
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
@openclaw/bluebubbles
Advanced tools
This package contains the BlueBubbles external channel plugin for OpenClaw.
If you’re looking for how to use BlueBubbles as an agent/tool user, see:
skills/bluebubbles/SKILL.mdindex.ts.src/channel.ts.src/monitor.ts (register per-account route via registerPluginHttpRoute).src/send.ts + src/probe.ts.src/runtime.ts (set via api.runtime).src/channels/plugins/catalog.ts.probeBlueBubbles in src/probe.ts for health checks.sendMessageBlueBubbles in src/send.ts for text delivery.resolveChatGuidForTarget in src/send.ts for chat lookup.sendBlueBubblesReaction in src/reactions.ts for tapbacks.sendBlueBubblesTyping + markBlueBubblesChatRead in src/chat.ts.downloadBlueBubblesAttachment in src/attachments.ts for inbound media.buildBlueBubblesApiUrl + blueBubblesFetchWithTimeout in src/types.ts for shared REST plumbing.api.runtime) and openclaw/plugin-sdk helpers.<media:...> placeholders when text is empty and attach media paths via MediaUrl(s) in the inbound context.channels.bluebubbles.serverUrl (base URL), channels.bluebubbles.password, channels.bluebubbles.webhookPath.channels.bluebubbles.actions.reactions (default true).react action requires a target (phone number or chat identifier) in addition to messageId.
Example:
action=react target=+15551234567 messageId=ABC123 emoji=❤️FAQs
OpenClaw BlueBubbles channel plugin
The npm package @openclaw/bluebubbles receives a total of 446 weekly downloads. As such, @openclaw/bluebubbles popularity was classified as not popular.
We found that @openclaw/bluebubbles demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.