openclaw-plugin-vt-sentinel 0.11.0 → 0.11.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -2,6 +2,28 @@
2
2
 
3
3
  All notable changes to `openclaw-plugin-vt-sentinel`.
4
4
 
5
+ ## 0.11.1 — ClawHub repackaging
6
+
7
+ Runtime behavior identical to 0.11.0. This release only reshapes what is
8
+ uploaded to ClawHub.
9
+
10
+ ### Fixed
11
+
12
+ - **ClawHub malware scan false positives.** The upload to ClawHub now ships
13
+ only the same files that `npm files[]` delivers to the npm registry —
14
+ compiled `dist/` (minus dev tools), `hooks/`, `skills/`, manifest, README,
15
+ and CHANGELOG. Source `.ts` files and developer helpers
16
+ (`dist/test_runner.js`, `dist/self-scan.js`) are excluded via a new
17
+ `.clawhubignore`.
18
+ - **Reason for the exclusion.** `src/self-scan.ts` contains the literal
19
+ regex pattern `stratum|coinhive|cryptonight|xmrig` as part of
20
+ reimplementing OpenClaw's own install-security scanner for local
21
+ pre-flight checks. ClawHub's scan treated that literal as crypto-mining
22
+ code; `src/test_runner.ts` and `dist/test_runner.js` likewise contained
23
+ test input strings matching `dangerous_exec` and `potential_exfiltration`
24
+ heuristics. Excluding those files from the ClawHub upload eliminates the
25
+ false positive without changing what the plugin actually runs.
26
+
5
27
  ## 0.11.0 — Install-scanner compliance
6
28
 
7
29
  **Headline:** installs cleanly on OpenClaw 2026.4.5+ without
@@ -2,7 +2,7 @@
2
2
  "id": "openclaw-plugin-vt-sentinel",
3
3
  "name": "VT Sentinel",
4
4
  "description": "VirusTotal Sentinel for OpenClaw — malware detection, active protection, and AI-powered code analysis.",
5
- "version": "0.11.0",
5
+ "version": "0.11.1",
6
6
  "skills": ["./skills"],
7
7
  "contracts": {
8
8
  "tools": [
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "openclaw-plugin-vt-sentinel",
3
- "version": "0.11.0",
3
+ "version": "0.11.1",
4
4
  "displayName": "VT Sentinel",
5
5
  "description": "VirusTotal Sentinel for OpenClaw - Malware detection and AI-powered code analysis",
6
6
  "main": "dist/index.js",