OpenClaw Windows WSL2 Install Guide

• Outcome: Review
• Latest audit: Sep 12, 2026 · 2:54 AM UTC
• Version: 1.2.1

Overview

This is a real OpenClaw WSL installation guide, but it asks users to run unverified online installers with broad admin/root access and to weaken host security controls.

Install only after reviewing and tightening the steps. Prefer official Microsoft and OpenClaw release channels, avoid `curl | bash`, verify signatures or hashes, do not add `NOPASSWD: ALL`, do not run OpenClaw as root for routine use, avoid disabling antivirus or Memory Integrity, and restrict any firewall rule to the minimum trusted scope needed.

A.I.G

Vulnerability Patterns

• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs
• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads

Findings (6)

T03 · Remote Payload Retrieval and Execution

Error

• Location: SKILL.md:503

Finding

Unverified Remote Installation Script Executed Directly by Bash

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:503
Vulnerability Type: Remote payload retrieval and immediate execution
Risk Level: Critical

Vulnerable Code:

bash

curl -fsSL https://molt.bot/install.sh | bash

Technical Analysis

The installation command downloads a mutable script from an external domain and passes it directly to Bash. The script is not pinned to a reviewed version, downloaded for inspection, authenticated through a code-signing mechanism, or checked against a trusted cryptographic digest.

HTTPS protects the transport connection but does not establish that the server, its current script, or future versions of the script are trustworthy. The effective payload can change after this Skill has been reviewed. The use of -s also suppresses normal progress output, reducing visibility during execution.

This behavior is particularly dangerous because the same guide recommends unrestricted passwordless sudo and alternatively suggests operating as root. Under either configuration, commands delivered by the remote server could obtain full control of the WSL environment.

Attack Path

1. A user follows the installation guide.
2. The molt.bot server, DNS resolution, hosting account, or deployment pipeline is compromised, or the hosted script is intentionally changed.
3. curl retrieves the modified script.
4. The pipe sends the response directly to Bash without an inspection or integrity-verification step.
5. The script executes with the current user's permissions.
6. If the user is root or has the recommended NOPASSWD: ALL rule, the payload invokes sudo and gains root privileges without additional user approval.
7. The payload can modify the WSL filesystem, steal locally available credentials, install services, or alter OpenClaw configuration.

Impact Assessment

Successful exploitation provides arbitrary command execution in WSL. The immediate scope is the current L ...[truncated 329 chars]

Remediation

View remediation

Remediation Suggestions

• Do not pipe network responses directly into a shell.
• Use an official, versioned OpenClaw release from a verified project repository.
• Pin the installer to an immutable release tag or commit.
• Publish a trusted SHA-256 digest or cryptographic signature through an independent authenticated channel.
• Download the installer to a local file, verify its digest or signature, and allow it to be reviewed before execution.
• Run installation as an unprivileged account and request elevation only for narrowly defined operations.
• Document the files, packages, network connections, and services that the installer creates.
• Fail closed when integrity verification cannot be completed.

T05 · Unauthorized Access and Privilege Escalation

Error

• Location: SKILL.md:402

Finding

Unrestricted Passwordless Sudo and Routine Root Operation

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:402, 419-429
Vulnerability Type: Excessive and persistent privilege assignment
Risk Level: High

Vulnerable Code and Instructions:

bash

echo "openclaw ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers

text

Option 2: Use root directly (simpler, for experienced users)

If you prefer simplicity and don't want to create a separate user, you can just keep using root. No extra configuration needed.

Technical Analysis

The sudoers rule permits the openclaw account to execute every command as any user without authentication. This is equivalent to granting any process that compromises that account a direct, non-interactive path to root.

The permission is broader than necessary for installing or operating OpenClaw. It persists beyond installation and is not restricted to specific binaries, arguments, paths, or installation phases. The guide also appends directly to /etc/sudoers instead of using visudo, so syntax is not validated before the active access-control file is modified.

Recommending routine root operation further removes privilege separation. It increases the impact of mistakes, dependency compromise, shell configuration manipulation, and the remote installer described elsewhere in the Skill.

Attack Path

1. The user creates the openclaw account and adds the unrestricted sudoers rule.
2. An OpenClaw component, remote installer, npm dependency, shell startup file, or other process running as openclaw is compromised.
3. The compromised process executes an arbitrary command through sudo.
4. No password or additional user confirmation is required.
5. The process obtains root access and modifies protected files, services, accounts, or security configuration.

