docs-governance`
`src`	software	healthy	`src`
`OpenClaw.Payments.StripeLink`	software	healthy	`src/OpenClaw.Payments.StripeLink`
`OpenClaw.Tests`	software	healthy	`src/OpenClaw.Tests`
`OpenClaw.Providers.MicrosoftExtensionsAI`	software	healthy	`src/OpenClaw.Providers.MicrosoftExtensionsAI`
`OpenClaw.Client`	software	healthy	`src/OpenClaw.Client`
`OpenClaw.Cli`	software	healthy	`src/OpenClaw.Cli`
`OpenClaw.Gateway`	software	healthy	`src/OpenClaw.Gateway`
`wwwroot`	software	healthy	`src/OpenClaw.Gateway/wwwroot`
`PromptCaching`	software	healthy	`src/OpenClaw.Gateway/PromptCaching`
`Endpoints`	software	healthy	`src/OpenClaw.Gateway/Endpoints`
`Composition`	software	healthy	`src/OpenClaw.Gateway/Composition`
`Mcp`	software	healthy	`src/OpenClaw.Gateway/Mcp`
`Backends`	software	healthy	`src/OpenClaw.Gateway/Backends`
`Integrations`	software	healthy	`src/OpenClaw.Gateway/Integrations`
`Bootstrap`	software	healthy	`src/OpenClaw.Gateway/Bootstrap`
`Models`	software	healthy	`src/OpenClaw.Gateway/Models`
`Workflows`	software	healthy	`src/OpenClaw.Gateway/Workflows`
`Profiles`	software	healthy	`src/OpenClaw.Gateway/Profiles`
`A2A`	software	healthy	`src/OpenClaw.Gateway/A2A`
`Extensions`	software	healthy	`src/OpenClaw.Gateway/Extensions`
`skills`	software	healthy	`src/OpenClaw.Gateway/skills`
`deep-researcher`	software	healthy	`src/OpenClaw.Gateway/skills/deep-researcher`

Showing first 50 of this kind. Full payload available via the JSON button at the top of the page.

Label	Layer	Status	Path
`APPLE_APP_SPECIFIC_PASSWORD`	cicd	healthy	`—`
`APPLE_ID`	cicd	healthy	`—`
`APPLE_DEVELOPER_ID_CERT_BASE64`	cicd	healthy	`—`
`APPLE_DEVELOPER_ID_CERT_PASSWORD`	cicd	healthy	`—`
`APPLE_TEAM_ID`	cicd	healthy	`—`
`GITHUB_TOKEN`	cicd	healthy	`—`
`WINDOWS_SIGNING_CERT_PASSWORD`	cicd	healthy	`—`
`WINDOWS_SIGNING_CERT_BASE64`	cicd	healthy	`—`
`DOTNET_VERSION`	cicd	healthy	`—`
`PACKAGE_VERSION`	cicd	healthy	`—`
`APPLE_CODESIGN_IDENTITY`	cicd	healthy	`—`

Label	Layer	Status	Path
`go-whatsapp-security`	cicd	healthy	`.github/workflows/ci.yml`
`build-and-test`	cicd	healthy	`.github/workflows/ci.yml`
`publish-aot`	cicd	healthy	`.github/workflows/ci.yml`
`macos-gateway-linker-probe`	cicd	healthy	`.github/workflows/ci.yml`
`publish-jit`	cicd	healthy	`.github/workflows/ci.yml`
`docker`	cicd	healthy	`.github/workflows/ci.yml`
`public-compatibility-smoke`	cicd	healthy	`.github/workflows/ci.yml`
`build-release-assets`	cicd	healthy	`.github/workflows/release.yml`
`publish-github-release`	cicd	healthy	`.github/workflows/release.yml`
`pack`	cicd	healthy	`.github/workflows/nuget.yml`

Label	Layer	Status	Path
`port:18789`	network	healthy	`Dockerfile`
`port:1654`	network	healthy	`Dockerfile`
`port:443`	network	healthy	`docker-compose.yml`
`port:80`	network	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`image::Dockerfile`	hardware	healthy	`Dockerfile`
`openclaw`	hardware	healthy	`docker-compose.yml`
`caddy`	hardware	healthy	`docker-compose.yml`
`k8s::ConfigMap::deploy/kubernetes/governance-sidecar/config…`	hardware	healthy	`deploy/kubernetes/governance-sidecar/configmap-policy.yaml`

Label	Layer	Status	Path
`gha::ci`	cicd	healthy	`.github/workflows/ci.yml`
`gha::release`	cicd	healthy	`.github/workflows/release.yml`
`gha::nuget`	cicd	healthy	`.github/workflows/nuget.yml`

Label	Layer	Status	Path
`FakeProviderHandler`	software	healthy	`eng/fake_openai_tool_provider.py:41`
`ReusableThreadingHTTPServer`	software	healthy	`eng/fake_openai_tool_provider.py:442`

Label	Layer	Status	Path
`caddy`	network	healthy	`docker-compose.yml`
`nginx`	network	healthy	`docker-compose.yml`

Label	Layer	Status	Path
`repobility-clone-5zl20d9p`	software	healthy	`/tmp/repobility-clone-5zl20d9p`

Label	Layer	Status	Path
`sqlite`	data	healthy	`src/OpenClaw.Gateway/appsettings.json`

Label	Layer	Status	Path
`127.0.0.1`	network	healthy	`deploy/ecr-public-catalog-data.json`

Label	Layer	Status	Path
`k8s::Deployment::deploy/kubernetes/governance-sidecar/deplo…`	hardware	healthy	`deploy/kubernetes/governance-sidecar/deployment.yaml`

Label	Layer	Status	Path
`vps::aws`	hardware	healthy	`deploy/ecr-public-catalog-data.json`

For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.

For AI agents + API integrations

Email me when this repo regresses

Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.

API access

This page is publicly accessible at: https://repobility.com/scan/2c61469f-78c1-4c31-a1a7-46968b5af0b8/

To check status programmatically (no auth required):

curl -s https://repobility.com/api/v1/public/scan/2c61469f-78c1-4c31-a1a7-46968b5af0b8/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.

clawdotnet/openclaw.net

Complete repo analysis

file 50+

function 50+

directory 50+

env_var 11

job 10

port 4

container 4

pipeline 3

class 2

load_balancer 2

repo 1

database 1

service 1

pod 1

vps 1