Security audit
OpenClaw Cost Guard (Budgets + Token-Saving Playbook)
Security checks across malware telemetry and agentic risk
Overview
This skill is a local cost-reporting helper that reads disclosed OpenClaw/Clawdbot session logs and does not show hidden network, destructive, or persistence behavior.
Reasonable to install for local cost monitoring. Before sharing reports or wiring alerts, remember that output may expose usage patterns, session IDs, and local file paths; keep alert secrets out of scripts and test budget checks in warn mode first.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.