ClawHub
Back to skill

Security audit

gateway-notify

Security checks across malware telemetry and agentic risk

Overview

This skill installs a disclosed persistent startup notification hook that sends only a timestamp by default, with consent and uninstall guidance.

Install this only if you want a persistent hook that sends a message whenever the gateway starts. Verify the destination channel and address, remember that deleting the skill alone will not disable the hook, and avoid adding model, port, or other local configuration details to notifications unless you explicitly accept sending that data through the messaging provider.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Rogue AgentSelf-Modification, Session Persistence
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Context-Inappropriate Capability

Medium
Confidence
94% confidence
Finding
The optional example explicitly instructs users how to read local gateway configuration and include values such as model name and port in outbound notifications to third-party messaging services. Even though it is labeled optional and warns about exfiltration, it expands the skill from simple startup notification into documented data export of local configuration, which can leak sensitive operational metadata beyond the stated purpose.

Session Persistence

Medium
Category
Rogue Agent
Content
version: 2.1.5
description: "Set up automatic notifications when OpenClaw gateway restarts. Use when user wants to be notified of gateway startup events via any messaging channel (iMessage, WhatsApp, Telegram, Discord, etc.)."
permissions:
  - shell_exec      # runs setup_gateway_notify.sh to create hook files
  - file_write      # writes hook handler under ~/.openclaw/hooks/
  - hook_install    # registers a persistent gateway:startup hook
  - network_send    # hook sends outbound notification on every gateway startup
Confidence
93% confidence
Finding
create hook files - file_write # writes hook handler under ~/.openclaw/hooks/ - hook_install # registers a persistent gateway:startup hook - network_send # hook sends outbound notific

VirusTotal

65/65 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.destructive_delete_command

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn
Code
suspicious.destructive_delete_command
Location
references/MANUAL_zh.md:125

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn
Code
suspicious.destructive_delete_command
Location
references/MANUAL.md:105