Search results

[Feature Request] Add configurable max upload file size for skills (currently hardcoded at 20MB)

enhancementNew feature or requestNew feature or request

Status: Open.

#1153 In nextlevelbuilder/goclaw;

· clark-cant opened on May 19, 2026

fix: agent provider switch save fails on null routing config

area:data-storeDB, sessions, memory, cacheDB, sessions, memory, cache

area:providersLLM provider implementationsLLM provider implementations

bugSomething isn't workingSomething isn't working

fix-in-reviewFix submitted via PR, pending maintainer reviewFix submitted via PR, pending maintainer review

P2-mediumFunctional bug, UX broken — prioritized backlogFunctional bug, UX broken — prioritized backlog

Status: Open.

#1148 In nextlevelbuilder/goclaw;

· mrgoonie opened on May 17, 2026

Channel instance reload is full stop-restart, disrupting all active sessions on any channel CRUD

area:channelsTelegram, Discord, channel managerTelegram, Discord, channel manager

bugSomething isn't workingSomething isn't working

P1-highData loss, core logic broken — fix in sprintData loss, core logic broken — fix in sprint

Status: Open.

#1147 In nextlevelbuilder/goclaw;

· dpy1123 opened on May 14, 2026

Healthy channel shows "Needs attention" badge due to FailureKind not cleared on recovery

area:channelsTelegram, Discord, channel managerTelegram, Discord, channel manager

bugSomething isn't workingSomething isn't working

P3-lowMinor bug, cosmetic, compatibility — backlogMinor bug, cosmetic, compatibility — backlog

ux

Status: Open.

#1144 In nextlevelbuilder/goclaw;

· dpy1123 opened on May 12, 2026

Channel diagnostics card shown incorrectly when channel is healthy due to Go zero-value time serialization

area:channelsTelegram, Discord, channel managerTelegram, Discord, channel manager

bugSomething isn't workingSomething isn't working

P3-lowMinor bug, cosmetic, compatibility — backlogMinor bug, cosmetic, compatibility — backlog

ux

Status: Open.

#1143 In nextlevelbuilder/goclaw;

· dpy1123 opened on May 12, 2026

Session auto-compaction can fail to prevent context overflow in long-lived chats; add overflow-triggered compact+retry and manual compact controls

area:agent-loopAgent run/loop/schedulerAgent run/loop/scheduler

area:data-storeDB, sessions, memory, cacheDB, sessions, memory, cache

bugSomething isn't workingSomething isn't working

P1-highData loss, core logic broken — fix in sprintData loss, core logic broken — fix in sprint

Status: Open.

#1136 In nextlevelbuilder/goclaw;

· oops-long opened on May 9, 2026

[Security] Unauthenticated HTTP Admin Access and Forged Webhook Execution When GoClaw Secrets Are Left Unconfigured

area:channelsTelegram, Discord, channel managerTelegram, Discord, channel manager

area:mcpModel Context Protocol bridge/serverModel Context Protocol bridge/server

area:securitySecurity, injection, permissionsSecurity, injection, permissions

bugSomething isn't workingSomething isn't working

P0-criticalCrash, security, data leak — fix immediatelyCrash, security, data leak — fix immediately

Status: Open.

#1134 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 9, 2026

[Security] GoClaw team task completion authorization bypass allows a team member to complete another member's in-progress task

area:securitySecurity, injection, permissionsSecurity, injection, permissions

area:teamsAgent teams, tasks, dispatchAgent teams, tasks, dispatch

bugSomething isn't workingSomething isn't working

P1-highData loss, core logic broken — fix in sprintData loss, core logic broken — fix in sprint

Status: Open.

#1133 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 9, 2026

[Security] Server-Side Request Forgery (SSRF) via Unvalidated TTS Provider API Base Configuration

area:providersLLM provider implementationsLLM provider implementations

area:securitySecurity, injection, permissionsSecurity, injection, permissions

bugSomething isn't workingSomething isn't working

P1-highData loss, core logic broken — fix in sprintData loss, core logic broken — fix in sprint

Status: Open.

#1132 In nextlevelbuilder/goclaw;

· YLChen-007 opened on May 9, 2026

Duplicate write_file Result — Take Action

area:agent-loopAgent run/loop/schedulerAgent run/loop/scheduler

bugSomething isn't workingSomething isn't working

P3-lowMinor bug, cosmetic, compatibility — backlogMinor bug, cosmetic, compatibility — backlog

status:needs-reproNeeds reproduction stepsNeeds reproduction steps

Status: Open.

#1131 In nextlevelbuilder/goclaw;

· echo-music opened on May 9, 2026

tracing: announce-run trace + agent span store output_preview = "..." (3 chars), full text only on llm_call span

area:agent-loopAgent run/loop/schedulerAgent run/loop/scheduler

bugSomething isn't workingSomething isn't working

P3-lowMinor bug, cosmetic, compatibility — backlogMinor bug, cosmetic, compatibility — backlog

Status: Open.

#1130 In nextlevelbuilder/goclaw;

· mozaa-solana opened on May 8, 2026

MCP bridge drops SenderID → cron / write_file unusable in Telegram groups (Claude CLI provider)

area:channelsTelegram, Discord, channel managerTelegram, Discord, channel manager

area:mcpModel Context Protocol bridge/serverModel Context Protocol bridge/server

area:securitySecurity, injection, permissionsSecurity, injection, permissions

bugSomething isn't workingSomething isn't working

P1-highData loss, core logic broken — fix in sprintData loss, core logic broken — fix in sprint

Status: Open.

#1126 In nextlevelbuilder/goclaw;

· tiennm99 opened on May 8, 2026