ClawHub
Back to skill

Security audit

OpenClaw Model Switch & Rescue

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed OpenClaw administrator runbook with high-impact server commands that fit its stated model-switching and node-rescue purpose.

Install only if you administer an OpenClaw deployment. Verify the target host, prefer a non-root SSH user with sudo, keep SSH keys and API keys out of chat/logs, back up ~/.openclaw/openclaw.json and ~/.openclaw/node.json before changes, and require explicit confirmation before restarting services or deleting pairing state.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Findings (3)

Intent-Code Divergence

Low
Confidence
95% confidence
Finding
The skill gives contradictory privilege guidance: it demonstrates direct root SSH access while later recommending least privilege with sudo. This inconsistency normalizes unnecessary privileged access and increases the chance an operator will perform sensitive recovery steps as root, magnifying the impact of mistakes or command tampering.

Vague Triggers

Medium
Confidence
86% confidence
Finding
The trigger phrases are broad operational terms like '模型切换' and 'API用完', which can match ordinary troubleshooting conversations and cause the skill to activate in contexts where the user did not explicitly request these high-risk actions. Because the skill includes SSH access, config editing, process killing, and node re-pairing, accidental invocation materially raises the chance of disruptive or unsafe changes.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
```bash
# 删除旧的配对信息
rm ~/.openclaw/node.json

# 重新启动节点
cd ~/.openclaw
Confidence
93% confidence
Finding
rm ~/.openclaw/

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal