Search results

[Security] Non-owner members can create persistent child agents without approval in NanoClaw owner-initialized groups

Status: Open.

#2807 In nanocoai/nanoclaw;

· YLChen-007 opened on Jun 18, 2026

add-imessage: Step 2 redirection fails if src/channels/ doesn't exist (no mkdir)

Status: Open.

#2791 In nanocoai/nanoclaw;

· specterslient95-lgtm opened on Jun 17, 2026

setup: 10-line skill mentions 'Claude-assisted recovery' but has no concrete steps

Status: Open.

#2789 In nanocoai/nanoclaw;

· specterslient95-lgtm opened on Jun 17, 2026

init-onecli: port 10254 mentioned only in troubleshooting, never declared earlier

Status: Open.

#2787 In nanocoai/nanoclaw;

· specterslient95-lgtm opened on Jun 17, 2026

migrate-nanoclaw: top H1 is generic "Context" — no descriptive title

Status: Open.

#2785 In nanocoai/nanoclaw;

· specterslient95-lgtm opened on Jun 17, 2026

container-runner: session source staleness check only watches index.ts, misses ipc-mcp-stdio.ts changes

Status: Open.

#2784 In nanocoai/nanoclaw;

· masslbp opened on Jun 16, 2026

docs/SECURITY.md describes the retired v1 trust model and references a non-existent skill

Status: Open.

#2783 In nanocoai/nanoclaw;

· sturdy4days opened on Jun 16, 2026

[Feature] Support NANOCLAW_NATIVE_CREDENTIALS to bypass OneCLI and use externally-provided provider credentials

Status: Open.

#2781 In nanocoai/nanoclaw;

· shekohex opened on Jun 16, 2026

Slack: @handles inside URLs (e.g. hackmd.io/@user) get mangled into broken mentions

Status: Open.

#2779 In nanocoai/nanoclaw;

· GitOnion opened on Jun 16, 2026

Enable prompt caching by default in Claude provider

Status: Open.

#2768 In nanocoai/nanoclaw;

· galmorduku opened on Jun 14, 2026

Telegram: legacy-Markdown sanitizer is obsoleted by @chat-adapter/telegram@4.30.0 (native MarkdownV2)

Status: Open.

#2767 In nanocoai/nanoclaw;

· chiptoe-svg opened on Jun 14, 2026

[Security] NanoClaw add_mcp_server approval flow allows hidden args and env to be approved and persisted without being shown to the approver

Status: Open.

#2762 In nanocoai/nanoclaw;

· YLChen-007 opened on Jun 14, 2026