| Version | Supported |
|---|---|
| 0.2.x | ✅ |
| < 0.2 | ❌ |
If you discover a security vulnerability in ClawNexus, please report it responsibly.
Email: alan@silverstream.tech
Please include:
- A description of the vulnerability
- Steps to reproduce the issue
- Any relevant logs or screenshots
- Acknowledgement: within 48 hours
- Initial assessment: within 5 business days
- Fix or mitigation: as soon as reasonably possible, depending on severity
This policy covers the following packages:
clawnexus(daemon + CLI)clawnexus-skill(OpenClaw Skill)@clawnexus/sdk(SDK)
We follow coordinated disclosure. Please do not open public issues for security vulnerabilities. We will credit reporters in the release notes unless anonymity is requested.