If the root-login option is selected, exploitation starts with root privileges and does not require the sudo step.

Impact Assessment

A compromise of the ordinary i ...[truncated 344 chars]

Remediation

View remediation

Remediation Suggestions

• Remove the NOPASSWD: ALL recommendation.
• Use an ordinary non-root account for installation and runtime operations.
• Retain normal sudo authentication for administrative actions.
• If passwordless elevation is unavoidable, permit only explicitly required commands with fixed paths and carefully constrained arguments.
• Store any narrowly scoped rule in /etc/sudoers.d/openclaw.
• Create or edit sudoers rules with visudo, then validate them with visudo -cf.
• Remove temporary privilege rules immediately after installation.
• Do not present permanent root operation as an equivalent normal deployment option.

T08 · Insecure Dependencies

Error

• Location: SKILL.md:573

Finding

Privileged WSL Installer Downloaded Through an Unverified Third-Party Proxy

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:573-575
Vulnerability Type: Unsafe software supply-chain source
Risk Level: High

Vulnerable Code:

bash

curl -fSL https://ghproxy.com/https://github.com/microsoft/WSL/releases/download/2.3.26/wsl.2.3.26.0.x64.msi -o wsl-install.msi

Technical Analysis

The guide routes a Microsoft WSL MSI download through ghproxy.com, allowing a third-party service to mediate delivery of a privileged installer. It provides no Authenticode publisher verification, Microsoft-published checksum validation, or other integrity check before installation.

Although the embedded GitHub URL names a specific release, the bytes received by the user originate through an additional trust boundary. A compromised proxy, hosting account, TLS endpoint, or proxy implementation could substitute the requested file.

Attack Path

1. A user cannot access GitHub reliably and follows the proxy-based fallback.
2. The third-party proxy or its delivery infrastructure is compromised or malicious.
3. The proxy returns a substituted MSI under the expected filename.
4. The user executes the downloaded MSI according to the administrator-level installation workflow.
5. The substituted installer executes with elevated Windows privileges.

Impact Assessment

A malicious MSI launched as administrator may obtain broad Windows host privileges, modify system files and services, install persistent components, access user data, and compromise both Windows and WSL environments. This has a potentially wider impact than compromise limited to the WSL guest.

Remediation

View remediation

Remediation Suggestions

• Download WSL only through Microsoft-controlled release channels or the Microsoft Store.
• Avoid third-party proxies for privileged executable content.
• Verify that the MSI has a valid Authenticode signature from the expected Microsoft publisher before running it.
• Compare the file against a Microsoft-published SHA-256 digest where available.
• Abort installation if signature or digest validation fails.
• If offline transfer is necessary, obtain the file on a trusted system, verify it there, and transfer it through a controlled medium.

T09 · Insecure Skill Coding Practices

Error

• Location: SKILL.md:649

Finding

Installation Troubleshooting Recommends Disabling Antivirus Protection

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:649-651
Vulnerability Type: Security-control weakening during software installation
Risk Level: High

Vulnerable Instructions:

text

1. Temporarily disable third-party antivirus
2. Run installer as administrator
3. If still fails, try manual download and install Ubuntu from Microsoft Store

Technical Analysis

The troubleshooting guidance recommends disabling antivirus protection and then running an installer with administrator privileges. It does not first require verification of the installer's source, digital signature, or cryptographic hash. It also provides no explicit restoration step, time limit, or narrowly scoped exclusion.

This creates a high-risk window in which the unverified remote script, proxy-delivered MSI, or unrelated malware can operate with reduced endpoint detection while privileged installation activity is occurring.

Attack Path

1. Installation fails with an access-denied error.
2. The user disables third-party antivirus as instructed.
3. The user launches an installer with administrator privileges.
4. A malicious or substituted installer executes while antivirus protection is inactive.
5. The installer modifies the system, steals data, or establishes persistence with a reduced chance of detection.
6. Because no restoration instruction is provided, protection may remain disabled after troubleshooting.

Impact Assessment

Exploitation can result in administrator-level Windows compromise, including access to user data, system configuration, services, credentials available to the current user, and WSL distributions. The exposure is not limited to OpenClaw because all processes running during the disabled period receive reduced protection.

