Community code plugin. Review compatibility and verification before install.
Latest release: v2.0.9Download zip
Capabilities
Compatibility
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The main English SKILL text says the channel was moved, while the included package still implements and registers an active Sider channel. The Chinese README and source code explain the pairing/token relay behavior, so this appears purpose-aligned rather than deceptive.
Instruction Scope
The skill/channel lets a paired Chrome/Sider side panel communicate with OpenClaw. No prompt override, hidden instruction injection, or goal hijack was evident in the provided artifacts.
Install Mechanism
There is no install spec and no runtime npm dependencies beyond the OpenClaw peer dependency in package.json, but the README recommends a user-directed npx installer for the replacement package.
Credentials
The code uses Sider API/WebSocket endpoints, setup or relay tokens, optional base-URL environment overrides, and media transfer. These are proportionate for a browser channel but mean data and credentials flow to the configured Sider service.
Persistence & Privilege
The plugin can exchange a setup token for a longer-lived relay token and write it into OpenClaw configuration, and it registers services/channel hooks needed for ongoing relay operation. This is expected for the channel but should be understood before use.
Assessment
This appears to be a purpose-aligned Sider channel rather than malware. Before installing, make sure you actually want Sider/Chrome side-panel access, trust the configured Sider endpoint, and are comfortable with relay tokens and session activity being handled by that channel. The provided source in this review was partly truncated/omitted, so a full source review would improve assurance.Verification
Tags
The offical Chrome channel for OpenClaw by Sider was moved to https://clawhub.ai/plugins/chrome-openclaw-sider . Please use this plugin to use your OpenClaw from Chrome Sidepanel.
