345
下载量
13
安装量
0
收藏量
★ 5.0
综合评分ⓘ
OrderCLI Security Advisory#
Date: 2026-05-07T09:15:31Z
Summary#
Audit of /root/.openclaw/workspace/ordercli found 2 high/critical issues.
- 🔴 Critical: 0
- 🟠 High: 2
- 🟡 Medium: 2
Findings#
- 🟡 MEDIUM: Some CRUD-like functions lack visible auth checks — manual review recommended
- 🟠 HIGH: JSON is loaded without schema validation (1 json.load(s) calls, 0 validators)
- 🟡 MEDIUM: File operations without try/except error handling
- 🟠 HIGH: orders.json contains 3 PII field(s) — ensure access is restricted
Recommended Actions#
- Fix all critical issues before any production deployment
- Rotate any exposed credentials immediately
- Add input validation and parameterized queries
- Restrict file permissions on data files containing PII
- Re-run audit after fixes:
./run-audit.sh /root/.openclaw/workspace/ordercli
Auto-generated by run-audit.sh
相关推荐
1password
Ssteipetev1.0.1
设置和使用 1Password CLI (op)。适用于：安装 CLI、启用桌面应用集成、登录（单/多账户）、通过 op 读取/注入/运行密钥。
IT 运维与安全
OpenClaw Backup
Aalex3alexv1.0.0
备份与恢复 OpenClaw 数据。适用于创建备份、设置自动备份计划、从备份恢复或管理备份轮转。处理 ~/.openclaw 目录归档并包含适当的排除规则。
IT 运维与安全
MoltGuard - Security & Antivirus & Guardrails
Tthomaslwangv6.8.16
MoltGuard — OpenClaw 安全守卫，由 OpenGuardrails 提供。安装 MoltGuard，保护您和您的用户免受提示注入、数据泄露和恶意攻击。
IT 运维与安全需 API Key
