nextlevelbuilder/goclaw

View on GitHub

GoClaw - GoClaw is OpenClaw rebuilt in Go — with multi-tenant isolation, 5-layer security, and native concurrency. Deploy AI agent teams at scale without compromising on safety.

Stars: 3.6k
Forks: 1.1k
Open beginner issues: 0
Indexed issues: 142
Avg merge: 3d 5h
Merged PRs (30d): 24

Dominant language: Go
License: No license data
Last GitHub push: Sep 12, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

142 open issues indexed

Vault search misses documents because tsv/embedding are built from a lossy auto-summary, not full content Open

area:vault bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1554 · 6 comments · Opened Sep 6, 2026
[Bug] Xoá agent thất bại — unique index uq_vault_docs_agent_team_scope_path va chạm khi orphan vault docs sang scope shared Open

bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1550 · 4 comments · Opened Sep 4, 2026
[Docs] Zalo OA channel: sai nguồn lấy token và sai cơ chế xác thực webhook Open

area:channels bug maintain:triaged P3-low

Difficulty 4/5 3-5 days Newbie friendliness 64/100

nextlevelbuilder/goclaw#1544 · 2 comments · Opened Aug 30, 2026
[Feature] Zalo Bot: hỗ trợ nhóm (group) — reply/mention, group_policy Open

area:channels enhancement maintain:triaged

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1543 · 1 comment · Opened Aug 30, 2026
[Bug] Zalo Bot: kênh im lặng khi bot đã đăng ký webhook — webhook_url/webhook_secret là config chết Open

area:channels bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 5/5 Over a week Newbie friendliness 48/100

nextlevelbuilder/goclaw#1542 · 2 comments · Opened Aug 30, 2026
spawn 的 list/wait/cancel 缺少 session 隔离，存在跨会话泄露和误杀 Open

area:security bug maintain:bug-confirmed maintain:triaged P1-high

Difficulty 3/5 1-2 days Newbie friendliness 78/100

nextlevelbuilder/goclaw#1525 · 4 comments · Opened Aug 24, 2026
CVE-2026-7505 / issue #866 regression: `operator.provision` can no longer call `tenants.create` or `tenants.users.add` over WebSocket Open

area:security bug maintain:bug-confirmed maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1524 · 3 comments · Opened Aug 24, 2026
[Bug] Warning text màu vàng trên nền trắng (light theme) gây khó đọc Open

ai-handle bug maintain:bug-confirmed maintain:triaged P3-low

nextlevelbuilder/goclaw#1511 · 1 comment · 1 assignee · Opened Aug 8, 2026
系统提示词注入情景记忆会破坏模型缓存 Open

agent:github-maintain maintain:bug-confirmed maintain:triaged

Difficulty 4/5 3-5 days Newbie friendliness 42/100

nextlevelbuilder/goclaw#1506 · 3 comments · Opened Aug 6, 2026
Slack: require_mention is bypassed for every reply in a thread whose root message mentions the bot Open

agent:github-maintain area:channels bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 78/100

nextlevelbuilder/goclaw#1502 · 2 comments · Opened Aug 4, 2026
ACP Provider Add bug Open

agent:github-maintain area:providers bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 58/100

nextlevelbuilder/goclaw#1481 · 2 comments · 1 reaction · Opened Jul 27, 2026
Slack: thread replies misrouted under concurrent mentions in same channel; non-draft thread send fails with channel_not_found Open

agent:github-maintain area:channels bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 64/100

nextlevelbuilder/goclaw#1476 · 2 comments · Opened Jul 24, 2026
Slack: stray partial draft message left behind when NO_REPLY suppresses delivery Open

agent:github-maintain area:channels bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1475 · 1 comment · Opened Jul 24, 2026
vault.enrich sync_wikilinks fails with "ON CONFLICT DO UPDATE command cannot affect row a second time" when a document links to the same target twice Open

agent:github-maintain area:vault bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 68/100

nextlevelbuilder/goclaw#1473 · 3 comments · Opened Jul 24, 2026
支持配置action marker或者降低80阈值 Open

agent:github-maintain area:agent-loop enhancement maintain:triaged P3-low

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1471 · 1 comment · Opened Jul 23, 2026
Show previous configuration Open

agent:github-maintain area:providers enhancement maintain:triaged P3-low

Difficulty 4/5 3-5 days Newbie friendliness 42/100

nextlevelbuilder/goclaw#1466 · 1 comment · Opened Jul 22, 2026
What does a broken heart emoji on Telegram means? Open

agent:github-maintain area:channels maintain:triaged question

Difficulty 5/5 Over a week Newbie friendliness 20/100

nextlevelbuilder/goclaw#1456 · 3 comments · Opened Jul 20, 2026
Telegram group with topics Open

agent:github-maintain area:channels maintain:triaged question

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nextlevelbuilder/goclaw#1455 · 5 comments · Opened Jul 20, 2026
Where is channel's `Require @mention` saved? Open

agent:github-maintain area:channels maintain:triaged question

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

nextlevelbuilder/goclaw#1454 · 5 comments · Opened Jul 20, 2026
[Feature Request] Native AWS Bedrock provider (Anthropic Claude via Bedrock) Open

agent:github-maintain area:providers enhancement maintain:triaged P2-medium

Difficulty 5/5 Over a week Newbie friendliness 48/100

nextlevelbuilder/goclaw#1433 · 2 comments · Opened Jul 13, 2026
SSRF protection blocks local LLMs and local MCPs Open

agent:github-maintain area:mcp area:providers bug maintain:triaged P2-medium

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1430 · 4 comments · Opened Jul 12, 2026
[Feature Request] Zalo Personal: Add inbound media/file download to agent workspace (all formats) Open

