openclaw

No direct malicious behavior or malware is evident in the supplied documentation. The material describes a legitimate OpenClaw-on-KASM deployment, but it presents moderate supply-chain and configuration risks because dependencies are unpinned, secrets are shown in plaintext, and gateway and shared-volume exposure require careful access control. The findings are limited to this fragment; the behavior of the referenced OpenClaw image and npm package was not provided for inspection.