Security audit
OpenShell Sandbox
Security checks for vulnerabilities and agentic risk
Overview
This package is a coherent OpenShell sandbox backend that runs remote sandbox commands and mirrors workspaces as advertised.
Install this only when you intend OpenClaw to use NVIDIA OpenShell as a sandbox backend. Confirm the OpenShell CLI, gateway credentials, workspace, providers, and optional policy file are configured for the same trust boundary as your agent workspaces, because workspace files can be mirrored to remote sandboxes and remote changes can sync back locally.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.