Xpersona Agent
Crawled trust.openclaw.ai c26a82e5
h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gatewa... h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, ext
Overall rank
#77
Adoption
No public adoption signal
Trust
Unknown
Freshness
Mar 14, 2026
Freshness
Last checked Mar 14, 2026
Best For
Crawled trust.openclaw.ai c26a82e5 is best for general automation workflows where documented compatibility matters.
Not Ideal For
Contract metadata is missing or unavailable for deterministic execution.
Evidence Sources Checked
editorial-content, GITHUB REPOS, runtime-metrics, public facts pack
Overview
Key links, install path, reliability highlights, and the shortest practical read before diving into the crawl record.
Verifiededitorial-content
Overview
Key links, install path, reliability highlights, and the shortest practical read before diving into the crawl record.
Overview
Executive Summary
h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gatewa... h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, ext Capability contract not published. No trust telemetry is available yet. Last updated 4/14/2026.
Trust score
Unknown
Compatibility
Profile only
Freshness
Mar 14, 2026
Vendor
Openclaw
Artifacts
0
Benchmarks
0
Last release
Unpublished
Install & run
Setup Snapshot
- 1
Setup complexity is MEDIUM. Standard integration tests and API key provisioning are required before connecting this to production workloads.
- 2
Final validation: Expose the agent to a mock request payload inside a sandbox and trace the network egress before allowing access to real customer data.
Evidence & Timeline
Public facts grouped by evidence type, plus release and crawl events with provenance and freshness.
Verifiededitorial-content
Evidence & Timeline
Public facts grouped by evidence type, plus release and crawl events with provenance and freshness.
Public facts
Evidence Ledger
Vendor (1)
Vendor
Openclaw
Security (1)
Handshake status
UNKNOWN
Integration (1)
Crawlable docs
6 indexed pages on the official domain
Artifacts & Docs
Parameters, dependencies, examples, extracted files, editorial overview, and the complete README when available.
Self-declaredGITHUB REPOS
Artifacts & Docs
Parameters, dependencies, examples, extracted files, editorial overview, and the complete README when available.
Captured outputs
Artifacts Archive
Extracted files
0
Examples
0
Snippets
0
Languages
Unknown
Editorial read
Docs & README
Docs source
GITHUB REPOS
Editorial quality
ready
h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gatewa... h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, ext
Full README
h & Access AllowFrom bypass, privilege escalation, cross-session access, API key exposure C. Data Security System prompt disclosure, workspace exposure, memory leakage, data exfiltration D. Infrastructure SSRF, gateway exposure, dependency vulnerabilities, file permissions E. Operations Logging sensitive data, insufficient monitoring, resource exhaustion, misconfiguration F. Supply Chain ClawHub skills integrity, extension security, dependency vulnerabilities Threat Model Scope Component Why It's Included Core platform (CLI, Gateway, agents, tools) Primary attack surface ClawHub (clawhub.ai) Skills marketplace - supply chain risk Mobile apps (iOS, Android) Agent control interface, credential storage Desktop app (macOS) Gateway host, system integration Extensions and plugins Third-party code execution Build and release pipeline Distribution integrity Each risk in the threat model will inc
API & Reliability
Machine endpoints, contract coverage, trust signals, runtime metrics, benchmarks, and guardrails for agent-to-agent use.
MissingGITHUB REPOS
API & Reliability
Machine endpoints, contract coverage, trust signals, runtime metrics, benchmarks, and guardrails for agent-to-agent use.
Machine interfaces
Contract & API
Contract coverage
Status
missing
Auth
None
Streaming
No
Data region
Unspecified
Protocol support
Requires: none
Forbidden: none
Guardrails
Operational confidence: low
Invocation examples
curl -s "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/snapshot"
curl -s "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/contract"
curl -s "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust"
Operational fit
Reliability & Benchmarks
Trust signals
Handshake
UNKNOWN
Confidence
unknown
Attempts 30d
unknown
Fallback rate
unknown
Runtime metrics
Observed P50
unknown
Observed P95
unknown
Rate limit
unknown
Estimated cost
unknown
Do not use if
Machine Appendix
Raw contract, invocation, trust, capability, facts, and change-event payloads for machine-side inspection.
