Attack Surface Mapping - openclawsecurity.net Forum https://openclawsecurity.net/community/openclaw-attack-surface/ openclawsecurity.net Discussion Board en-US Tue, 30 Jun 2026 10:39:21 +0000 wpForo 60 OpenClaw vs AutoGen - which has the smaller API attack surface? https://openclawsecurity.net/community/openclaw-attack-surface/openclaw-vs-autogen-which-has-the-smaller-api-attack-surface/ Tue, 30 Jun 2026 04:59:57 +0000 Attack Surface Mapping Jordan Pike https://openclawsecurity.net/community/openclaw-attack-surface/openclaw-vs-autogen-which-has-the-smaller-api-attack-surface/ Trouble with the tool output sanitizer stripping too much/too little. https://openclawsecurity.net/community/openclaw-attack-surface/trouble-with-the-tool-output-sanitizer-stripping-too-much-too-little/ Fri, 26 Jun 2026 02:01:02 +0000 Attack Surface Mapping Helen Kwon https://openclawsecurity.net/community/openclaw-attack-surface/trouble-with-the-tool-output-sanitizer-stripping-too-much-too-little/ My map of all SUID/GUID bits set by the installer. https://openclawsecurity.net/community/openclaw-attack-surface/my-map-of-all-suid-guid-bits-set-by-the-installer/ Thu, 25 Jun 2026 12:57:21 +0000 Attack Surface Mapping Gregory Wu https://openclawsecurity.net/community/openclaw-attack-surface/my-map-of-all-suid-guid-bits-set-by-the-installer/ My results from a 24-hour trace of all process spawns. https://openclawsecurity.net/community/openclaw-attack-surface/my-results-from-a-24-hour-trace-of-all-process-spawns/ Thu, 25 Jun 2026 07:57:23 +0000 Attack Surface Mapping Ivy N. https://openclawsecurity.net/community/openclaw-attack-surface/my-results-from-a-24-hour-trace-of-all-process-spawns/ Just built a script that lists all writable directories the agent uses. https://openclawsecurity.net/community/openclaw-attack-surface/just-built-a-script-that-lists-all-writable-directories-the-agent-uses/ Wed, 24 Jun 2026 03:20:13 +0000 Attack Surface Mapping Anna Lindberg https://openclawsecurity.net/community/openclaw-attack-surface/just-built-a-script-that-lists-all-writable-directories-the-agent-uses/ Thoughts on the new 'trusted plugins' whitelist feature? https://openclawsecurity.net/community/openclaw-attack-surface/thoughts-on-the-new-trusted-plugins-whitelist-feature/ Tue, 23 Jun 2026 21:38:21 +0000 Attack Surface Mapping Bob Chen https://openclawsecurity.net/community/openclaw-attack-surface/thoughts-on-the-new-trusted-plugins-whitelist-feature/ ELI5: What's the difference between an entry point and an attack vector here? https://openclawsecurity.net/community/openclaw-attack-surface/eli5-whats-the-difference-between-an-entry-point-and-an-attack-vector-here/ Tue, 23 Jun 2026 16:57:25 +0000 Attack Surface Mapping Sam K. https://openclawsecurity.net/community/openclaw-attack-surface/eli5-whats-the-difference-between-an-entry-point-and-an-attack-vector-here/ How do I audit the permissions of a custom tool I wrote? https://openclawsecurity.net/community/openclaw-attack-surface/how-do-i-audit-the-permissions-of-a-custom-tool-i-wrote/ Tue, 23 Jun 2026 08:01:55 +0000 Attack Surface Mapping Sasha O'Neill https://openclawsecurity.net/community/openclaw-attack-surface/how-do-i-audit-the-permissions-of-a-custom-tool-i-wrote/ Has anyone tried running Claw in a user namespace with podman? https://openclawsecurity.net/community/openclaw-attack-surface/has-anyone-tried-running-claw-in-a-user-namespace-with-podman/ Tue, 23 Jun 2026 06:54:50 +0000 Attack Surface Mapping Liam P. https://openclawsecurity.net/community/openclaw-attack-surface/has-anyone-tried-running-claw-in-a-user-namespace-with-podman/ Unpopular opinion: The RAG query endpoint is the weakest link. https://openclawsecurity.net/community/openclaw-attack-surface/unpopular-opinion-the-rag-query-endpoint-is-the-weakest-link/ Tue, 23 Jun 2026 00:01:51 +0000 Attack Surface Mapping Levi Brown https://openclawsecurity.net/community/openclaw-attack-surface/unpopular-opinion-the-rag-query-endpoint-is-the-weakest-link/