Openclaw Command Center

Mission control dashboard for OpenClaw - real-time session monitoring, LLM usage tracking, cost intelligence, and system vitals. View all your AI agents in o...

This package appears to be a coherent self‑hosted OpenClaw dashboard. Before installing or running: 1) Verify the code origin — registry metadata lists no homepage while README points to github.com/jontsai/openclaw-command-center; confirm you trust that source. 2) Run only node lib/server.js by default; inspect scripts/install-system-deps.sh and other scripts before executing them (they may call apt/brew/sudo). 3) Ensure the server binds to localhost (host/PORT in config) and pick a secure DASHBOARD_AUTH_MODE (token or tailscale) if you will expose it beyond your machine. 4) If you enable integrations (Linear/Slack/Discord) or analytics, provide only credentials you intend to share and understand those will allow outbound network calls. 5) If you need higher assurance, review lib/server.js and any network/curl/http code paths for external endpoints before deploying to production.

Type: OpenClaw Skill Name: openclaw-command-center Version: 1.4.1 The bundle provides a legitimate and well-documented command center dashboard for OpenClaw. It includes features for session monitoring, system vitals collection, and cost tracking. Security analysis shows robust practices, including path traversal protection in the static file server (src/index.js), environment variable sanitization for subprocesses (src/openclaw.js), and the use of execFile/execFileSync to mitigate shell injection risks. While the tool requires broad system access to monitor metrics and manage agents, its behavior is strictly aligned with its stated purpose, and no evidence of malicious intent, obfuscation, or unauthorized data exfiltration was found.