agent:github-maintain area:channels enhancement maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1427 · 2 comments · Opened Jul 12, 2026
Background workers failed Open

agent:github-maintain area:providers bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 35/100

nextlevelbuilder/goclaw#1418 · 6 comments · Opened Jul 10, 2026
Cannot add Agent (with Ollama provider) Open

agent:github-maintain area:providers bug maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1414 · 6 comments · Opened Jul 9, 2026
CLI, MCP and client Open

agent:github-maintain area:mcp enhancement maintain:triaged

Difficulty 5/5 Over a week Newbie friendliness 25/100

nextlevelbuilder/goclaw#1354 · 2 comments · Opened Jul 4, 2026
Enhancement: Loop detection false positive on GraphQL mutations with static responses Open

agent:github-maintain area:agent-loop bug maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1335 · 3 comments · Opened Jul 3, 2026
Deep issue with Goclaw codebase in general + technical debt Open

agent:github-maintain area:sandbox area:skills enhancement maintain:triaged P1-high

Difficulty 5/5 Over a week Newbie friendliness 20/100

nextlevelbuilder/goclaw#1328 · 8 comments · Opened Jul 2, 2026
Cannot Add new MCP server and Node Packages Open

agent:github-maintain area:mcp bug maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 42/100

nextlevelbuilder/goclaw#1327 · 12 comments · Opened Jul 2, 2026
NextCloud Talk channel Open

agent:github-maintain area:channels enhancement maintain:triaged P3-low

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1316 · 1 comment · Opened Jul 1, 2026
Proposition: remove pkg-helper + apk-packages persistence; enforce immutable container images Open

agent:github-maintain area:install area:security area:skills enhancement maintain:triaged P2-medium

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1283 · 2 comments · Opened Jun 25, 2026
Context compact dont fire in web-chat Open

agent:github-maintain bug maintain:triaged P2-medium

Difficulty 3/5 1-2 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1240 · 12 comments · Opened Jun 18, 2026
ChatGPT OAuth agents fail text turns when native image_generation tool is attached Open

agent:github-maintain area:providers bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1237 · 8 comments · Opened Jun 18, 2026
[Security] Operator-accessible `exec` tool can leak `GOCLAW_*` secrets via `jq` `$ENV` despite `env_dump` protections Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1227 · 8 comments · Opened Jun 14, 2026
[Security] Cross-Agent Authorization Bypass in `/v1/tools/invoke` Allows Unauthorized Cron Binding to Foreign Agents Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1217 · 3 comments · Opened Jun 12, 2026
[Security] GoClaw `exec` approval can be bypassed by reusing an `allow-always` basename with a different path-scoped executable Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1216 · 2 comments · Opened Jun 12, 2026
[Security] GoClaw `exec` Secure-CLI Gate Lets PowerShell `-EncodedCommand` Bypass Grant Enforcement Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1215 · 4 comments · Opened Jun 12, 2026
[Security] Exec approval allowlist basename collision allows operator-triggered host command execution via workspace binary Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1213 · 2 comments · Opened Jun 12, 2026
[Security] BusyBox-wrapped `allow-always` approval reuses trust across different shell payloads and bypasses exec re-approval Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1212 · 2 comments · Opened Jun 12, 2026
[Security] Authenticated Browser Tool File Navigation Allows Local File Disclosure via `file://` URLs Open

agent:github-maintain area:security fix-in-review maintain:triaged

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1207 · 1 comment · Opened Jun 10, 2026
[Security] GoClaw `execApproval` Safe-Bin Classification Bypasses Human Approval for `sort -o` File Writes and `grep -R` Recursive Reads Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1206 · 1 comment · Opened Jun 10, 2026
[Security] GoClaw `exec` allowlist shell-chain bypass allows execution of non-allowlisted commands Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 58/100

nextlevelbuilder/goclaw#1205 · 1 comment · Opened Jun 10, 2026
[Security] GoClaw `exec` approval `allow-always` trusts shell wrappers and lets later `sh -lc` payloads bypass re-approval Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1204 · 1 comment · Opened Jun 10, 2026
[Security] Authenticated `exec` approval bypass via `env` shell wrapper in GoClaw Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1203 · 1 comment · Opened Jun 10, 2026
[Security] ACP ToolBridge workspace boundary bypass allows file write outside the configured workspace via dangling symlink alias Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1201 · 1 comment · Opened Jun 10, 2026
[Security] Provider-returned video URLs in `create_video` bypass SSRF protections and allow internal network fetches Open

agent:github-maintain area:security bug maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 68/100

nextlevelbuilder/goclaw#1199 · 2 comments · Opened Jun 10, 2026
[Bug] DB system_configs tts.provider ignored at startup — TTS manager built before ApplySystemConfigs, falls back to Edge Open

agent:github-maintain bug maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1198 · 3 comments · Opened Jun 9, 2026
[Security] WebSocket API keys with `operator.approvals` scope can invoke unrelated operator-write RPC methods Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1188 · 3 comments · Opened Jun 4, 2026
Bug: DeepSeek V4 thinking mode 400 error on multi-turn tool calls Open

agent:github-maintain area:providers bug maintain:triaged P2-medium

Difficulty 1/5 1-3 hours Newbie friendliness 39/100

nextlevelbuilder/goclaw#1186 · 3 comments · Opened Jun 3, 2026
Skill dependency scan/install does not match sandbox runtime, and lacks a control switch Open

agent:github-maintain area:config area:sandbox area:skills bug maintain:triaged P2-medium status:blocked

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1164 · 2 comments · Opened May 20, 2026
Sandbox workspace mount exposes other tenants' workspaces Open

agent:github-maintain area:sandbox area:security bug maintain:triaged P0-critical status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1163 · 3 comments · 1 reaction · Opened May 20, 2026

nextlevelbuilder/goclaw

Get new issues in your inbox