OpenClaw integrates VirusTotal Code Insight scanning for ClawHub skills following reports of malicious plugins, prompt injection & exposed instances.
directive because 'unsafe-eval' is not an allowed source of script in the following Content Security Policy directive: "script-src 'self' 'nonce-...' 'strict-dynamic'" ...
CVSS Score: 5.5 CWE: CWE-693 (Protection Mechanism Failure) 📋 Description The Content Security Policy (CSP) header is implemented but contains the 'unsafe-inline' and 'unsafe-eval' directives for ...