other
Note
- Location
server-health.sh:29- Finding
System and Service Reconnaissance Exposes Operational Metadata
- Content
View full analysis
1 {printf "%-12s %3d%% %5dMB\n", $11, int($3), int($6/1024)}' | head -3 } ``` ```bash get_openclaw_pid() { pgrep -f "openclaw.*gateway" | head -1 || echo "" } ``` ```bash check_service() { local service=$1 if systemctl is-active --quiet "$service" 2>/dev/null; then echo "✅" elif pgrep -x "$service" >/dev/null 2>&1; then echo "✅" else echo "❌" fi } get_docker_containers() { if command -v docker &>/dev/null; then docker ps -q 2>/dev/null | wc -l else echo "0" fi } ``` ### Technical Analysis The script performs systematic enumeration of host processes, the OpenClaw gateway, Docker containers, and system services. This behavior is consistent with the advertised health-monitoring purpose and does not modify the host. Nevertheless, the generated output discloses operational information that may be sensitive when returned through a remotely accessible agent or messaging integration. The exposed information can include: - Names and resource consumption of high-CPU processes - Whether the OpenClaw gateway is running - The gateway process identifier - Whether selected system services are active - The number of running Docker containers - Host resource utilization and uptime The script does not implement authorization, redaction, or output-recipient validation. Security therefore depends entirely on the controls imposed by the surrounding agent and execution environment. ### Attack Path 1. An attacker obtains permission to invoke the skill through an exposed or insufficiently restricted agent interface. 2. The attacker runs `server-health.sh` with the standard or JSON mode. 3. The ...[truncated 1138 chars]- Remediation
View remediation