Back to skill

Security audit

Security Audit

Security checks for vulnerabilities and agentic risk

Overview

This is a read-only OpenClaw security audit skill whose broad system checks are disclosed and aligned with its purpose.

Install only if you want an agent to inspect local system configuration for OpenClaw security issues. Run it on systems you control, review the generated report before sharing it, avoid unnecessary root access, and require explicit confirmation before any remediation commands are run.

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Static analysis

No suspicious patterns detected.