ClawHub
Back to skill

Security audit

Resume After Gateway Restart

Security checks across malware telemetry and agentic risk

Overview

The skill appears to schedule a local OpenClaw resume workflow, with minor disclosure gaps but no artifact-backed malicious behavior.

Install only if you want this skill to create OpenClaw cron jobs for restart/resume handling. Review the cron job names and messages, and remove them if you no longer want the resume automation. Expect it to update a local memory/post-restart-task.md status file as part of the workflow.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Tool MisuseTool Parameter Abuse, Chaining Abuse, Unsafe Defaults
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Missing User Warnings

Medium
Confidence
91% confidence
Finding
This shell script creates a cron job whose message instructs the agent to append a handled status and timestamp to memory/post-restart-task.md. Although the behavior is embedded in the scheduled instruction, the script provides no explicit warning, confirmation prompt, or explanatory comment near the operation to disclose that it will modify a file as part of the resume flow.

Tool Parameter Abuse

High
Category
Tool Misuse
Content
if [[ -z "$THINKING" ]]; then THINKING="high"; fi

# Remove any previous stale jobs.
openclaw cron rm "$NAME_BACK" >/dev/null 2>&1 || true
openclaw cron rm "$NAME_RESUME" >/dev/null 2>&1 || true

# 1) "I'm back" message in its own Discord/Telegram message.
Confidence
95% confidence
Finding
rm "$NAME_BACK" >/dev/

Tool Parameter Abuse

High
Category
Tool Misuse
Content
# Remove any previous stale jobs.
openclaw cron rm "$NAME_BACK" >/dev/null 2>&1 || true
openclaw cron rm "$NAME_RESUME" >/dev/null 2>&1 || true

# 1) "I'm back" message in its own Discord/Telegram message.
openclaw cron add \
Confidence
95% confidence
Finding
rm "$NAME_RESUME" >/dev/

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.