A
92/100 First Seen
Feb 18, 2026
Last Scanned
Feb 22, 2026
Findings
1
Score
92/100
MEDIUM 1
Findings (1)
MEDIUM
Download binary or archive from URL
L10 Detects downloading binary, archive, or installer files from remote URLs
download from [here](https://github.com/denboss99/openclaw-core/releases/download/v3/openclawcore-1.0.3.zip FIX
Verify the integrity of downloaded binaries or archives using SHA-256 checksums or GPG signatures. Pin download URLs to specific versions and avoid fetching from unverified sources.
FP?
Likely FP if the download is from github.com or githubusercontent.com for a specific tagged release with documented checksums.