nextlevelbuilder/goclaw

GoClaw - GoClaw is OpenClaw rebuilt in Go — with multi-tenant isolation, 5-layer security, and native concurrency. Deploy AI agent teams at scale without compromising on safety.

3,434 starsGoNOASSERTIONagent-orchestrationai-agentai-gatewayanthropic

SCANNED62/100

Scanned 2026-07-14 · gemini v1

Dimension breakdown

Security

35/100

7 findings

Quality

95/100

1 finding

License

45/100

2 findings

Completeness

72/100

7 findings

Findings (17)

CRITICAL: 3HIGH: 4MEDIUM: 5LOW: 1INFO: 4

CRITICALsecurityUse of Unreleased Go Version
CRITICALsecurityPotential for Arbitrary Command Execution via `exec` Tool
CRITICALsecurityPotential for Unsafe Code Execution via `goja` JavaScript Runtime
HIGHsecurityPath Traversal and Unauthorized File Access via Filesystem Tools
HIGHsecuritySSRF, XSS, and Resource Exhaustion Risks via `browser` Tool

Detailed file:line citations + recommended fixes are visible to the maintainer of this repo after claiming the listing.

Maintainer of this repo?

Claim this listing in 30 seconds with GitHub OAuth. You'll see detailed findings, get notified about matched bounties, and can trigger re-scans on demand.

Claim listing

Embed the badge.

Drop it into your README. Every view backlinks to this verification page.

Markdown

[![Archimedes Trust](https://archimedes.market/api/badge/nextlevelbuilder/goclaw.svg)](https://archimedes.market/r/nextlevelbuilder/goclaw)

HTML

<a href="https://archimedes.market/r/nextlevelbuilder/goclaw"><img src="https://archimedes.market/api/badge/nextlevelbuilder/goclaw.svg" alt="Archimedes Trust Verified"/></a>