
Research
/Security News
GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.
这个插件让 OpenClaw 可以通过 TraeClaw 调用本地 Trae 桌面端,把 Trae 当作一个 IDE 工具使用。
目标链路:
OpenClaw -> trae_delegate -> TraeClaw -> Trae 桌面端
这不是模型提供方接入。OpenClaw 继续使用自己的 LLM,这个插件只负责把 IDE 工作委托给 Trae。
如果你希望后续通过 OpenClaw 直接收插件更新,优先用 npm 安装版:
openclaw plugins install traeclaw
openclaw plugins enable trae-ide
后续发布新版本后,用户更新:
openclaw plugins update trae-ide
注意:
openclaw plugins update trae-ide 时,插件和网关能力会一起更新autoStart,插件会优先拉起包内自带的 quickstart 入口,不需要额外本地仓库trae_statustrae_new_chattrae_delegate/Trae <任务>/Trae process <任务>在 OpenClaw 对话输入框里直接输入 /Trae,插件会:
/Trae 后面的任务直接交给 Trae 执行如果你需要把过程信息也一起回传,再用:
/Trae process <任务>例如:
/Trae 分析当前仓库,并实现缺失的登录错误提示
/Trae process 分析当前仓库,并把执行过程也一起返回
start-traeapi.cmdstart-traeapi.commandtools.alsoAllow 放行插件工具。trae_status、trae_new_chat 或 trae_delegate。如果启用了 autoStart,插件会优先使用仓库自带的 quickstart 启动入口:
start-traeapi.cmdstart-traeapi.command相关文档:
请使用:
tools.alsoAllowagents.list[].tools.alsoAllow不要只写插件专用的 tools.allow。否则 OpenClaw 可能能看到插件,但 agent 实际仍然调不到 trae_delegate。
重启 OpenClaw 后:
Use trae_status exactly once and tell me whether Trae is ready.Use trae_delegate exactly once and ask Trae to summarize this project.FAQs
OpenClaw plugin that delegates IDE tasks to a local TraeClaw instance.
The npm package traeclaw receives a total of 22 weekly downloads. As such, traeclaw popularity was classified as not popular.
We found that traeclaw demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The trojanized extensions use TinyGo-compiled WebAssembly and Solana transaction memos to resolve command-and-control infrastructure.

Security News
Anthropic says the directive cited national security concerns over a narrow jailbreak, but offered no specific technical details.

Security News
A network of 152 Chrome live wallpaper extensions hid ad tracking and made extension-driven traffic look like Google search clicks.