| SAS-v2.1 pre-install audit |
|---|
| D · Limited evidence | C · Review first | |
|---|
| unexpected code execution, identity privilege abuse, data exfiltration | unexpected code execution, identity privilege abuse, data exfiltration | unexpected code execution, data exfiltration, memory context poisoning |
|---|
| missing license, broad permissions, shell without guardrails | missing license, broad permissions, shell without guardrails | missing license, shell without guardrails, network without allowlist |
|---|
| Permission review, Network, Secrets, Command | Permission review, Network, Secrets, Command | Permission review, Network, Command |
|---|
| | 67% | 65% |
|---|
| Source & provenance |
|---|
| Integrations & Connectors | Dev & Engineering | Knowledge & RAG |
|---|
| 2026-04-02 | 2026-03-31 | 2026-04-02 |
|---|
| Risk & trust |
|---|
| needs credentials, runs shell, writes files | needs credentials, network access, runs shell, writes files | network access, runs shell |
|---|
| verify source provenance before install | requires binary: node, requires binary: npx, requires binary: gp-cli, verify source provenance before install | verify source provenance before install |
|---|
| Install & compatibility |
|---|
| Universal | OpenClaw | Universal |
|---|
| 65 | 65 | |
|---|