Security audit
Security checks across malware telemetry and agentic risk
This plugin is not clearly malicious, but it takes broad automatic control over the OpenClaw workspace, memory, scheduled jobs, and agent behavior with weak scoping and user control.
Install only after reviewing the code and accepting that it will run local commands, modify your OpenClaw workspace, persist conversation-derived state, alter agent behavior rules, scan existing memories and skills, contact clawhub.ai for version checks, and replace existing OpenClaw cron jobs. Use a separate test workspace first and avoid installing in an environment with important existing cron tasks or sensitive memory/config data.
return {"status": "error", "message": f"脚本未找到: {script}"}
try:
result = subprocess.run(
[sys.executable, target] + (args or []),
cwd=WORKSPACE, capture_output=True, text=True, timeout=60
)try:
se_path = os.path.join(WORKSPACE, "core", "engines", "hooks", "self_evolution_v3.py")
if os.path.exists(se_path):
r = subprocess.run(
[sys.executable, "-c", "import sys; sys.path.insert(0,'.'); from core.engines.hooks.self_evolution_v3 import SelfEvolutionEngine; print('ok')"],
cwd=WORKSPACE, capture_output=True, text=True, timeout=15
)try:
at_path = os.path.join(WORKSPACE, "core", "engines", "tools", "auto_tuning.py")
if os.path.exists(at_path):
r = subprocess.run(
[sys.executable, "-c", "import sys; sys.path.insert(0,'.'); from core.engines.tools.auto_tuning import init; print('ok')"],
cwd=WORKSPACE, capture_output=True, text=True, timeout=15
)cron_sh = os.path.join(WORKSPACE, "scripts", "register_crons.sh")
if os.path.exists(cron_sh):
try:
r = subprocess.run(["bash", cron_sh], cwd=WORKSPACE, capture_output=True, text=True, timeout=30)
return {"status": "ok" if r.returncode == 0 else "error", "output": r.stdout[:200]}
except Exception as e:
return {"status": "error", "message": str(e)[:200]}class_name = eng.get("class", "")
try:
module = __import__(module_path, fromlist=[class_name] if class_name else [])
if class_name:
getattr(module, class_name)
results["imported"] += 1}
try:
os.makedirs(os.path.dirname(CAPSULE_FILE), exist_ok=True)
with open(CAPSULE_FILE, "w", encoding="utf-8") as f:
json.dump(state, f, indent=2, ensure_ascii=False)
print(json.dumps({"status": "ok", "path": CAPSULE_FILE}))
except Exception as e:return {"status": "error", "message": f"脚本未找到: {script}"}
try:
result = subprocess.run(
[sys.executable, target] + (args or []),
cwd=WORKSPACE, capture_output=True, text=True, timeout=60
)# 追加规则（用分割线隔开，避免覆盖用户已有内容）
merged = existing.rstrip() + "\n\n" + rules_content
with open(SOUL_PATH, "w", encoding="utf-8") as f:
f.write(merged)
return {"status": "ok", "action": "merged", "position": "appended"}
else:f.write(merged)
return {"status": "ok", "action": "merged", "position": "appended"}
else:
with open(SOUL_PATH, "w", encoding="utf-8") as f:
f.write(rules_content)
return {"status": "ok", "action": "created"}try:
se_path = os.path.join(WORKSPACE, "core", "engines", "hooks", "self_evolution_v3.py")
if os.path.exists(se_path):
r = subprocess.run(
[sys.executable, "-c", "import sys; sys.path.insert(0,'.'); from core.engines.hooks.self_evolution_v3 import SelfEvolutionEngine; print('ok')"],
cwd=WORKSPACE, capture_output=True, text=True, timeout=15
)try:
at_path = os.path.join(WORKSPACE, "core", "engines", "tools", "auto_tuning.py")
if os.path.exists(at_path):
r = subprocess.run(
[sys.executable, "-c", "import sys; sys.path.insert(0,'.'); from core.engines.tools.auto_tuning import init; print('ok')"],
cwd=WORKSPACE, capture_output=True, text=True, timeout=15
)cron_sh = os.path.join(WORKSPACE, "scripts", "register_crons.sh")
if os.path.exists(cron_sh):
try:
r = subprocess.run(["bash", cron_sh], cwd=WORKSPACE, capture_output=True, text=True, timeout=30)
return {"status": "ok" if r.returncode == 0 else "error", "output": r.stdout[:200]}
except Exception as e:
return {"status": "error", "message": str(e)[:200]}65/65 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec