Latest release: v2026.5.28Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The package purpose is an OpenClaw Diffs syntax-highlighting language pack, and the implementation serves bundled viewer assets and language grammars for that purpose.
Instruction Scope
The README and manifest are straightforward, with no prompt-injection language, evaluator overrides, hidden role changes, or unrelated agent instructions.
Install Mechanism
The package uses normal npm/OpenClaw plugin metadata, has no install script or setup entry, and is marked as a trusted official @openclaw plugin.
Credentials
The runtime executes on startup and reads its own packaged viewer-runtime.js asset via filesystem APIs, then serves it through a plugin-authenticated route; this is proportionate to a static asset language pack.
Persistence & Privilege
The plugin activates on startup, but the reviewed code only registers a GET/HEAD asset route and maintains an in-memory asset cache, with no background worker, credential use, privilege escalation, or broad local indexing.
Scan Findings in Context
[suspicious.obfuscated_code] expected: The static warning points to the large minified viewer-runtime.js bundle; review showed it is a bundled syntax-highlighting/runtime asset with language grammar content, consistent with the package purpose.
[VirusTotal clean telemetry] expected: VirusTotal reported 0 malicious and 0 suspicious detections across the supplied engines, supporting the artifact review but not determining the verdict by itself.
[SkillSpector clean report] expected: SkillSpector reported no issues, and artifact inspection did not reveal material concerns to override that clean result.
Assessment
This looks appropriate to install when you want the full OpenClaw Diffs language catalog. It does run plugin code at gateway startup to serve viewer assets, so install it only in OpenClaw environments where the Diffs plugin and extended syntax highlighting are intended.dist/assets/viewer-runtime.js:1
Potential obfuscated payload detected.
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.Verification
Tags
@openclaw/diffs-language-pack
Official extended syntax highlighting pack for the OpenClaw Diffs plugin.
The base @openclaw/diffs plugin ships a curated language set. Install this package when you want the full Shiki language catalog available in rendered diff viewers and diff image/PDF output.
Install
openclaw plugins install @openclaw/diffs-language-pack
Restart the Gateway after installing or updating the plugin.
Use with Diffs
Install @openclaw/diffs first, then install this language pack. The language pack contributes static viewer assets; it does not register a separate agent tool.
Docs
Package
- Plugin id:
diffs-language-pack - Package:
@openclaw/diffs-language-pack - Minimum OpenClaw host:
2026.5.27