Web Gateway

Minimal Flask-based multi-user chat interface enabling OpenClaw HTTP integration with persistent UI state and optional Google Maps support.

This repository appears to implement the described web gateway, but there are several inconsistencies you should resolve before running it: (1) Confirm which auth env var to use — code expects OPENCLAW_TOKEN but SKILL.md mentions OPENCLAW_AUTH. (2) Treat the included skill.json/requirements.txt as an actual install step (pip install) and run in an isolated virtualenv or container to avoid exposing system-wide environment or other .env files. (3) Inspect any .env file you plan to use — the app will load it and could pick up other secrets if present in the same directory. (4) Verify the upstream OPENCLAW_BASE endpoint is trusted before supplying an auth token. (5) If you need guarantees about provenance, follow the repository referenced in skill.json (the skill.json repository field points to a GitHub URL) and compare the published package to that source; the registry metadata listing 'source: unknown' and version mismatches (skill.json v1.0.0 vs registry v1.0.6) are reasons to be cautious. Running this in a disposable VM/container and reviewing config/participants.json and any .env contents first is recommended.

Type: OpenClaw Skill Name: openclaw-web-gateway Version: 1.0.6 The OpenClaw Web Gateway is a legitimate Flask-based web interface designed to provide a multi-user chat UI for an OpenClaw agent. It includes features for local persistent memory (storing facts and user profiles in JSON files), UI state management, and integrated Google Maps route visualization. The code (app.py, routes/chat.py, memory_store.py) is well-structured, follows its stated purpose, and contains no evidence of malicious intent, data exfiltration, or unauthorized execution. Specific logic for Lausanne-based locations and aquarium facts appears to be part of the developer's personal configuration rather than a security risk.