{"name":"io.github.dfridkin/clawops","slug":"dfridkin-clawops","title":"clawops","description":"Deploy and manage self-hosted OpenClaw instances across clouds","url":"https://mcp.market/server/dfridkin-clawops","rating":null,"grade":"B","score":74,"certified":false,"status":"active","category":"devtools","tags":["devtools"],"presence":{"score":37,"stars":5,"forks":0,"downloads_week":180,"last_push_at":"2026-09-19T19:52:57.000Z","license":"MPL-2.0"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/dfridkin/clawops","website":"https://clawops.fyi","version":"2.0.2","remotes":[],"packages":[{"registryType":"npm","identifier":"@clawops/cli","version":"2.0.2","transport":{"type":"stdio"},"packageArguments":[{"value":"mcp","type":"positional"},{"value":"serve","type":"positional"}]}],"tools":[],"scan":{"score":74,"grade":"B","scanned_at":"2026-09-19T21:32:20.474Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-19T21:32:20.445Z","components":{"code":{"score":13,"max":25,"notes":["90 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":15,"max":15,"notes":["last push 0 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.shell-concat","severity":"high","component":"code","title":"Shell command built from a string (injection risk)","evidence":"dist/harden-72JMRT4E.js: …c) { const { stdout, code } = await exec(`test -f ${SENTINEL} && echo yes || echo no`); …"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@clawops/cli","version":"2.0.2","found":true,"hasInstallScripts":false,"dependencyCount":25,"publishedAt":"2026-09-17T21:49:40.560Z","repositoryUrl":"git+https://github.com/dfridkin/clawops.git","weeklyDownloads":180}],"repo":{"found":true,"owner":"dfridkin","repo":"clawops","archived":false,"pushedAt":"2026-09-19T19:52:57Z","stars":5,"forks":0,"openIssues":7,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/47861663?v=4","ownerCreatedAt":"2019-02-21T15:41:19Z","license":"MPL-2.0"},"icon":{"url":"https://clawops.fyi/icon.svg?icon.0sqktx8hyo4-y.svg","source":"registry"},"presence":{"stars":5,"forks":0,"downloadsWeek":180,"license":"MPL-2.0","lastPushAt":"2026-09-19T19:52:57.000Z","score":37}}}},"grade_history":[{"kind":"restore","fromGrade":"C","toGrade":"B","reason":"score 74: Shell command built from a string (injection risk)","createdAt":"2026-09-19T21:08:09.248Z"},{"kind":"downgrade","fromGrade":"B","toGrade":"C","reason":"score 66: Shell command built from a string (injection risk); Network call to a raw IP address","createdAt":"2026-09-19T00:29:37.473Z"}],"reviews":[]}