add-dashboard
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Installs the
@nanoco/nanoclaw-dashboardnpm package to provide the monitoring interface. - [DATA_EXFILTRATION]: The
dashboard-pusher.tsscript is configured to collect and transmit system data to127.0.0.1(localhost) for visualization. - It reads internal SQLite databases containing user roles, agent groups, and messaging history (including DMs).
- It tails the primary application log file (
logs/nanoclaw.log) to provide real-time log streaming to the UI. - It parses session data and token usage metrics from the local filesystem.
- All transmissions are directed to localhost and include an authorization header using a user-generated secret from the environment configuration.
- [COMMAND_EXECUTION]: The installation process involves executing standard shell commands to install dependencies, build the project, and restart system services via
systemctlorlaunchctl.
Audit Metadata