openclaw/clawhub
1
0
Fork 0
mirror of https://github.com/openclaw/clawhub.git synced 2026-07-22 03:35:29 -04:00
Code Issues 183 Packages Projects Releases 1 Wiki Activity

False positive: clawpressor skill flagged - legitimate session compression tool #149

New Issue
Open
opened 2026-02-15 17:15:56 -05:00 by yindo · 0 comments
yindo commented 2026-02-15 17:15:56 -05:00
Owner
Copy Link
Copy Source

Originally created by @beboxos on GitHub (Feb 12, 2026).

Skill Information

• Slug: clawpressor
• Author: beboxos
• URL: https://clawhub.ai/beboxos/clawpressor
Issue

The skill has been flagged by ClawHub Security with "suspicious patterns detected".

Why This Is a False Positive

This skill is a legitimate session context compressor for OpenClaw. The file operations detected are intentional and necessary for its core functionality:

copy

Detected Pattern Actual Purpose
File I/O operations Reading/writing OpenClaw session .jsonl files
os.rename() Creating .backup files before compression (safety feature)
JSON manipulation Parsing and compacting conversation history
External imports (sumy, nltk) NLP summarization library for intelligent compression

What It Actually Does

  1. Compresses OpenClaw session files to reduce token usage (84-96% reduction)
  2. Creates backups before any modification (.backup file)
  3. Preserves recent messages intact for context continuity
  4. Summarizes old messages using LexRank algorithm (Sumy library)
    Source Code

The full source is available and auditable:

• Main script: scripts/compress.py (~300 lines)
• No network operations
• No data exfiltration
• No obfuscated code
Request

Please review and remove the security flag. This is a utility tool similar to clawpressor in function to standard system maintenance scripts.

Originally created by @beboxos on GitHub (Feb 12, 2026). Skill Information • Slug: clawpressor • Author: beboxos • URL: https://clawhub.ai/beboxos/clawpressor Issue The skill has been flagged by ClawHub Security with "suspicious patterns detected". Why This Is a False Positive This skill is a legitimate session context compressor for OpenClaw. The file operations detected are intentional and necessary for its core functionality: copy   | Detected Pattern | Actual Purpose | | ----------------------------- | ---------------------------------------------------------- | | File I/O operations | Reading/writing OpenClaw session .jsonl files | | os.rename() | Creating .backup files before compression (safety feature) | | JSON manipulation | Parsing and compacting conversation history | | External imports (sumy, nltk) | NLP summarization library for intelligent compression | What It Actually Does 1. Compresses OpenClaw session files to reduce token usage (84-96% reduction) 2. Creates backups before any modification (.backup file) 3. Preserves recent messages intact for context continuity 4. Summarizes old messages using LexRank algorithm (Sumy library) Source Code The full source is available and auditable: • Main script: scripts/compress.py (~300 lines) • No network operations • No data exfiltration • No obfuscated code Request Please review and remove the security flag. This is a utility tool similar to clawpressor in function to standard system maintenance scripts.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
pull-request
Mirrored from GitHub Pull Request
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: openclaw/clawhub#149
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?