Upgrade Openclaw

• Analyzed: May 11, 2026, 4:44 AM
• Findings: 1
• Version: 2.0.0
• Hash: 0654da96cf7a0ee81f048597b994df9867f28cfd83a5770529437446769e418f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill performs system-level upgrades and configuration audits, which involves reading the full application configuration and potentially sending it to external LLM providers for 'gap analysis'. While the skill is transparent about this behavior in SKILL.md and requires user approval before applying changes, the broad access to system settings and the practice of passing potentially sensitive configuration data to external APIs presents a significant risk of data exposure. Files involved: SKILL.md, settings.json.