add-dashboard

Pass

Audited by Gen Agent Trust Hub on Apr 26, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Installs the @nanoco/nanoclaw-dashboard npm package to provide the monitoring interface.
  • [DATA_EXFILTRATION]: The dashboard-pusher.ts script is configured to collect and transmit system data to 127.0.0.1 (localhost) for visualization.
  • It reads internal SQLite databases containing user roles, agent groups, and messaging history (including DMs).
  • It tails the primary application log file (logs/nanoclaw.log) to provide real-time log streaming to the UI.
  • It parses session data and token usage metrics from the local filesystem.
  • All transmissions are directed to localhost and include an authorization header using a user-generated secret from the environment configuration.
  • [COMMAND_EXECUTION]: The installation process involves executing standard shell commands to install dependencies, build the project, and restart system services via systemctl or launchctl.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 26, 2026, 09:50 PM