Remediation

View remediation

Remediation Suggestions

• Do not recommend globally disabling antivirus as a routine troubleshooting step.
• Verify installer origin, Authenticode signature, and cryptographic digest before execution.
• Diagnose blocked operations through antivirus logs and vendor-supported procedures.
• If an exception is demonstrably necessary, use the narrowest possible file, process, or directory exclusion.
• Require that any temporary exclusion be removed immediately after the verified operation.
• Prefer installation through Microsoft-controlled channels.
• Warn users to stop if the verified publisher or expected digest is absent.

T09 · Insecure Skill Coding Practices

Error

• Location: SKILL.md:658

Finding

Troubleshooting Recommends Disabling Windows Memory Integrity

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:658-660
Vulnerability Type: Host kernel-protection weakening
Risk Level: High

Vulnerable Instructions:

text

1. Disable Core Isolation in Windows Defender: Windows Security → Device Security → Core Isolation → Memory Integrity → Off
2. Reboot and try again
3. If that doesn't work, uninstall WSL completely and reinstall

Technical Analysis

Memory Integrity is a virtualization-based Windows security control intended to make kernel compromise and loading of untrusted or incompatible kernel components more difficult. Disabling it weakens host-level protections and exceeds the minimum privileges required for a normal WSL or OpenClaw installation.

The guide does not establish that Memory Integrity is the verified root cause, identify a specific compatible component, or instruct the user to restore the control. The recommendation is especially risky in a workflow that also downloads executables through external sources and runs installation commands with elevated privileges.

Attack Path

1. WSL fails to start and the user follows the troubleshooting section.
2. The user disables Memory Integrity and reboots.
3. A malicious or vulnerable privileged component is installed or executed during the reduced-protection state.
4. The component exploits the weaker kernel-security posture to load or operate.
5. The protection remains disabled because the guide does not require re-enablement.

Impact Assessment

Disabling this protection increases exposure of the entire Windows host to kernel-level attacks and malicious or vulnerable drivers. A successful attack at that level can bypass user-space controls, modify protected system state, access sensitive information, and establish highly privileged persistence.

Remediation

View remediation

Remediation Suggestions

• Remove the generic instruction to disable Memory Integrity.
• Use Microsoft-supported WSL diagnostics and updates to resolve compatibility problems.
• Identify and update or remove the specific incompatible signed driver rather than disabling the global protection.
• Require verification of all privileged installers and drivers.
• If disabling the control is an unavoidable, vendor-confirmed diagnostic step, clearly define the limited duration and require immediate re-enablement after testing.
• Confirm after reboot that Memory Integrity is enabled again.

T09 · Insecure Skill Coding Practices

Warning

• Location: SKILL.md:491

Finding

Overly Broad Inbound Firewall Rule Exposes the OpenClaw Service

Content

View full analysis

Vulnerability Details

File Location: SKILL.md:491
Vulnerability Type: Unrestricted inbound network exposure
Risk Level: Medium

Vulnerable Code:

powershell

New-NetFirewallRule -DisplayName "OpenClaw-Service" -Direction Inbound -Action Allow -Protocol TCP -LocalPort 18789

Technical Analysis

The firewall rule allows inbound TCP traffic to port 18789 without restricting the network profile, local interface, application, service identity, or remote source address. It may therefore expose the OpenClaw gateway on public or otherwise untrusted networks if the service listens beyond loopback.

The guide describes browser access from the same Windows host, for which a broad inbound rule may not be required if the gateway is bound to localhost. The rule consequently exceeds the minimum network access necessary for the declared local-use scenario.

Attack Path

1. The user creates the unrestricted inbound firewall rule.
2. OpenClaw Gateway listens on port 18789 on a non-loopback interface.
3. The Windows system connects to a public, shared, or hostile network.
4. A network peer scans for and connects to port 18789.
5. The peer attempts to exploit gateway vulnerabilities, weak authentication, insecure configuration, or exposed administrative functions.

Impact Assessment

The rule increases the externally reachable attack surface of the gateway. The resulting impact depends on OpenClaw's authentication and service vulnerabilities, but it may include unauthorized gateway access, exposure of service data, misuse of configured integrations, or command execution through a vulnerable service. The exposure can affect any network profile on which the rule is active.

Remediation

View remediation

Remediation Suggestions

• Bind the OpenClaw service to 127.0.0.1 or the required loopback interface for local browser access.
• Do not create an inbound firewall rule when localhost forwarding is sufficient.
• If remote access is required, limit the rule to the Private profile.
• Restrict RemoteAddress to explicitly trusted hosts or subnets.
• Restrict the rule to the specific application or service where supported.
• Require strong authentication and encrypted transport before permitting remote access.
• Document how to remove the rule when OpenClaw is uninstalled or remote access is no longer needed.

