QClaw Config Guardian

• Outcome: Pass
• Latest audit: May 28, 2026 at 6:12 AM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed local QClaw configuration backup and health-check tool, but users should treat its backups as sensitive.

Install only if you want an agent to read QClaw/OpenClaw configuration and cron data and write local backup files. Confirm before any restore or automatic heartbeat workflow, and protect or delete old backups if they may contain channel targets, plugin settings, schedules, or secrets embedded in configuration.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (5)

Vague Triggers

Medium

• Confidence: 88% confidence
• Finding: The skill advertises broad trigger phrases around backup, restore, checking configuration, and upgrades without clear gating conditions. In an agentic environment, ambiguous triggers can cause unintended execution of configuration backup or restore workflows, which may alter system state or expose sensitive configuration data without explicit user intent.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The trigger section lists short, common phrases like '恢复配置' and '版本升级' with no disambiguation, making accidental invocation likely during normal conversation. Because this skill performs filesystem and configuration-management actions, unintended triggering could lead to backup creation, config comparison, or restoration at inappropriate times.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The documented workflow includes backing up cron jobs and configuration files, saving data to temporary JSON, and copying backups to a backup directory, but it does not warn users that potentially sensitive operational data will be stored. Cron definitions, channel mappings, and plugin states may reveal schedules, identifiers, or internal infrastructure details, so silent backup behavior creates privacy and data-handling risk.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The automatic detection mechanism states that first run and version changes trigger automatic backup and notifications, but it does not disclose the privacy or operational impact of those actions. Auto-triggered backups can capture sensitive configuration without immediate user awareness, and notifications may leak system-change metadata depending on their destination.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The script backs up potentially sensitive configuration data, including channels, plugins, and cron job metadata, into JSON files on disk without any access-control hardening, encryption, redaction, or explicit user warning. If these backups are stored in a world-readable location, synced to cloud storage, or later exfiltrated, they may disclose operational details, secrets embedded in config, or task schedules.

VirusTotal

VirusTotal findings are pending for this skill version.