Security audit

OpenClaw Skill Curator

Security checks for vulnerabilities and agentic risk

Overview

This plugin is a disclosed local workflow observer that stores redacted conversation snippets and can optionally create review-only skill proposals, without evidence of hidden exfiltration or automatic skill activation.

Install only if you are comfortable with a plugin that watches successful OpenClaw turns and keeps redacted workflow excerpts in a local SQLite database. Review reports before sweeping proposals, and use the optional cron only if you want periodic proposal creation; proposals still require human approval before becoming active skills.

Static analysis

Detected: suspicious.dangerous_exec

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: lib/cron.js:71
Evidence: return execFileSync("openclaw", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });

Shell command execution detected (child_process).

Critical

Code: suspicious.dangerous_exec
Location: lib/sweep.js:90
Evidence: return execFileSync("openclaw", args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });