ClawHub
Back to skill

Security audit

BailingHub Agent Governance Executor

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed outbound executor for BailingHub-managed OpenClaw tasks, with credential and persistence risks that are explained and scoped in the artifacts.

Install only for a BailingHub target you control. Use a target-scoped executor token, keep OPENCLAW_FORWARD_ENV minimal, run BAILING_RUN_ONCE first with non-sensitive test data, and deploy persistently only under a non-root supervised service after confirming task data is allowed to reach the configured OpenClaw model provider.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Autonomous Decision Making

Medium
Category
Excessive Agency
Content
- A working, non-interactive OpenClaw agent.
- A stable executor id approved by the user, or permission to use the hostname.

Do not guess missing values. Never ask the user to paste the executor token into chat. Ask them to place it in a local secret store or hidden environment input.

## Connect
Confidence
80% confidence
Finding
Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
import { spawn } from 'node:child_process';
import { createHash } from 'node:crypto';
import { mkdtemp, rm, writeFile } from 'node:fs/promises';
import { hostname, tmpdir } from 'node:os';
import { join } from 'node:path';
Confidence
85% confidence
Finding
Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.dangerous_exec, suspicious.env_credential_access

Shell command execution detected (child_process).

Critical
Code
suspicious.dangerous_exec
Location
scripts/bailinghub-openclaw-executor.mjs:377

Environment variable access combined with network send.

Critical
Code
suspicious.env_credential_access
Location
scripts/bailinghub-openclaw-executor.mjs:53