
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
@zenalexa/openclaw-unicli
Advanced tools
OpenClaw Bundle MCP plugin that exposes Uni-CLI as an MCP server — 220 sites, 1283 commands.
This is a Bundle MCP plugin. OpenClaw reads openclaw.plugin.json, finds the mcpServers block, and launches unicli mcp serve as a child process. All four smart-default tools (unicli_run, unicli_list, unicli_search, unicli_explore) are available immediately inside OpenClaw without any extra configuration.
unicli must be installed globally before loading this plugin:
npm i -g @zenalexa/unicli
openclaw plugins install @zenalexa/openclaw-unicli
Or copy openclaw.plugin.json manually to ~/.openclaw/plugins/unicli/openclaw.plugin.json.
| Tool | Description |
|---|---|
unicli_run | Execute any Uni-CLI command (site + command + args) |
unicli_list | List available sites and commands, filter by site or type |
unicli_search | Search commands by intent, including bilingual EN/ZH |
unicli_explore | Auto-discover API endpoints for any URL |
{ "site": "hackernews", "command": "top", "limit": 10 }
{ "site": "twitter", "type": "web-api" }
{ "query": "推特热门", "limit": 5 }
{ "url": "https://example.com", "goal": "get trending posts" }
Apache-2.0
FAQs
Uni-CLI plugin for OpenClaw — 220 sites, 1283 commands via MCP
The npm package @zenalexa/openclaw-unicli receives a total of 1 weekly downloads. As such, @zenalexa/openclaw-unicli popularity was classified as not popular.
We found that @zenalexa/openclaw-unicli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.

Research
/Security News
A Twitch browser extension on Chrome and Firefox forwards users’ live OAuth session tokens through proxies controlled by a Russian bot service.