OpenClaw Comprehensive Status Report 2026 | Generated by AI
Hereβs your comprehensive review, Boss. π¦
π Comprehensive OpenClaw Status Report β 2026-04-04 20:57 HKT
π’ Overall Health: Mostly Good, With Security & Cleanup Items
1. Core System
| Item | Status |
|---|---|
| Version | 2026.4.2 (latest, up to date) |
| OS | Linux 6.8.0-106-generic (x64), Node 22.22.1 |
| Gateway | Running (PID 1161683), reachable in 23ms |
| Bind | 127.0.0.1:18789 (local only β good) |
| Auth | Token + password enabled |
| Tailscale | Off |
2. Channels
| Channel | Status | Notes |
|---|---|---|
| Webchat | β Active | Current session |
| Telegram | β OK | Bot @lzwjava_bot, 1601ms latency |
| openclaw-weixin | β οΈ SETUP | Plugin loaded (v2.1.6 β ), but no token configured β needs QR login |
| Nextcloud Talk | β οΈ SETUP | Not configured |
3. Plugins (45/87 loaded)
- openclaw-weixin β v2.1.6, loaded successfully (just updated from v1.0.3)
- nextcloud-talk β loaded, but duplicate plugin ID warning (stock bundled vs global extension)
- google β web search enabled
- browser β Playwright chromium, headless mode
4. Cron Jobs
| Job | Schedule | Status | Issue |
|---|---|---|---|
| Critical News Summary | Every hour | β 74 consecutive errors | Delivering to Telegram requires target <chatId> β missing delivery target |
5. Sessions
- 29 active sessions
- Default model:
minimax/minimax-m2.7(200k ctx) - Current session model:
xiaomi/mimo-v2-pro - 5 session stores
6. Memory
- 0 files, 0 chunks β vector & FTS ready but empty
- No
MEMORY.mdexists - Only 1 file in
memory/: a reasoning note from today
7. Security Audit β π¨ 5 CRITICAL issues
- Control UI
allowedOrigins=*β any browser origin accepted - Device auth disabled (
dangerouslyDisableDeviceAuth=true) - Elevated exec
allowFrom=*for webchat β anyone gets root - Elevated exec
allowFrom=*for telegram β anyone gets root plugins.allownot set β any discovered extension auto-loads
Plus 9 warnings including exec security=full with ask=off (no confirmation prompts for commands).
8. Issues / TODOs
- Cron job broken: 74 consecutive failures on news summary β needs a Telegram chat ID in delivery config
- Nextcloud Talk duplicate: stock bundled plugin conflicts with global extension
- WeChat: plugin loaded but needs QR login to go from SETUP β OK
- Password in config: gateway password
lizhiwei17is stored in plaintext inopenclaw.json - Workspace:
BOOTSTRAP.mdstill exists (says to delete after first run)
Recommended Actions (Priority Order)
- π΄ Security: Tighten
allowedOrigins, re-enable device auth, restrict elevated exec allowlists, setplugins.allow - π§ Cron: Fix the news summary delivery target or disable it (74 errors and counting)
- π± WeChat: Run QR login to finish setup
- π§Ή Cleanup: Delete
BOOTSTRAP.md, resolve nextcloud-talk duplicate - πΎ Memory: Create
MEMORY.mdfor long-term continuity
Want me to tackle any of these? π¦