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Rogue Agent: Self-Modification, Session Persistence

Findings (25)

Chaining Abuse

High

• Category: Tool Misuse
• Confidence: 75% confidence

Finding

Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow.

Content

Scanner excerpt · SKILL.md (reported line 250)May include surrounding context.

bash

sudo sed -i 's|http://archive.ubuntu.com/ubuntu|https://mirrors.aliyun.com/ubuntu|g' /etc/apt/sources.list
sudo sed -i 's|http://security.ubuntu.com/ubuntu|https://mirrors.aliyun.com/ubuntu|g' /etc/apt/sources.list
sudo apt update && sudo apt upgrade -y

After completing, skip to Chapter 4. / 完成后跳转到第四章继续。

Missing User Warnings

High

• Category: Not specified by scanner
• Confidence: 99% confidence

Finding

curl -fsSL https://molt.bot/install.sh | bash executes network-fetched code directly in the shell without review, integrity verification, or provenance controls. In this skill's context, that is especially risky because earlier steps encourage elevated privileges and system configuration changes, so a compromised script or domain could lead to arbitrary code execution and full environment takeover.

Content

No source excerpt is available for this finding.

External Script Fetching

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The guide instructs users to fetch and immediately execute a remote shell script from molt.bot. This is a classic supply-chain risk: if the server, DNS, TLS endpoint, or delivered script is compromised, arbitrary code runs on the user's machine, and the surrounding guide normalizes elevated privileges and firewall exposure, making impact worse.

Content

Scanner excerpt · SKILL.md (reported line 503)May include surrounding context.

Run after entering WSL: / 进入 WSL 后执行：

bash

curl -fsSL https://molt.bot/install.sh | bash

4.4 Fix PATH Environment Variable / 修复 PATH 环境变量

Chaining Abuse

High

• Category: Tool Misuse
• Confidence: 99% confidence

Finding

The | bash construct causes immediate execution of data streamed from the network, eliminating any chance for user review or integrity checks. In combination with installation and system-configuration steps, this creates a high-risk arbitrary-code-execution vector with potential for full compromise of the WSL environment and adjacent host-accessible assets.

Content

Scanner excerpt · SKILL.md (reported line 503)May include surrounding context.

Run after entering WSL: / 进入 WSL 后执行：

bash

curl -fsSL https://molt.bot/install.sh | bash

4.4 Fix PATH Environment Variable / 修复 PATH 环境变量

YARA rule 'backdoor_persistence': Backdoor persistence with malicious payloads (shell commands, SSH key injection, hidden root users) [malware]

High

• Category: YARA Match
• Confidence: 75% confidence

Finding

YARA rule matched a known malware signature (reverse shell, backdoor, ransomware, C2 framework, or info stealer).

Content

Scanner excerpt · SKILL.md (reported line 511)May include surrounding context.

Run after entering WSL: / 进入 WSL 后执行：

bash

curl -fsSL https://molt.bot/install.sh | bash

4.4 Fix PATH Environment Variable / 修复 PATH 环境变量

If after installation it says openclaw command not found, that means npm global bin directory isn't in PATH: / 如果安装完成后提示 openclaw 命令找不到，说明 npm 全局 bin 目录没有加入 PATH：

bash

echo 'export PATH="/home/openclaw/.npm-global/bin:$PATH"' >> ~/.bashrc
source ~/.bashrc

Verify: / 验证：

bash

which openclaw
openclaw --version

4.5 Run Initialization Wizard / 运行初始化向导

bash

openclaw setup

Follow the wizard prompts to complete configuration. / 按照向导提示完成配置即可。

Chapter 5: LLM Model Configuration / 第五章：LLM 模型配置

After installing OpenClaw, you need to configure your own LLM API key in the setup wizard. The setup wizard will prompt you to select an LLM provider and enter your API key. Please choos

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 240)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 241)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 242)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 248)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 249)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 250)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 614)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 690)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 850)May include surrounding context.

