file-transfer-thru-local-workspace

• Analyzed: May 11, 2026, 6:01 AM
• Findings: 1
• Version: 3.1.1
• Hash: d9749a74d0783b96fc06a94f55e2eb9061a67c7e87c7205b9e6513cfbbbcd3f6
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill implements a 'skill browser' feature in `src/upload-server.js` that allows anyone with the gateway token to download any installed skill bundle from the filesystem as a ZIP file, which could lead to the exfiltration of secrets or configurations stored in other skills. Additionally, the `install.sh` script extracts the primary OpenClaw gateway token/password and stores it in plaintext within a systemd service file (`openclaw-upload.service`), potentially exposing the main authentication secret to other local users. While these behaviors are documented as features in `SKILL.md` and `clawhub.json`, they represent significant security risks and an expanded attack surface.