Security audit
Security checks for vulnerabilities and agentic risk
The skill is a disclosed trend-monitoring assistant with local storage, scheduled jobs, and a Tavily API key, but its artifact appears to be documentation-only and references scripts that were not present for inspection.
Install only if you are comfortable providing a Tavily API key, allowing scheduled OpenClaw jobs, and storing reports/profile data locally. Before running the uninstall cleanup command, back up any reports or database contents you may want to keep. Also note that the inspected package did not include the scripts referenced by the documentation, so functionality may depend on files not present in this artifact.
Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
After installation, add your Tavily API key:
echo "TAVILY_API_KEY=tvly-xxxx" >> ~/.openclaw/workspace/.env
Then tell your agent:
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
openclaw skills remove viralevo
# Step 2: Delete local data (optional)
rm -rf ~/.openclaw/workspace/viralevo/
# Step 3: Verify
openclaw skills list
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).
openclaw skills remove viralevo
# Step 2: Delete local data (optional)
rm -rf ~/.openclaw/workspace/viralevo/
# Step 3: Verify
openclaw skills list
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Tell your agent:
"Add a cron job to run ViralEvo daily at 8am"
Or add manually to ~/.openclaw/openclaw.json:
The uninstall section documents deletion of the skill's local data but does not give an explicit data-loss warning immediately adjacent to the destructive command. Users or agents following the instructions could permanently remove reports, configuration, and stored history without realizing recovery may be difficult or impossible.