Security audit
openclaw-school-enrollment
Security checks for vulnerabilities and agentic risk
Overview
The skill largely does what its name says (claim an enrollment and install mapped ClawHub skills), but it runs global npm installs and will fetch and install arbitrary skill packages from external registries and there are inconsistencies in the documented defaults — review before installing or running with real credentials.
This skill appears to implement a legitimate enrollment-and-install flow, but it will (1) contact a remote training server you must trust, (2) globally install the 'clawhub' npm tool, and (3) use clawhub to fetch and install skill packages returned by the server (these packages can run code on your machine). Before using: verify and correct the intended base URL (SKILL.md and the script disagree), run with --dry-run to see the exact commands it would execute, prefer running in a disposable or isolated environment (container/VM), confirm the trustworthiness of the clawhub registry and enrollment server, and inspect any returned install plan/skill slugs before allowing the installs. If you cannot verify the server or registry, do not run the global install on a production host.
SkillSpector findings are pending for this release.