Unverified50% confidenceCautionExact time
Aggressively promoting an open plugin system before security standards mature carries plugin supply chain attack risks (such as injecting prompts to report sensitive data), a problem that has not yet been solved by DSH or virtually any other Harness.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
9/18/2026
First Seen
Valid until: 12/17/2026
Sources
Related Entities
Related Claims
UnverifiedOpenClaw carries security risks: because its built-in tools have extremely high permissions (capable of operating system files, reading browser information, and executing tasks online), any configured API Keys are highly susceptible to leakage if the machine is compromised.67% similarUnverifiedA security.txt file alone cannot prove that a platform is absolutely secure; true security capability is reflected in a defense-in-depth system encompassing vulnerability response speed, model scanning mechanisms, access control, and supply chain verification.66% similarUnverified原生App的分层认证设计安全性高于Web端，但引入更多单点故障风险，任何一层出问题整条链路即中断66% similarUnverifiedSetting a safety hook before tool calls is of significant importance because tool calls may involve irreversible operations such as file deletion or network requests.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/931643API
curl https://kongchang.com/api/v1/knowledge/claims/931643MCP
get_claim(id=931643)