ClawHub
Back to skill

Security audit

OpenClaw Daily Tips

Security checks across malware telemetry and agentic risk

Overview

This skill is a low-risk daily tips utility that mainly shows curated local advice and stores simple local preference files.

Install if you want a local OpenClaw tips helper. Be aware it creates local preference files for saved and skipped tips, and review the hardcoded optional Reddit helper before enabling any community-feed behavior.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger list includes generic phrases such as "ai agent tips," "agent optimization," and "ai automation tips," which can cause the skill to activate in contexts where the user did not specifically intend to invoke this package. Because the skill advertises fetching community content and personalized tracking, unintended invocation can expose users to unexpected external content retrieval or preference collection.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The skill description emphasizes optimization tips but does not clearly warn that it fetches content from community sources and tracks user preferences. This is risky because users may invoke the skill without understanding that external, potentially untrusted content may be surfaced and that behavioral data may be stored, increasing privacy and prompt-injection exposure in an AI-agent context.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The script uses child_process.exec with shell interpolation to invoke another script, which is dangerous because any future caller that passes untrusted subreddit or limit values could trigger shell injection. Even though the helper is currently unused, keeping exploitable shell-based code in a user-facing skill materially increases risk and is especially unjustified in a simple daily-tips utility.

VirusTotal

No VirusTotal findings

View on VirusTotal