prototype-openclaw-tui

No clear supply-chain malware indicators (no obfuscation, no hardcoded secrets, no exfiltration/persistence, no network activity). However, the script intentionally executes arbitrary shell commands provided via pane_commands[] by routing them into /bin/sh -c inside tmux panes, making it a high-impact command-execution tool if inputs are attacker-controlled. macOS additionally creates and opens a temporary executable attach.command for local terminal attachment, which is execution-adjacent but appears intended solely to run tmux attach-session.