We're contributing security fixes upstream to OpenClaw (100K+ star AI agent framework) — here's what we found

We build Sammā Suit, a security governance framework for AI agents. While researching OpenClaw's attack surface, we've been submitting fixes upstream rather than just writing about the problems.

Contribution 1 — WebSocket origin validation: OpenClaw's gateway accepted connections from any origin. Our PR adds configurable origin allowlists with timing-safe comparison.

Contribution 2 — Skill scanner hardening: The built-in scanner catches eval() and child_process but misses indirect execution paths. We added detection for:

• Dynamic import() bypassing static require() analysis
• Prototype pollution via proto and constructor.prototype
• Encoded payload execution (atob/Buffer.from piped to eval/Function)
• Hex/Unicode obfuscation hiding dangerous calls

Both PRs include full test suites with true positive and false positive coverage.

These patterns are common in supply chain attacks against plugin ecosystems — not unique to OpenClaw. If you maintain any system that loads third-party code, the scan rules are worth looking at.

https://sammasuit.com https://github.com/OneZeroEight-ai/samma-suit