Agent Task Manager

• Analyzed: May 12, 2026, 3:15 AM
• Findings: 1
• Version: 1.0.0
• Hash: f231bb812b7b8f46b00451d633cf6b9a7b51f540553bcf8ce1cebdeab62ac1fa
• Source: palm
• External report: View on VirusTotal

Findings (1)

The `scripts/cooldown.sh` file uses `eval "$COMMAND"`, which allows for arbitrary command execution. While intended for a benign purpose (rate-limiting a wrapped command), this is a high-risk primitive that could be exploited if the `$COMMAND` argument is supplied by untrusted input, potentially leading to unauthorized code execution by the OpenClaw agent. Additionally, the `orchestrator.py` and `task_parser.py` define and process task structures with `role`, `action`, and `message` fields, which, if not properly sanitized or if the underlying tools are vulnerable, could be used for prompt injection or command execution, although the current implementation only simulates these actions.