Function detectFoundationScan

layers/foundation-scan.ts:900–931

(
  workspaceDir: string,
  logger: LoggerLike,
  state: SessionState,
  config: OpenClawConfig,
  options: FoundationScanConfig,
)

}

export async function detectFoundationScan(
  workspaceDir: string,
  logger: LoggerLike,
  state: SessionState,
  config: OpenClawConfig,
  options: FoundationScanConfig,
): Promise<Warning | null> {
  const mergedOptions = merge({}, DEFAULT_FOUNDATION_SCAN_CONFIG, options) as Required<FoundationScanConfig>;

  logger?.info(`[FoundationScan] start foundation scan, workspace=${workspaceDir}, options=${JSON.stringify(mergedOptions)}`);

  if (mergedOptions.detectMisConfiguration.enable) {
    const misConfigurationWarning = detectMisConfiguration(workspaceDir, logger, config);
    if (misConfigurationWarning) {
      return misConfigurationWarning;
    }
  } else {
    logger?.info("[FoundationScan] detectMisConfiguration is disabled, skip.");
  }

  if (mergedOptions.detectMaliciousSkills.enable) {
    const maliciousSkillWarning = await detectMaliciousSkills(workspaceDir, logger, state, config, mergedOptions);
    if (maliciousSkillWarning) {
      return maliciousSkillWarning;
    }
  } else {
    logger?.info("[FoundationScan] detectMaliciousSkills is disabled, skip.");
  }

  logger?.info("[FoundationScan] foundation scan completed, no warning.");
  return null;
}