Search results

[BUG] web_search tool fails silently when using Brave API key from .security.yml

Status: Open.

#3125 In sipeed/picoclaw;

· Giordano10 opened on Jun 14, 2026

[Future Request] Telegram 渠道按对话类型（私聊/群组/频道）的权限分级控制

Status: Open.

#3114 In sipeed/picoclaw;

· v2up-32mb opened on Jun 12, 2026

[BUG]Tool execution fails with Gemini 3.5 Flash (Missing thought_signature in schema)

Status: Open.

#3111 In sipeed/picoclaw;

· Giordano10 opened on Jun 12, 2026

[Bug] 异步子代理(spawn)任务完成时，ForUser字段被同时用于直接推送和主代理汇总，导致重复消息

Status: Open.

#3094 In sipeed/picoclaw;

· v2up-32mb opened on Jun 10, 2026

[Feature] I need SimpleX or tox

Status: Open.

#3093 In sipeed/picoclaw;

· Damian-o2 opened on Jun 10, 2026

[BUG] Panel does not work on Safari on iOS versions below 16.4

Status: Open.

#3090 In sipeed/picoclaw;

· 3m377 opened on Jun 10, 2026

[Feature] use vodozemac instead of libolm

Status: Open.

#3088 In sipeed/picoclaw;

· pbsds opened on Jun 9, 2026

[Security] PicoClaw Feishu reply-context expansion bypasses allow_from for fetched parent messages

stale

Status: Open.

#3082 In sipeed/picoclaw;

· YLChen-007 opened on Jun 9, 2026

[Security] Approval hook cwd symlink race allows exec to run in a different directory than the approved one

stale

Status: Open.

#3081 In sipeed/picoclaw;

· YLChen-007 opened on Jun 9, 2026

[Security] PicoClaw exec command whitelist allows jq environment disclosure by skipping deny-pattern enforcement

stale

Status: Open.

#3079 In sipeed/picoclaw;

· YLChen-007 opened on Jun 9, 2026

[Security] PicoClaw web_fetch SSRF protection can be bypassed via environment-configured HTTP proxy

stale

Status: Open.

#3078 In sipeed/picoclaw;

· YLChen-007 opened on Jun 9, 2026

[Security] WeCom group trigger policy bypass allows unmentioned group messages to reach the PicoClaw agent runtime

stale

Status: Open.

#3076 In sipeed/picoclaw;

· YLChen-007 opened on Jun 9, 2026