Run inside WSL: / 进入 WSL 后执行：

bash

sudo apt update
sudo apt upgrade -y
sudo apt install -y curl wget git

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 392)May include surrounding context.

md

# 给用户设置密码（输入时无回显，务必牢记）
passwd openclaw

# 3. Add user to sudo group for admin privileges
# 给用户赋予 sudo 管理员权限
usermod -aG sudo openclaw

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 393)May include surrounding context.

md

# 给用户设置密码（输入时无回显，务必牢记）
passwd openclaw

# 3. Add user to sudo group for admin privileges
# 给用户赋予 sudo 管理员权限
usermod -aG sudo openclaw

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 394)May include surrounding context.

md

# 给用户设置密码（输入时无回显，务必牢记）
passwd openclaw

# 3. Add user to sudo group for admin privileges
# 给用户赋予 sudo 管理员权限
usermod -aG sudo openclaw

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 70% confidence

Finding

Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.

Content

Scanner excerpt · SKILL.md (reported line 427)May include surrounding context.

md

# 给用户设置密码（输入时无回显，务必牢记）
passwd openclaw

# 3. Add user to sudo group for admin privileges
# 给用户赋予 sudo 管理员权限
usermod -aG sudo openclaw

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 97% confidence

Finding

This line introduces passwordless sudo as a recommendation, which weakens privilege separation for the entire environment. In a guide that also fetches and executes remote installer code, removing sudo prompts significantly increases the blast radius of any malicious or compromised command executed under that account.

Content

Scanner excerpt · SKILL.md (reported line 400)May include surrounding context.

配置 WSL 默认登录用户为刚创建的用户

echo -e "[user]\ndefault = openclaw" >> /etc/wsl.conf

5. (Recommended) Configure passwordless sudo to avoid repeated typing during install

配置 sudo 免密（推荐，避免安装过程频繁输入密码）

echo "openclaw ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers

text

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The guide recommends appending openclaw ALL=(ALL) NOPASSWD: ALL to /etc/sudoers, granting unrestricted passwordless root access to that user. In an installation guide for running third-party software, this materially lowers privilege boundaries: any compromise of the user account, shell session, package script, or application process becomes instant root compromise without further prompts.

Content

No source excerpt is available for this finding.

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 99% confidence

Finding

Appending openclaw ALL=(ALL) NOPASSWD: ALL to /etc/sudoers gives the user unrestricted root execution without authentication. That creates a direct privilege-escalation path for any process running as that user, including installer scripts, browser-driven actions, compromised packages, or malicious shell commands.

Content

Scanner excerpt · SKILL.md (reported line 401)May include surrounding context.

echo -e "[user]\ndefault = openclaw" >> /etc/wsl.conf

5. (Recommended) Configure passwordless sudo to avoid repeated typing during install

配置 sudo 免密（推荐，避免安装过程频繁输入密码）

echo "openclaw ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers

text

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The guide opens inbound firewall access on TCP port 18789 with a broad allow rule and does not advise restricting source scope, interface, or profile. This can unnecessarily expose the OpenClaw service to other hosts on the local network, and if the service is insecure or misconfigured, it increases attack surface beyond localhost.

Content

No source excerpt is available for this finding.

External Transmission

Medium

• Category: Data Exfiltration
• Confidence: 60% confidence

Finding

Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Content

Scanner excerpt · SKILL.md (reported line 575)May include surrounding context.

• Cause / 原因: Network connectivity to GitHub is unstable in China / 国内网络访问 GitHub 不稳定
• Solution / 解决: Use ghproxy.com mirror to download, e.g.: / 使用 ghproxy.com 镜像下载，例如：

  bash

  curl -fSL https://ghproxy.com/https://github.com/microsoft/WSL/releases/download/2.3.26/wsl.2.3.26.0.x64.msi -o wsl-install.msi
  

Pitfall 3: Hyper-V components not enabled / 坑 3：Hyper-V 组件未启用

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 60% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 766)May include surrounding context.

md

https://chromewebstore.google.com/detail/openclaw-browser-relay/nglingapjinhecnfejdcpihlpneeadjp

### 8.2 Create Ubuntu Desktop Shortcut / 创建 Ubuntu 桌面快捷方式

To create a desktop shortcut for quickly launching WSL Ubuntu, follow these steps:

Session Persistence

Medium

• Category: Rogue Agent
• Confidence: 60% confidence

Finding

Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Content

Scanner excerpt · SKILL.md (reported line 766)May include surrounding context.

md

https://chromewebstore.google.com/detail/openclaw-browser-relay/nglingapjinhecnfejdcpihlpneeadjp

### 8.2 Create Ubuntu Desktop Shortcut / 创建 Ubuntu 桌面快捷方式

To create a desktop shortcut for quickly launching WSL Ubuntu, follow these steps: