Owner

nextlevelbuilder

4 indexed repositories · View on GitHub

ui-ux-pro-max-skill
An AI skill that provides design intelligence for building professional UI/UX across multiple platforms.

Python · 128915 stars
goclaw
GoClaw - GoClaw is OpenClaw rebuilt in Go — with multi-tenant isolation, 5-layer security, and native concurrency. Deploy AI agent teams ...

Go · 3602 stars
goclaw-docs
The official docs of goclaw.sh

JavaScript · 29 stars
nlb-directory-toolkits
Next Level Builders Directory Toolkits — CLI, MCP Server & AgentSkill

TypeScript · 1 star

Beginner friendly Everything

Open All

[Security] GoClaw `exec` approval can be bypassed by reusing an `allow-always` basename with a different path-scoped executable Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1216 · 2 comments · Opened Jun 12, 2026
[Security] GoClaw `exec` Secure-CLI Gate Lets PowerShell `-EncodedCommand` Bypass Grant Enforcement Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1215 · 4 comments · Opened Jun 12, 2026
[Security] Exec approval allowlist basename collision allows operator-triggered host command execution via workspace binary Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1213 · 2 comments · Opened Jun 12, 2026
[Security] BusyBox-wrapped `allow-always` approval reuses trust across different shell payloads and bypasses exec re-approval Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1212 · 2 comments · Opened Jun 12, 2026
update skills for 100% python, zeroJs/Nodejs frameworks Open

agent:github-maintain decision:needs-design maintain:triaged

Difficulty 3/5 1-2 days Newbie friendliness 45/100

nextlevelbuilder/ui-ux-pro-max-skill#352 · 2 comments · Opened Jun 12, 2026
[Security] Authenticated Browser Tool File Navigation Allows Local File Disclosure via `file://` URLs Open

agent:github-maintain area:security fix-in-review maintain:triaged

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1207 · 1 comment · Opened Jun 10, 2026
[Security] GoClaw `execApproval` Safe-Bin Classification Bypasses Human Approval for `sort -o` File Writes and `grep -R` Recursive Reads Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1206 · 1 comment · Opened Jun 10, 2026
[Security] GoClaw `exec` allowlist shell-chain bypass allows execution of non-allowlisted commands Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 58/100

nextlevelbuilder/goclaw#1205 · 1 comment · Opened Jun 10, 2026
[Security] GoClaw `exec` approval `allow-always` trusts shell wrappers and lets later `sh -lc` payloads bypass re-approval Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1204 · 1 comment · Opened Jun 10, 2026
[Security] Authenticated `exec` approval bypass via `env` shell wrapper in GoClaw Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1203 · 1 comment · Opened Jun 10, 2026
[Security] ACP ToolBridge workspace boundary bypass allows file write outside the configured workspace via dangling symlink alias Open

agent:github-maintain area:security maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1201 · 1 comment · Opened Jun 10, 2026
[Security] Provider-returned video URLs in `create_video` bypass SSRF protections and allow internal network fetches Open

agent:github-maintain area:security bug maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 68/100

nextlevelbuilder/goclaw#1199 · 2 comments · Opened Jun 10, 2026
[Bug] DB system_configs tts.provider ignored at startup — TTS manager built before ApplySystemConfigs, falls back to Edge Open

agent:github-maintain bug maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1198 · 3 comments · Opened Jun 9, 2026
[Security] WebSocket API keys with `operator.approvals` scope can invoke unrelated operator-write RPC methods Open

agent:github-maintain area:security maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1188 · 3 comments · Opened Jun 4, 2026
Bug: DeepSeek V4 thinking mode 400 error on multi-turn tool calls Open

agent:github-maintain area:providers bug maintain:triaged P2-medium

Difficulty 1/5 1-3 hours Newbie friendliness 39/100

nextlevelbuilder/goclaw#1186 · 3 comments · Opened Jun 3, 2026
Skill dependency scan/install does not match sandbox runtime, and lacks a control switch Open

agent:github-maintain area:config area:sandbox area:skills bug maintain:triaged P2-medium status:blocked

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1164 · 2 comments · Opened May 20, 2026
Sandbox workspace mount exposes other tenants' workspaces Open

agent:github-maintain area:sandbox area:security bug maintain:triaged P0-critical status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1163 · 3 comments · 1 reaction · Opened May 20, 2026
Sandbox does not mount skills-store, so agents cannot read skill files Open

agent:github-maintain area:sandbox area:skills bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1162 · 3 comments · 1 reaction · Opened May 20, 2026
Loader does not scan tenant skills-store directories, causing accessible skills to disappear Open

agent:github-maintain area:data-store area:skills bug maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 50/100

nextlevelbuilder/goclaw#1161 · 3 comments · Opened May 20, 2026
Channel instance reload is full stop-restart, disrupting all active sessions on any channel CRUD Open

agent:github-maintain area:channels bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1147 · 3 comments · Opened May 14, 2026
Healthy channel shows "Needs attention" badge due to FailureKind not cleared on recovery Open

agent:github-maintain area:channels bug maintain:triaged P3-low ux

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

nextlevelbuilder/goclaw#1144 · 1 comment · Opened May 12, 2026
Session auto-compaction can fail to prevent context overflow in long-lived chats; add overflow-triggered compact+retry and manual compact controls Open

agent:github-maintain area:agent-loop area:data-store bug maintain:triaged P1-high

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1136 · 2 comments · Opened May 9, 2026
[Security] GoClaw team task completion authorization bypass allows a team member to complete another member's in-progress task Open

agent:github-maintain area:security area:teams bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 58/100

nextlevelbuilder/goclaw#1133 · 1 comment · Opened May 9, 2026
[Security] Server-Side Request Forgery (SSRF) via Unvalidated TTS Provider API Base Configuration Open

agent:github-maintain area:providers area:security bug maintain:triaged P1-high status:blocked

Difficulty 4/5 3-5 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1132 · 2 comments · Opened May 9, 2026
Duplicate write_file Result — Take Action Open

agent:github-maintain area:agent-loop bug maintain:triaged P3-low status:needs-repro

Difficulty 4/5 3-5 days Newbie friendliness 20/100

nextlevelbuilder/goclaw#1131 · 1 comment · Opened May 9, 2026
tracing: announce-run trace + agent span store `output_preview = "..."` (3 chars), full text only on llm_call span Open

agent:github-maintain area:agent-loop bug maintain:triaged P3-low

Difficulty 3/5 1-2 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#1130 · 1 comment · Opened May 8, 2026
MCP bridge drops SenderID → cron / write_file unusable in Telegram groups (Claude CLI provider) Open

agent:github-maintain area:channels area:mcp area:security bug maintain:triaged P1-high status:needs-triage

Difficulty 4/5 3-5 days Newbie friendliness 58/100

nextlevelbuilder/goclaw#1126 · 1 comment · Opened May 8, 2026
fix(providers): increase HTTP connection pool for embedding provider Open

agent:github-maintain area:providers area:teams bug maintain:triaged P1-high

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

nextlevelbuilder/goclaw#1124 · 1 comment · Opened May 7, 2026
Dashboard refuses to restore backups Open

agent:github-maintain area:data-store bug maintain:triaged P2-medium status:needs-repro

Difficulty 3/5 1-2 days Newbie friendliness 38/100

nextlevelbuilder/goclaw#1122 · 1 comment · Opened May 7, 2026
[Security] Evolution Suggestion Authorization Bypass — Unauthorized Modification of Admin-Only Suggestion State leading to Tool Disabled Open

agent:github-maintain area:agent-loop area:security bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1120 · 1 comment · Opened May 7, 2026
[Security] Agent Config Bypass via V3-Flags — Viewer Mutates Admin-Only Agent Config Open

agent-settings agent:github-maintain area:security bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1119 · 1 comment · Opened May 7, 2026
[Localization] Add Portuguese (Brazil) - pt-BR support Open

agent:github-maintain enhancement maintain:triaged P3-low ux

Difficulty 3/5 1-2 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1112 · 1 comment · Opened May 6, 2026
Feature Request: Background Exec with Output Delivery to LLM Open

agent:github-maintain area:agent-loop area:sandbox enhancement maintain:triaged P2-medium

Difficulty 5/5 Over a week Newbie friendliness 35/100

nextlevelbuilder/goclaw#1102 · 1 comment · Opened May 5, 2026
Feature Request: Pre-Auth Webhook Interceptor for Channels (Prevent LLM Denial-of-Wallet)` Open

agent:github-maintain area:channels area:security enhancement maintain:triaged P2-medium

Difficulty 5/5 Over a week Newbie friendliness 38/100

nextlevelbuilder/goclaw#1095 · 1 comment · Opened May 4, 2026
Workspace isolation inverts user/channel hierarchy — artifacts split across channels for the same user BUG? Open

agent:github-maintain architecture area:data-store bug maintain:triaged P2-medium question status:needs-triage