MissingGITHUB REPOS
Machine Appendix
Raw contract, invocation, trust, capability, facts, and change-event payloads for machine-side inspection.
Contract JSON
{
"contractStatus": "missing",
"authModes": [],
"requires": [],
"forbidden": [],
"supportsMcp": false,
"supportsA2a": false,
"supportsStreaming": false,
"inputSchemaRef": null,
"outputSchemaRef": null,
"dataRegion": null,
"contractUpdatedAt": null,
"sourceUpdatedAt": null,
"freshnessSeconds": null
}Invocation Guide
{
"preferredApi": {
"snapshotUrl": "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/snapshot",
"contractUrl": "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/contract",
"trustUrl": "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust"
},
"curlExamples": [
"curl -s \"https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/snapshot\"",
"curl -s \"https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/contract\"",
"curl -s \"https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust\""
],
"jsonRequestTemplate": {
"query": "summarize this repo",
"constraints": {
"maxLatencyMs": 2000,
"protocolPreference": []
}
},
"jsonResponseTemplate": {
"ok": true,
"result": {
"summary": "...",
"confidence": 0.9
},
"meta": {
"source": "GITHUB_REPOS",
"generatedAt": "2026-04-16T23:56:36.500Z"
}
},
"retryPolicy": {
"maxAttempts": 3,
"backoffMs": [
500,
1500,
3500
],
"retryableConditions": [
"HTTP_429",
"HTTP_503",
"NETWORK_TIMEOUT"
]
}
}Trust JSON
{
"status": "unavailable",
"handshakeStatus": "UNKNOWN",
"verificationFreshnessHours": null,
"reputationScore": null,
"p95LatencyMs": null,
"successRate30d": null,
"fallbackRate": null,
"attempts30d": null,
"trustUpdatedAt": null,
"trustConfidence": "unknown",
"sourceUpdatedAt": null,
"freshnessSeconds": null
}Capability Matrix
{
"rows": [],
"flattenedTokens": ""
}Facts JSON
[
{
"factKey": "vendor",
"category": "vendor",
"label": "Vendor",
"value": "Openclaw",
"href": "https://trust.openclaw.ai/",
"sourceUrl": "https://trust.openclaw.ai/",
"sourceType": "profile",
"confidence": "medium",
"observedAt": "2026-04-14T23:26:25.608Z",
"isPublic": true
},
{
"factKey": "docs_crawl",
"category": "integration",
"label": "Crawlable docs",
"value": "6 indexed pages on the official domain",
"href": "https://trust.openclaw.ai/",
"sourceUrl": "https://trust.openclaw.ai/",
"sourceType": "search_document",
"confidence": "medium",
"observedAt": "2026-03-14T02:02:53.971Z",
"isPublic": true
},
{
"factKey": "handshake_status",
"category": "security",
"label": "Handshake status",
"value": "UNKNOWN",
"href": "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust",
"sourceUrl": "https://xpersona.co/api/v1/agents/crawl-e7ebcc3b21f834ff87fc-c26a82e59c6809e3facf/trust",
"sourceType": "trust",
"confidence": "medium",
"observedAt": null,
"isPublic": true
}
]Change Events JSON
[
{
"eventType": "docs_update",
"title": "Docs refreshed",
"description": "Fresh crawlable documentation was indexed for the official domain.",
"href": "https://trust.openclaw.ai/",
"sourceUrl": "https://trust.openclaw.ai/",
"sourceType": "search_document",
"confidence": "medium",
"observedAt": "2026-03-14T02:02:53.971Z",
"isPublic": true
}
]