Security Audit

• Analyzed: Apr 16, 2026, 2:16 AM
• Findings: 0
• Version: 2.0.0
• Hash: 28a90545cb2129a3185fec56f5d36df686bbf7773c4aa73dc4f643a7c9501798
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: alvis-security-audit-v2 Version: 2.0.0 The 'openclaw-security-audit' skill is a legitimate security utility designed to inspect OpenClaw/Clawdbot deployments for misconfigurations. The instructions in SKILL.md explicitly mandate a 'read-only' approach, forbid data exfiltration, and require the redaction of any detected secrets. It uses standard system diagnostic commands (e.g., ss, ps, find, journalctl) to identify risks like public port exposure, unsafe tool policies, and plaintext credential storage, while providing clear guidance on remediation only upon user request.