Difficulty 4/5 3-5 days Newbie friendliness 64/100

nextlevelbuilder/goclaw#1073 · 3 comments · Opened May 1, 2026
WhatsApp: multiple channel_instances share one whatsmeow_device row Open

agent:github-maintain area:channels bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 25/100

nextlevelbuilder/goclaw#1064 · 1 comment · Opened Apr 28, 2026
[Bug] Telegramm Channel permanently broken after proxy timeout on startup — no reconnect attempt Open

agent:github-maintain area:channels bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1058 · 2 comments · Opened Apr 28, 2026
Bug report: Master system cannot edit predefined context files for newly created agent Open

agent-settings agent:github-maintain area:security bug maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1054 · 1 comment · Opened Apr 28, 2026
[Bug] DeepSeek V4 Pro: Lỗi 400 do thiếu reasoning_content trên kênh Zalo (OpenAI-compatible) Open

agent:github-maintain area:channels area:providers bug fix-in-review maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nextlevelbuilder/goclaw#1047 · 1 comment · Opened Apr 27, 2026
OpenRouter+Anthropic: prompt caching disabled, ~3-4x cost overhead Open

agent:github-maintain area:providers bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1042 · 3 comments · Opened Apr 26, 2026
ACP agent error Open

agent:github-maintain area:providers bug maintain:bug-confirmed maintain:triaged P2-medium status:needs-repro

Difficulty 4/5 3-5 days Newbie friendliness 35/100

nextlevelbuilder/goclaw#1040 · 1 comment · Opened Apr 26, 2026
bug: deleting environment variables from MCP server config does not persist on save Open

agent:github-maintain area:mcp bug maintain:triaged P2-medium ux

Difficulty 3/5 1-2 days Newbie friendliness 52/100

nextlevelbuilder/goclaw#1039 · 1 comment · Opened Apr 26, 2026
NLPM Automated Audit: 2 bugs + 3 security fixes (score 85/100) Open

agent:github-maintain decision:backlog maintain:accepted

Difficulty 5/5 Over a week Newbie friendliness 15/100

nextlevelbuilder/ui-ux-pro-max-skill#289 · 1 comment · Opened Apr 26, 2026
bug: custom MCP server fails via both Streamable HTTP (grant revoked) and stdio/mcp-remote (invalid args) Open

agent:github-maintain area:mcp area:security bug maintain:bug-confirmed maintain:triaged P2-medium

Difficulty 4/5 3-5 days Newbie friendliness 48/100

nextlevelbuilder/goclaw#1038 · 6 comments · Opened Apr 26, 2026
NLPM Audit: Bugs and security improvements found in automated NL quality scan Open

agent:github-maintain maintain:triaged

Difficulty 4/5 3-5 days Newbie friendliness 25/100

nextlevelbuilder/ui-ux-pro-max-skill#286 · 2 comments · Opened Apr 26, 2026
after upgraded v3.11.1 from v3.9.2, the provider is broken Open

area:data-store area:install area:providers bug maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 45/100

nextlevelbuilder/goclaw#1034 · 1 comment · Opened Apr 25, 2026
Bug: MCP arg validation false positive — substring match on '-c' blocks legitimate package names Open

agent:github-maintain area:mcp area:security bug fix-in-review good first issue maintain:triaged P2-medium

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

nextlevelbuilder/goclaw#1027 · 1 comment · Opened Apr 24, 2026
Bug: flaky MCP server health-check loop tanks platform health and blocks dashboard Open

agent:github-maintain area:mcp bug maintain:bug-confirmed maintain:triaged P1-high

Difficulty 4/5 3-5 days Newbie friendliness 50/100

nextlevelbuilder/goclaw#1026 · 1 comment · Opened Apr 24, 2026
Change Agent Type - Agent Type Field Open

agent-settings agent:github-maintain enhancement maintain:triaged P3-low ux

Difficulty 3/5 1-2 days Newbie friendliness 55/100

nextlevelbuilder/goclaw#998 · 1 comment · Opened Apr 22, 2026
Bug: restrict_to_workspace=false ignored by write_file/read_file/edit Open

agent:github-maintain area:sandbox area:security maintain:triaged question

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

nextlevelbuilder/goclaw#994 · 2 comments · Opened Apr 22, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

nextlevelbuilder

Showing the newest 100

Get new issues in your inbox