OpenClaw: Untrusted workspace channel shadows could execute during built-in channel setup
Built-in channel setup could resolve a workspace-shadowed channel plugin before checking whether that workspace plugin was trusted, letting an untrusted workspace plugin run during setup/login for a bundled channel id.
src/commands/channel-setup/channel-plugin-resolution.ts
This is the setup-resolution path for channel plugins. The fix adds trust checks for workspace-origin catalog entries and falls back to non-workspace resolution when the shadowing workspace plugin is not explicitly enabled.
src/channels/plugins/catalog.ts
Catalog entries gained origin tracking and an excludeWorkspace option here. That supports the fix for ignoring workspace-origin shadows during built-in channel setup resolution.